Privacy Policy

Data protection

How We Handle Personal Data

This privacy policy explains how Cars4Greece handles personal data for enquiries, reservations, rental agreements, customer support and website use.

Data Controller / Business Identity

Cars4Greece handles rental enquiries and bookings through its local Rhodes business identity and support team.

Data Collected

We may collect name, contact details, booking details, pickup and return information, communication history and rental support notes.

Booking and Reservation Data

Reservation data is used to confirm availability, prepare the vehicle, arrange pickup and support the rental.

Driving Licence / ID / Agreement Data

Licence, identification and agreement information may be needed to verify eligibility and complete the rental contract.

Payment-Related Information

Payment status, method and receipt details may be processed for reservation, accounting and dispute handling.

Website, Device and IP Data

Basic technical data may be processed for security, diagnostics, analytics and normal website operation.

Marketing Consent

Marketing messages are sent only where consent or another lawful basis applies, and opt-out options are respected.

Cookies

Cookies may support website functionality, analytics, security and user experience where enabled.

Legal Bases

Processing may rely on contract performance, legal obligation, legitimate interest, consent or protection of legal claims.

Why Data Is Processed

Data is processed to answer enquiries, manage bookings, complete rental agreements, provide support and meet legal or accounting duties.

Who May Access Data

Access may be given to authorised Cars4Greece staff and necessary service providers involved in rental, support, IT, accounting or legal compliance.

Retention

Data is kept only as long as needed for booking, rental, legal, accounting, support or dispute purposes.

GDPR Rights

Individuals may request access, correction, deletion, restriction, objection or portability where applicable under GDPR.

Security

Reasonable technical and organisational measures are used to protect personal data from unauthorised access or misuse.

Third-Party Providers

Some services such as hosting, email, booking support, analytics, accounting or payment support may process data as necessary.

Controller, Address and Privacy Contact

The data controller is the Cars4Greece rental business operated from Afandou, Rhodes, Greece. Privacy requests can be sent to info@cars4greece.gr. Cars4Greece has not published a separate DPO contact.

Legal Basis by Purpose

Booking and rental data is processed to perform the contract; invoice and accounting data to meet legal obligations; support, security and dispute records for legitimate interests; marketing and non-essential cookies only with consent where required.

Recipients, Providers and Transfers

Data may be accessed by authorised staff and necessary providers such as hosting, email, booking support, analytics, accounting and payment-support services. If a provider transfers data outside the EEA, Cars4Greece relies on the provider safeguards available for that service.

Required Data and Consequences

Booking, driver, contact and rental-agreement data is required to confirm availability, verify eligibility and complete the rental. If required data is not provided, Cars4Greece may be unable to confirm or perform the rental. Marketing data is optional.

Rights, Consent and Complaints

Individuals may request access, rectification, erasure, restriction, portability and objection, and may withdraw consent where processing is based on consent. They may lodge a complaint with the Hellenic Data Protection Authority.

Cookies and Automated Decisions

Necessary cookies support the site and booking flow. Analytics and marketing cookies are used only according to the consent choices available on the site, and consent can be changed or withdrawn through cookie/consent settings where available. Cars4Greece does not use automated decision-making or profiling to approve rentals.