1. Introduction The present Privacy Policy describes how our website collects, uses, stores and protects the personal data of its visitors. We are committed to protecting your privacy and processing your data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the applicable Greek legislation.
2. What is Personal Data? Personal data is any information relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is one whose identity can be verified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier or one or more factors that approximate the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
3. Data We Collect Our website may collect the following types of personal data:
- Contact Data: When you contact us via the contact form or by email, we collect your full name and email address.
- Car Rental Booking Data: When you make a reservation through our website, we collect the necessary data to process it, such as your full name, email address, phone number, and your booking details (e.g., vehicle, dates, location).
- Usage Data: Information about how you use our site (e.g. pages visited, time spent on our site). These are collected via cookies. For more information, please see our Cookies Policy.
4. Purposes of Processing and Legal Basis We process your personal data for the following purposes and on the respective legal bases:
- To Manage and Fulfill Bookings:
- Purpose: To process, confirm, and manage the car rental reservation you have made, to communicate with you about your booking, and to provide the requested service.
- Legal Basis: The performance of a contract to which you are a party (Article 6(1)(b) of the GDPR), as the processing is necessary for the provision of the booking service.
- For Contact:
- Purpose: Respond to your questions, comments or requests submitted through the contact form or by email.
- Legal Basis: Our legitimate interest in communicating effectively with users and providing support, and your consent when you make the request.
- For promotional activities (Newsletter):
- Purpose: Sending informative material, offers or coupons, provided that you have subscribed to our newsletter.
- Legal Basis: Your consent, which you can withdraw at any time.
- For User Experience Improvement and Analysis:
- Purpose: Analysis of the use of the website to improve our services and the functionality of the website.
- Legal Basis: Our legitimate interest in improving our website and services. In some cases, your consent (for analytical cookies).
5. Data Recipients The data you provide to us is not disclosed to third parties for their own purposes. However, in order to provide our services, we may share your data with the following partners/service providers:
- Payment Gateway Providers: To process payments related to your bookings (e.g., Stripe, PayPal). In this case, you are transferred to the secure environment of the payment provider, and your financial data is managed directly by them.
- Web Hosting providers: For technical support and operation of the website.
- Data analysis service providers (e.g. Google Analytics): To monitor traffic and improve the site.
- Email marketing service providers (if used): For the newsletter, provided that you have subscribed.
In all cases, we ensure that our partners adhere to the same strict data protection standards and act as processors on our behalf, bound by the necessary contractual clauses. In addition, we may disclose your data to public authorities if required by law.
6. Duration of data retention We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, in accordance with this Policy, and to comply with our legal obligations.
- Booking Data: They are retained for the period required by applicable tax and commercial law, as well as for as long as necessary to manage any potential legal claims.
- Contact Data: They are kept for as long as necessary to process your request and for a reasonable period of time after its completion, for archiving purposes.
- Newsletter Data: They are kept until you withdraw your consent.
- Cookies Data: Please refer to the Cookies Policy for the lifespan of cookies.
7. Your Rights You have the following rights regarding your personal data, in accordance with the GDPR:
- Right of Access
- Right of Rectification
- Right to deletion (“Right to Erasure”)
- Right of Processing Restriction
- Right of Data Portability
- Right of Rejection (Right to Object)
- Right of Withdrawal of Consent
To exercise any of the above rights, please contact us using the contact details provided on our website.
8. Data Security We take all necessary technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure or destruction. These include data encryption, firewalls, and strict data access policies.
9. Right of Complaint If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the competent supervisory authority. In Greece, this is the Hellenic Data Protection Authority (HDPA).
10. Contact For any questions or clarifications regarding this Privacy Policy or the processing of your personal data, you can contact us.