Privacy Policy
Last updated: March 2025
Gone Surfing (“we”, “us”, “our”) operates the website gonesurfing.gr. We are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR).
This policy explains what data we collect, why we collect it, and your rights regarding that data.
1. Who We Are
Gone Surfing is a windsurfing and wingfoiling station located at Kouremenos Beach, Lassithi, Crete, Greece.
Data Controller: Gone Surfing
Location: Kouremenos Beach, Palekastro, Lassithi, Crete, Greece
Website: gonesurfing.gr
Contact: [email protected]
2. What Data We Collect
We collect the following personal data only when you voluntarily provide it:
Name and email address — when you submit a contact or booking enquiry form.
Message content — whatever you include in your enquiry or booking request.
Usage data — anonymous browsing data collected via Google Analytics (see Section 5).
3. Why We Collect It
We use your personal data only for the following purposes:
To respond to your booking or general enquiry.
To provide you with information about our lessons, rentals, and events.
To improve our website based on anonymous usage statistics.
We do not use your data for unsolicited marketing, and we do not sell your data to third parties.
4. Legal Basis for Processing
We process your data on the following legal bases under GDPR:
Contract / pre-contractual steps — to respond to booking requests.
Legitimate interest — to improve our website and services.
Consent — for any optional communications you explicitly opt into.
5. Google Analytics
We use Google Analytics to understand how visitors use our website. This tool collects anonymous data such as pages visited, time spent on site, and general geographic location (country level). No personally identifiable information is stored.
If you wish to opt out of Google Analytics tracking, you can install the Google Analytics Opt-out Browser Add-on.
6. Cookies
Our website uses cookies — small text files stored on your device — to help deliver a better experience. These include:
Functional cookies: Required for the website to work correctly (e.g., session management).
Analytics cookies: Used by Google Analytics for anonymous usage reporting.
You can disable cookies in your browser settings at any time. Note that some site features may not work correctly if cookies are disabled.
7. How Long We Keep Your Data
Contact and booking enquiry data is retained for up to 12 months, after which it is deleted, unless we are required to keep it for legal or administrative reasons. You may request deletion at any time (see Section 9).
8. Who Has Access to Your Data
Your personal data is only accessed by Gone Surfing staff directly involved in responding to your enquiry. We do not share your data with any third parties, except:
Our hosting/email provider — for technical delivery of your message. These providers are GDPR-compliant.
Google — for anonymous analytics data only (no personal data is shared).
Legal authorities — if required by law to do so.
9. Your Rights
Under GDPR, you have the following rights regarding your personal data:
Right of access — request a copy of the data we hold about you.
Right to rectification — ask us to correct inaccurate data.
Right to erasure — ask us to delete your data (“right to be forgotten”).
Right to restrict processing — ask us to limit how we use your data.
Right to object — object to our processing of your data.
Right to data portability — receive your data in a commonly used format.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) if you believe your rights have been violated.
10. Data Security
Our website uses HTTPS/SSL encryption to protect data transmitted between your browser and our server. We take reasonable technical and organisational measures to protect your data from unauthorised access or disclosure.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.
12. Contact
For any questions or requests regarding your personal data, please contact us: