Privacy Policy
Last updated: 13 August 2026
ThinkAthens respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how ThinkAthens (“ThinkAthens,” “we,” “us,” or “our”) collects, uses, stores and protects information when you visit ThinkAthens.com, use the ThinkAthens mobile application, communicate with us, create an account, make a booking, request travel services or otherwise interact with our services.
1. Information We Collect
Depending on how you use ThinkAthens, we may collect information including:
* Your name
* Email address
* Telephone number
* Account and login information
* Travel dates and itinerary information
* Hotel and accommodation information that you provide to us
* Flight, cruise, transfer or other transportation information that you provide to us
* Tour, activity and experience bookings
* Messages and communications with ThinkAthens
* Requests, preferences and information you voluntarily provide when planning your trip
* Transaction and booking information
* Device, browser and technical information
* App usage and website analytics
* Approximate or precise location information when you choose to enable a feature requiring location access
We may also store travel documents, itineraries, tickets, vouchers or other files that you provide to us or that we provide to you in connection with your trip.
We ask that you do not provide sensitive personal information unless it is genuinely necessary for us to provide a service you have requested.
2. How We Use Your Information
We may use your personal information to:
* Create and manage your ThinkAthens account
* Create and provide personalised travel itineraries
* Arrange tours, transfers, activities and other requested travel services
* Process and manage bookings
* Provide tickets, vouchers, confirmations and trip documents
* Provide recommendations relevant to your trip
* Communicate with you before, during and after your visit
* Respond to questions and provide customer support
* Send important trip information and service notifications
* Send push notifications where you have enabled them
* Process payments and maintain transaction records
* Improve the ThinkAthens website, app and services
* Understand how our website and app are used
* Prevent fraud, abuse or security incidents
* Comply with applicable legal, accounting and regulatory obligations
Where required by law, we will ask for your consent before using your information for marketing purposes.
3. Legal Bases for Processing
Where the General Data Protection Regulation (GDPR) applies, ThinkAthens processes personal data on one or more of the following legal bases:
Performance of a contract: when processing is necessary to provide a booking, tour, transfer, itinerary or other service you have requested.
Legitimate interests: when processing is reasonably necessary to operate, secure and improve ThinkAthens and provide customer service, provided those interests do not override your fundamental rights and freedoms.
Consent: where you have specifically agreed to processing, such as certain marketing communications, optional location features or non-essential technologies.
Legal obligation: where we are required to retain or process information under applicable law.
You may withdraw consent at any time where consent is the legal basis for processing.
4. Personalised Trip Information
Registered ThinkAthens users may receive personalised content relating specifically to their trip.
This may include itineraries, transportation details, accommodation information, reservations, recommendations, tickets, vouchers and other travel documents.
Personalised trip information is intended only for the traveller or travellers associated with that booking. We use account access controls and other reasonable measures intended to prevent one customer from accessing another customer’s private trip information.
5. Payments
When payments are available through ThinkAthens, payment processing may be handled by Wix Payments or other authorised third-party payment providers.
ThinkAthens does not intentionally store complete payment-card information when payment information is processed directly by an authorised payment provider.
Payment providers process information according to their own privacy and security policies.
6. Wix and Other Service Providers
ThinkAthens uses Wix to provide website, mobile application, hosting, member-account, booking, communication, analytics and related technology services.
As a result, certain personal information may be processed through Wix systems in order to provide ThinkAthens services.
Wix maintains its own privacy and security practices and policies.
We may also use other trusted service providers where reasonably necessary to operate ThinkAthens, including payment processors, analytics providers, email and communication services, mapping services and travel suppliers.
We only provide these parties with information reasonably necessary for the relevant purpose and require appropriate protection of personal information where applicable.
7. Travel Suppliers
When you ask ThinkAthens to arrange a service, we may need to provide relevant information to the company or person providing that service.
