Terms & Conditions - Privacy Policy

Privacy Notice Cityzen App & cityzenparking.com - Cityzen Customer

Are you a Cityzen customer?

The Societe Anonyme Cityzen Parking & Services is committed to protecting your personal data. Therefore, we take the necessary and proportionate measures to protect, secure and maintain the integrity and availability of your data, which are processed through the website www.cityzenparking.com ("Website") and the application Cityzen Parking & Services ("Application") provided for iOS and Android devices.

Users are asked to carefully read the Website and Application Privacy Notice. By using either the Website or the Application, you accept the terms of this Privacy Notice. If you do not agree to the terms of this Privacy Notice, you must not use the website or application. Using the Website or Application after modifications to this Privacy Notice constitutes your acceptance of those changes.

The Privacy Notice is directly linked to and accompanies the Terms of Use of the Website and the application. Please refer to them for more information (https://cityzenparking.com/en/pages/terms-of-use-web-app -)

Data Controller / Reservations for Athens International Airport

The company under the name "Cityzen Parking Systems SA", based at 294 Kifissias Avenue & 1 Tzouna, Athens and email info@cityzen.com.gr (hereinafter Cityzen), is the owner and administrator of the website www.cityzen.com.gr and data controller for the personal data processed via the website and for the services it offers.

Cityzen has appointed Mr. Konstantinos Kakavoulis as Data Protection Officer, with whom you can contact by sending an email to privacy@cityzen.com.gr.

Data we collect from you

Through the website and the application, Cityzen customers may buy / reserve one of the services offered by the company such as parking reservations, modification or cancellation of reservations and the relevant payment, reservations and payment appointments for car wash or biological cleaning, securing parking offers. We collect the following data:

Identification data	Name Surname Personal Password
Communication Data	Email Phone (Optional)
Personal Information	Car plate Location (Upon consent/ setting)
Data about the transaction	Date & Time of Reservation Date & Time of Payment Means of Payment

In case of interest for a monthly parking space, for the Share the Space service and for the Cityzen Storage Program, the following personal data of users is collected through the website:

Communication Data	Name Surname Email Telephone number
Personal Information	Area of residence Discount coupon
Data for Invoicing (for monthly parking space)	Profession Registered Office TIN Tax Authority
Personal Preferences	Parking Station that the user is interested in Type of User’s interest Time for communication
Other information	Monthly card number (if a card is issued) Application number

The above-mentioned data are collected for you, either when you apply for a monthly parking service as an individual or if you have been authorized to do so, on your behalf or on behalf of a third person, by a company or organization, which is a Cityzen customer. In this case, the company/organization that has authorized you acts as Data Controller for your personal data, while Cityzen acts as Data Processor.

By subscribing to the newsletter and its receipt, as well as with the sending of offers the following personal data of users are collected:

Communication Data	Email
Personal Information	IP address
User Interaction Data	Date & time of interaction with the link

If you have given your consent for commercial communication, via sms / viber messages, User Interaction Data is also collected.

Moreover, in case your vehicle has been damaged within the Cityzen premises, for which you are entitled to receive compensation by Cityzen, we shall transmit your full name, vehicle license plate, vehicle type and phone number to the insurance company we cooperate with, Ethniki Asfalistiki. The purpose of this data transmission is to schedule an appointment with Ethniki Asfalistiki to record the damage. After the transmission of your data, Ethniki Asfalistiki operates as an independent data controller. Please read the Privacy Policy provided by the insurance company to learn more about your data processing by Ethniki Asfalistiki.

Data we collect by automated means

When you use our website or our application, your device automatically provides us with data so that we can serve and tailor our response to you. The type of information we collect through automated means generally includes technical information about your device, such as the IP address or other device ID, the type of device you are using, and the version of the operating system.

The data we collect may also include usage information and statistics about your interaction with the website.

We encourage you to read our Cookies Policy carefully to learn more about Cookies, how to use them and how you can control their use.

Purpose & Lawful Basis for personal data processing

The processing of personal data of website or application users is subject to the terms hereof, the relevant provisions of the General Data Protection Regulation (EU / 2016/679), and of the Greek law 4624/2019.

