Privacy Policy & Personal Data Protection (GDPR)

Privacy Policy & Personal Data Protection (GDPR)

This Privacy Policy describes how Mountain Echoes collects, uses, and protects the personal data of users/participants, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek law.

1. Data Controller

  • Name: Mountain Echoes
    • Legal form: Sole proprietorship
    • Headquarters: Aigaleo, PC 12243, Greece
    • Contact email: This email address is being protected from spambots. You need JavaScript enabled to view it.
    • Website: www.mountainechoes.gr

2. What data we collect

During the online booking/participation process, we collect the following personal data:

Mandatory data (for registration and participation):

  • First name *
    • Last name *
    • Phone number *
    • Email *
    • Boarding point *

Optional data:

  • Address
    • City
    • Postal code
    • Country
    • Comments

Newsletter (optional):

  • Email address, with the user's express consent

3. Purpose of data processing

Personal data is used exclusively for:

  • Managing and confirming reservations/participation
    • Communicating with participants about activities
    • Organizing transportation (e.g., boarding points)
    • Compliance with legal obligations
    • Sending newsletters, only if consent has been given

4. Legal basis for processing

Data processing is based on:

  • The performance of a contract (participation in an activity).
    • The user's consent (newsletter, optional fields).
    • The company's legal obligations.

5. Transfer of data to third parties

Mountain Echoes does not transfer personal data to third parties, unless this is required:

  • By law or competent authorities.
    • For the smooth implementation of the activity (e.g. transport partners), only to the extent necessary.

In any case, the confidentiality and security of the data is ensured.

6. Data retention period

Personal data is only retained for as long as necessary:

  • For the implementation of the activity.
    • For tax and accounting reasons, where required.
    • For newsletters, until the user withdraws their consent.

7. Rights of data subjects

The user has the right:

  • To access their personal data.
    • To correct inaccurate or incomplete data.
    • To delete data ("right to be forgotten").
    • Restriction of processing.
    • Objection to processing.
    • Data portability.
    • Withdrawal of consent at any time

To exercise their rights, users can contact This email address is being protected from spambots. You need JavaScript enabled to view it. .

8. Data security

Mountain Echoes takes appropriate technical and organizational measures to protect personal data from loss, unauthorized access, or malicious use.

9. Cookies

The website may use cookies to improve the user experience. Detailed information is provided in the website's Cookies Policy.


10. Policy Changes

This Policy is subject to change. Any changes will be posted on the website www.mountainechoes.gr.

11. Underage Participants

Mountain Echoes activities are primarily intended for adults.

  • Participation is restricted to persons aged 18 and over.
  • Minors may participate only in exceptional cases, subject to the following strict conditions:
  • Mandatory accompaniment by a parent or legal guardian throughout the activity.
  • Submission of a written confirmation/affidavit of consent from both parents or legal guardians.
  • If the minor is accompanied by only one of the two parents, additional written consent from the second parent is required.

Mountain Echoes reserves the right to refuse the participation of a minor if the above documents are not provided or if it is deemed that the safety requirements of the activity are not met.

Last update: January 2026