Logo Car and Travel Escursioni a Creta e servizi di noleggio auto

Privacy Policy of Car and Travel

At Car and Travel, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with the General Data Protection Regulation (GDPR) and Greek law.

1. What is Personal Data?

Personal data is any information that relates to an identified or identifiable natural person. This may include your full name, email address, phone number, postal address, IP address, location data, payment-related details, and other information that can identify you directly or indirectly.

2. Who is the Data Controller?

The data controller responsible for the processing of your personal data is:

Auto e viaggi
76 Ikarou Street, Heraklion, Crete, Greece, 71307
VAT Number: 800949948
Phone: +30 6932430390
Email: info@carandtravel.gr

3. What Does Processing Mean?

Processing means any operation performed on personal data, whether automated or not. This includes collection, recording, organisation, storage, use, consultation, disclosure, restriction, deletion, or destruction of data.

4. What Data We Collect

We collect only the personal data necessary to provide our services and complete your booking or enquiry. Depending on how you interact with us, this may include:

  • Your full name
  • Email address
  • Phone number
  • Address details
  • Booking information
  • Payment-related information through secure payment providers

We only collect the information you voluntarily provide to us.

5. Data Collected Automatically

When you use our website, some technical data may be collected automatically in order to improve website performance, analyse traffic, and enhance user experience. This may include:

  • IP address
  • Browser type
  • Device type
  • Operating system
  • Pages visited
  • Time spent on pages
  • Referring and exit pages

This information may be collected through cookies and analytics tools such as Google Analytics. For more information, please review Google’s Privacy Policy:

https://policies.google.com/privacy?hl=en

6. What Data We Do Not Collect

We do not intentionally collect special categories of personal data, such as sensitive health data, biometric data, or information relating to criminal convictions and offences. If such information is submitted to us accidentally, it will be deleted as soon as reasonably possible.

7. Why We Use Your Data

We collect and process your personal data for the following purposes:

  • To process bookings and provide our services
  • To communicate with you regarding your booking or enquiry
  • To comply with legal and tax obligations
  • To protect our legal rights and legitimate interests
  • To prevent misuse or unlawful activity on our website
  • To improve our services and website experience
  • To send updates, offers, or promotional messages where legally permitted

8. Who We Share Your Data With

We may share your personal data with trusted third parties only when necessary for the operation of our business and the provision of our services. These may include:

  • Payment service providers
  • Accounting or invoicing service providers
  • Technical and website service providers
  • Analytics providers such as Google

We do not sell your personal data. Any third-party processing is carried out in accordance with applicable legal obligations and appropriate safeguards.

9. How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including compliance with legal, tax, accounting, and contractual obligations. Once the retention period expires, your data is securely deleted or anonymised.

10. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • The right to be informed
  • The right of access
  • The right to rectification
  • The right to erasure
  • The right to restrict processing
  • The right to data portability
  • The right to object to certain processing activities
  • The right not to be subject to decisions based solely on automated processing, including profiling

11. How to Exercise Your Rights

If you would like to exercise any of your rights or have questions about this Privacy Policy, you may contact us using the details below:

Email: info@carandtravel.gr
Phone: +30 6932430390

You also have the right to lodge a complaint with the Hellenic Data Protection Authority:

Website: www.dpa.gr
Address: 1-3 Kifissias Avenue, Athens, Greece, 11523
Phone: +30 210 6475600

12. Applicable Law

This Privacy Policy is governed by and interpreted in accordance with the General Data Protection Regulation (EU) 2016/679 and Greek Law 4624/2019, as applicable.