We use data we collect through our website or application for the following purposes and based on the following legal bases:

Purpose: Inform for our services

Legal basis: Company’s legitimate interests

Purpose: Provision of Services through the website and the application

Legal Basis: Necessary processing for the performance of a contract/ to take steps at the request of the data subject prior to entering into a contract

Purpose: Improving the website’s and the application’s offering

Legal basis: Company’s legitimate interests

Purpose: Measuring website traffic and gathering relevant statistics

Legal basis: Consent

Purpose: Improving the company's advertising campaigns

Legal basis: Consent

Purpose: Communication with users upon request and satisfaction of users’ requests

Legal basis: Necessary processing for the performance of a contract/ to take steps at the request of the data subject prior to entering into a contract

Purpose: Receive requests for monthly parking space , Share my Space, Storage

Legal basis: Necessary processing prior to entering into a contract at the request of the data subject

Purpose: Commercial promotion by subscribing to the newsletter or messaging service (SMS, Viber, etc.)

Legal basis: Consent

Purpose: Log in to the Application and creation of account

Legal Basis: Necessary processing prior to entering into a contract at the request of the data subject

Purpose: Provision of discounts

Legal basis: Legitimate interests of the Company

Purpose: Payment processing

Legal basis: Performance of a contract

Purpose: Transmission of transaction data to the Independent Authority of Government Revenue

Legal basis: Legal obligation

Purpose: Scheduling an appointment with Ethniki Asfalistiki for the recording of damage to your vehicle

Purpose: Legitimate Interests of the Company

Finally, we may also process and forward user personal data to take legal action in the interest of the Company or to comply with our legal obligations or orders from the relevant police, public and judicial authorities.

Data Retention

The data of users shall be kept for as long as this is required for the provision of the agreed services between the as well as for the necessary period of 15 years after its expiration or termination in any way, regardless if the provision of the services is performed with simultaneous payment/prepayment or not, for us to comply with legal / tax obligations and / or to protect the legal interests of Cityzen. However, payment and booking history will be kept directly accessible to users through their account for five years from the end of the year in which the contract was last created or modified or cancelled, if it was made with simultaneous payment / prepayment.

Data related to the creation of a user account on the website and / or the application is retained until the user requests the deletion of the account. The only exception is if the user has not made any reservation within the last five (5) years from the end of the year in which the last reservation was made or the account was created, in which case the account is also deleted.

The data of users who request monthly parking, share my space services or storage services and enter into a contract with the company is kept for as long as the contract for the provision of monthly parking, share my space services or storage services is active as well as for the necessary period of 15 years after its expiration or in any way termination for us to comply with legal / tax obligations and / or to protect the legal interests of Cityzen.

User data collected regarding requests for monthly parking, share my space services or storage services or related information but not get into contract with Cityzen is retained for the year in which they submitted their request or query, unless it is deemed necessary to maintain it for a longer period for our compliance with legal / tax obligations and / or for the protection of Cityzen's legitimate interests.

User data collected for sending newsletters and commercial communications with their consent is retained until the user revokes its consent and is deleted from the service, either by changing the corresponding settings on their device, or by using the unsubscribe option provided in relevant communications.

Data may exceptionally be retained for longer than the above mentioned times in case a) it is required by law, b) if Cityzen deems that they are linked to existing and / or possible legal disputes, (c) in order for Cityzen or a third party to defend its legal interests.

For the duration of the retention of the information collected through cookies, please be informed by the cookies policy.

Recipients of data

We transfer your data to third parties -data processors, when necessary for the sole purpose of providing our services. They may also need to become available to Cityzen personnel, and website maintenance technicians, who are external partners. All parties are bound by the obligation of confidentiality and due process.

We transmit your personal data to the company-provider of maintenance and troubleshooting services for the website and the application (Bapp to the company-provider of hosting services for the desktop & mobile app (Digital Ocean), to the company-provider of marketing / hybrid messaging and newsletter services (Apifon), to the company Website Analysis Services Provider (Google Analytics - Google). All parties operate as data processors and are bound by the obligation of compliance with the rules of confidentiality and lawful processing.

Your transaction data will be transmitted to the Independent Authority of Government Revenue through Softone. Softone acts as a data processor. The Independent Authority of Government Revenue is an independent data controller for your data.