These may include:
* Licensed tourist guides
* Drivers and transportation companies
* Tour and activity operators
* Cruise or maritime operators
* Restaurants
* Ticketing providers
* Accommodation providers
* Other travel suppliers involved in fulfilling your request
For example, a transfer provider may require your name, telephone number, flight information and pickup location.
We only share information reasonably necessary to arrange or provide the requested service.
8. International Data Transfers
Some technology providers, payment processors, travel suppliers or other service providers used by ThinkAthens may process personal information outside Greece or the European Economic Area.
Where GDPR applies, we use providers and safeguards intended to provide an appropriate level of protection for international transfers of personal data as required by applicable law.
9. Location Information and Maps
Certain ThinkAthens features may use mapping or location services.
If a feature requests access to your device’s location, you may choose whether to grant that permission through your device settings.
Where possible, you may use relevant features without providing precise location information.
You may change or revoke location permission through your device settings at any time.
10. Cookies and Similar Technologies
ThinkAthens.com and associated services may use cookies and similar technologies necessary to operate the website, maintain sessions, remember preferences, provide security and understand website usage.
Where required by applicable law, non-essential cookies and similar technologies will only be used after appropriate consent.
Users may manage available cookie preferences through the website’s consent controls and their browser settings.
11. Communications and Push Notifications
If you enable notifications, ThinkAthens may send messages relating to your trip, bookings, changes, reminders, recommendations or other relevant information.
You may disable push notifications at any time through your device settings.
Marketing communications will be provided in accordance with applicable law, and you may unsubscribe from marketing communications at any time.
12. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.
Trip-specific information may be retained while your trip is active and for a reasonable period afterward to provide customer service and maintain appropriate business records.
Certain booking, transaction and accounting information may be retained for longer periods where required by tax, accounting, legal or regulatory obligations.
When personal information is no longer required, we will delete, anonymise or otherwise securely dispose of it where reasonably practicable and permitted by law.
13. Your Privacy Rights
Depending on your location and applicable law, you may have rights regarding your personal information.
Under the GDPR, these may include the right to:
* Request access to your personal information
* Request correction of inaccurate information
* Request deletion of your information
* Request restriction of certain processing
* Object to certain processing
* Receive certain information in a portable format
* Withdraw consent where processing is based on consent
* Lodge a complaint with the appropriate data protection authority
To exercise a privacy right, contact ThinkAthens using the contact information below.
We may need to verify your identity before fulfilling certain requests.
14. Account Deletion
ThinkAthens users may request deletion of their account and associated personal information.
Where account creation is available through the ThinkAthens mobile application, users will be provided with a method to initiate account deletion.
You may also contact ThinkAthens to request deletion of your account or personal information.
Some information may be retained after account deletion where necessary to comply with legal, tax, accounting, fraud-prevention or regulatory obligations.
15. Data Security
We use reasonable administrative, organisational and technical measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
Users are responsible for protecting their account credentials and should contact ThinkAthens if they believe their account has been compromised.
16. Children’s Privacy
ThinkAthens is not designed for children to create independent accounts or make travel purchases without appropriate involvement from a parent, guardian or responsible adult.
Information about minors may be processed when reasonably necessary as part of a family or group travel booking and provided by an authorised adult.
17. Third-Party Links and Services
ThinkAthens may provide links to maps, restaurants, attractions, transportation providers, booking services and other third-party websites or applications.
Third-party services operate under their own terms and privacy policies. ThinkAthens is not responsible for the privacy practices of independently operated third-party services.
18. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes to ThinkAthens services, technology, legal requirements or business practices.
The current version will be published on ThinkAthens.com with the date of the most recent update.
Material changes may also be communicated through the ThinkAthens app or other appropriate means.
19. Contact ThinkAthens
Questions about this Privacy Policy, your personal information or a privacy request may be directed to:
ThinkAthens
Athens, Greece
Website: ThinkAthens.com
Email: info@thinkathens.com
For GDPR purposes, ThinkAthens is responsible for determining how and why personal information covered by this Privacy Policy is processed.
Individuals in the European Economic Area also have the right to lodge a complaint with their competent data protection authority.