This Privacy Policy explains how HOLMES PLACE EAST MED BV (hereinafter: “we”, “us”, “our”, “the Company”) collects, uses, stores, and protects your personal data when you visit or interact with the website www.karve.gr (the “Website”), in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Greek law.

1. Data Controller

HOLMES PLACE EAST MED BV
Email: [email protected]
Address: 40 AGIOU KONSTANTINOU, MAROUSI, ATHENS
Tax ID: 999868803
GEMI: [Insert GEMI number]

We operate the KARVE Transformer Pilates method in Greece under a franchise agreement with KARVE PARTNERS LTD, a UK-based company.

2. What Data We Collect

When using our Website, we may collect the following personal data:

Full name
Email address
Phone number
Payment information (processed via third-party providers)
Booking and attendance history
IP address and browser/device information
Cookies and usage data (see our Cookies Policy)

3. Why We Process Your Data

We process your personal data for the following purposes:

To provide and manage bookings and services
Customer support and communication
Sending newsletters and promotional material (with your consent)
Fulfilling legal obligations (e.g. invoices)
Analytics and service improvement (aggregated/anonymized)

4. Legal Basis for Processing

Our data processing is based on one or more of the following legal grounds:

Performance of a contract (e.g. booking classes)
Consent (e.g. newsletters)
Legal obligations (e.g. accounting compliance)
Legitimate interest (e.g. improving the Website)

5. Who We Share Data With

Your data may be accessed by:

Authorized employees or agents of HOLMES PLACE EAST MED BV
Payment providers and booking platforms
Third-party service providers (e.g. marketing, analytics, IT support) under contractual safeguards
Public authorities if required by law

We do not transfer personal data outside the EU, unless appropriate safeguards are in place (e.g. Standard Contractual Clauses).

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, and to comply with applicable legal obligations (e.g. up to 10 years for tax records).

7. Your Rights

Under the GDPR, you have the following rights:

Access your personal data
Correct inaccurate or incomplete data
Request deletion (“right to be forgotten”)
Restrict or object to processing
Data portability
Withdraw consent at any time (where applicable)

To exercise your rights, contact: [email protected]

8. Data Security

We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, or misuse.

9. Cookies

We use cookies to enhance user experience. Full details are available in our [Cookies Policy].

10. Changes to This Policy

We may revise this Policy from time to time. Updates will be posted on the Website with a new effective date.

11. Complaints

You have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

Privacy Policy