Please note that your personal data related to your payment(s), shall be processed solely by PayPal (Europe) S.a.r.l. et Cie, S.C.A., which acts as an independent data controller. Cityzen does not receive any credit/debit card or PayPal account data. Cityzen shall only process the date & time of payment and the means of payment as a data controller.

Furthermore, the data that is described above may be transmitted to Ethniki Asfalistiki, in case your vehicle is damaged within the Cityzen premises. Ethniki Asfalistiki is an independent data controller for your data.

Please note that your personal data may be disclosed, in any case where we are required to do so under applicable law or when necessary for the purposes of our legal interests protection or in the context of processing by our partners or third parties (such as cloud services), always ensuring that the guarantees for its safety and protection is met.

Technical Measures of the Website & the Application

We work with the website's virtual private server service provider, Digital Ocean, to ensure that your personal data is protected. Digital Ocean maintains the data of our mobile app on its servers within the European Economic Area. Data is protected by European legislation.

We work with the hosting service provider Digital Ocean, to ensure that your personal data is protected. Digital Ocean maintains the data of our website on its servers within the European Economic Area. Data is protected by European legislation.

Our website and application use an encryption system (SSL) to ensure greater security during your navigation.

Cityzen uses third party vendors and hosting partners to provide the necessary hardware, software, storage and related technology required for the operation of the website and the application. We may store encrypted backups of our database to a third party storage provider to ensure its security in the event of an emergency or disaster.

Bapp operates as data processor, while Cityzen is the data controller.

Your rights

You have the following rights regarding your personal data
Right to information	You have the right to be informed about the collection and processing of your personal data
Right to access	You have the right to receive confirmation from us as to whether or not your personal data is being processed and, if so, you have the right to access your personal data in a concise, comprehensible, transparent and easily accessible form.
Right to correction	You can request and we will ensure that without undue delay we will correct inaccurate or incomplete personal data, including via a supplementary statement.
Right to erasure	You have the right to ask us to delete the personal data that concern you, without undue delay and we will proceed with the deletion, under the conditions set by the law.
Right to processing limitation	You have the right to ask us to limit processing activities to specific purposes only, subject to the conditions set by the law.
Right to object	You have the right to object, at any time and for reasons related to your particular situation, to the processing of personal data concerning you. We will no longer process personal data unless there are compelling and legitimate reasons for processing that override your interests, rights and freedoms or to establish, exercise or uphold legal claims.
Right to data portability	You have the right to receive the personal data concerning you, which you have provided us with, in a structured, commonly used and machine-readable format, as well as the right to request the transfer of such data to another processor without objection from us under the conditions set by the law.
Right to human interference	You have the right to not be subject to a decision made solely on the basis of automated processing, including profiling, which produces legal effects that concern you or significantly affect you in a similar way.
Right to withdraw consent	You have the right to withdraw the consent that you have provided for the processing of data at any time. The withdrawal of the consent does not impact the lawfulness of processing based on the consent prior to its withdrawal

If you have any questions about this privacy notice or would like to ask for clarification or if you wish to exercise any of your rights or withdraw your consent to any communication, please contact the Cityzen Data Protection Officer at privacy@cityzen.com.gr .

We will respond to your request within thirty (30) days of receipt. In the event that an extension of the above deadline is required for the investigation and / or processing of your request, we will inform you, explaining the reasons why the extension of the deadline is necessary.

In any case, if you feel that the protection of your personal data has been violated in any way, you have the right to file a complaint to the Hellenic Personal Data Protection Authority (www.dpa.gr). For the Authority’s jurisdiction and the way of submitting a complaint, you can visit its website where there is detailed information.

Modification of this Privacy Notice

We may make changes to this Notice from time to time. We may make these modifications for a variety of reasons, for example to reflect changes or requirements arising from the law, new features or changes in corporate practices. The latest version will be published in the relevant place on the website. You should check often to find the latest version. The latest version is the applicable one. If the changes involve significant ones that affect your rights or obligations, we will notify you in advance via reasonable means, which may include notice through the Website or by email. If you continue to use the Services after the changes take effect, you agree to the revised notice.

Last Modified: 20/9/2024