The company with the name … located in ………., ………………., on the street…. , (hereinafter the Company), acting in accordance with the General Data Protection Regulation – GDPR (EU 2016/679) and the provisions of the Greek legislation on the protection of personal data, hereby informs in its capacity as data controller, the visitors of this Website and its customers (hereinafter the Visitor/Customer) that the Company or third parties acting on its behalf will process their personal data in accordance with the following provisions:

The Company that manages this Website is committed to protecting the privacy of customers and uses only legally collected information concerning them and only under the terms of the General Regulation for the Protection of Personal Data and the applicable Greek legislation.

This Privacy and Customer Privacy Policy (hereinafter referred to as “Policy”) describes how personal information (“Personal Information”) that may be provided on the Website, as well as on any related service (collectively, “Services”), is collected, protected and used. It also describes the options available regarding the use of Personal Information and how the Customer may access and update such information. This Policy constitutes a legal agreement between the administrators of this Website and the Visitor/Customer, who, by accessing and using the Website and the Services, acknowledges that he/she has read and understood the terms of this Policy and has accepted them fully, expressly and unconditionally.

  1. EDITOR IN CHARGE

The company responsible for the processing of data is the company with the name …………,registered office ……………….  e-mail …………….

Contact person: …..

  1. DATA COLLECTED
  • Identification details such as name, surname, maiden name, date of birth, details of your identity card or passport (such as number, date and place of issue), driving licence number, Tax Identification Number.
  • Contact details, such as home and/or residence address, e-mail address, telephone number.
  • Payment details, such as credit/debit card number, PayPal, bank account number.
  • Identification details, such as username, IP address
  • Personal signature and/or initials

 

  1. PURPOSE OF DATA COLLECTION AND PROCESSING

The Company collects user data exclusively for the purposes of the services provided, such as making reservations for the rental of vehicles, the operation of the reservation system and the management of reservation requests, the sending of promotional material about the products and services of the Company. If the information required is not provided, the Company may not be able to provide the desired products and/or services. The information collected may be used for the operation of the Site and Services as well as for purposes such as providing user feedback, improving the user experience or protecting against malicious users.

Acting in accordance with European and Greek legislation, the Company processes only the data that is absolutely necessary for the maintenance and operation of the Website and the provision of its services. Specifically, the processing of the Visitor’s/Customer’s personal data takes place for the purposes of managing the contractual relationship of vehicle rental and invoicing of the services provided by us, managing of possible incidents during the rental period of the respective vehicle (such as accidents), managing of administrative and legal procedures that may arise from the contractual relationship, for the needs of communication with the respective contracting party, for informing the Visitors/Customers, about our information, products and services as well as any existing offers or promotions of new products and/or services.

  1. DATA RETENTION PERIOD

Personal data are kept for as long as necessary for the provision of the Company’s services and/or the completion of the contractual relationship and generally for as long as it is not necessary to delete them. They are also kept for as long as necessary to comply with the Company’s legal and tax obligations, which may not exceed twenty years.

  1. LAWFUL GROUND FOR PROCESSING

The processing of the Visitor’s/Customer’s personal data by the Company is based on the execution of the contractual relationship between them and the proper provision of the services entrusted to it. The processing of personal data for advertising and/or promotional purposes is based on the express consent and assent granted by the Visitor/Customer to the Company when using this Website. The Company has the right to directly obtain the Visitor’s/Customer’s personal data from social networks, if the latter registers and/or logs in as a user of the Website with the profiles he/she maintains in social networks or on google.

  1. THIRD PARTY DATA RECIPIENTS

The personal data may be transferred for further processing to third parties (such as banking institutions) for the management and processing of the payment of each reservation and the processing of each transaction. Personal data may also be transferred for further processing to the insurance companies with which the Company cooperates each time, for the purposes of managing and/or processing any accidents occurring during the respective vehicle rental, or for the purposes of insurance coverage in general of any insurable risk. The data shall be transferred to public and/or judicial authorities and organisations where required by law. Finally, the personal data may be transferred to third parties who process them on behalf of the Company, who are contractually bound to the latter for confidentiality, non-transfer of personal data to third parties without the Company’s permission, taking appropriate security measures, compliance with European and Greek legal rules for the protection of personal rights. The aforementioned third parties may, in the performance of their duties, employ other persons who may process personal data only with the consent of the Company and only subject to compliance with this policy in the context of their assigned responsibilities, being jointly and severally liable for this with the third party performers.

Categories of third-party recipients, indicatively and not restrictively: a) insurance companies cooperating with the Company, b) banking and/or credit institutions cooperating with the Company, c) users of the Company’s brands and systems cooperating with the Company, d) companies cooperating with the Company providing vehicle repair and maintenance services, bodywork, spare parts, etc, (e) accountants and auditors cooperating with the Company; (f) roadside assistance companies cooperating with the Company; (g) car reservation system management companies cooperating with the Company; (h) car rental companies cooperating with the Company, (i) legal advisers, legal consultants, co-counsel, bailiffs and legal service providers in general working with the Company in defending the interests and rights of the Company before any competent court and authority.

  1. USER RIGHTS

With regard to the information we collect and process, the Visitor/Customer has the right to access his/her personal data and also the following rights:

  • Withdraw the consent to the processing of information concerning him/her, where he/she has previously given it, without prejudice to the lawfulness of the processing based on the consent given before its withdrawal.
  • To object to the processing of his/her information.
  • To be informed if his/her information is processed by us or by third trusted parties.
  • To certify the accuracy of his or her information and request that it be updated or corrected.
  • To prohibit the processing of his/her information and/or request its deletion under certain circumstances and if it is no longer necessary for the purpose for which it was collected. In this case, the personal data will be retained only for the exercise and defence of any claims and rights of the Company or if required by compelling legitimate reasons.

Data protection rights under the GDPR: If the Visitor/Customer is a resident of the European Economic Area, he/she has certain specific rights to the protection of his/her personal data. In particular, he or she has the right:

  • Request access to the Personal Information we hold about him or her, to which he or she retains the right to access.
  • Request the correction of any Personal Information he or she considers inaccurate.
  • Request the deletion of his/her Personal Information, subject to certain conditions in this Policy.
  • To object to our processing of his/her Personal Information under certain circumstances of this Policy.
  • Withdraw his/her consent at any time from where he/she has provided it, without prejudice to the lawfulness of the processing based on the consent provided prior to its withdrawal.

If you would like to know what kind of Personal Information we hold about you, and if you wish to have it removed from our systems, please contact us.

Any request to exercise your rights can be addressed to us via the contact details included in this document. We may ask you to confirm your identity before we respond to such requests. Any such request will require you to provide sufficient details to enable us to understand and respond to your request.

The Company does not knowingly collect any Personal Information from children under the age of 18. If you are under the age of 18, please do not submit any Personal Information to the Website and Services.

  1. SECURITY OF PERSONAL DATA

The Company takes all necessary measures to protect the personal data of the Visitor/Customer for the sole purpose of security and protection from any unlawful processing. However, no data transmission on the Internet can be absolutely guaranteed. Thus, although we make every attempt to protect your Personal Information, you should be aware that there are limitations to the security and privacy of the Internet that are beyond our control, and that some information and data may be viewed or compromised in transit by third parties, despite our efforts.

We assure you that your personal information is held at a network transit provider located within Europe and that by holding your data in this way, we ensure compliance with the EU GDPR, reducing the risk of physical data theft, which is the most common type of data breach.

The Website and Services use “cookies” to help you personalize your online experience. These are text files placed on your hard drive by a web page server. These files cannot be used to run programs or deliver viruses to your computer. The “cookies” are uniquely assigned to you, and can only be read by a web server at the web address that issued it to you. The first time you enter your website a cookie policy notice is displayed. If you accept the terms, then a file is stored in your web browser. The file does not include any personal information, only acceptance, and is kept for 60 days unless you delete your history or clear the cookies.

We may use cookies to collect, store and track information for statistical purposes for the operation of the Site and Services. You have the option to accept or reject cookies. Most browsers automatically accept cookies, but you can usually modify your browser settings to reject cookies if you wish.

The Website and Services contain links to other sources and websites that are not owned and controlled by us, and with which we have no connection. Please note that we have no responsibility whatsoever for the privacy practices of such third party sources or websites. We encourage you to exercise caution when leaving this Site and the Services and to read the privacy statements of any source that may collect your Personal Information.

  1. POLICY AMENDMENT

The Company has the right to modify this Policy or the terms related to the Website and the Services at any time, at its sole discretion. Any change to the Policy will be effective immediately upon posting of the updated content only, unless otherwise specified. The Company will not, without the Visitor/Customer’s consent, use the Personal Information in a manner materially different from that stated at the time the Personal Information was collected.

  1. APPLICABLE LAW AND JURISDICTION.

This policy is governed by Greek law and shall be interpreted and applied in accordance with Greek law. For any dispute arising from the collection and processing of personal data, the courts of Athens shall have exclusive jurisdiction.

 

In case of a discrepancy between this translated version and the Greek version of the privacy policy, the latter shall prevail and apply.