Privacy Policy

1. General

Paros Car Bookings (“we”, “us”, “our company”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and safeguard your information when you use our website, make car rental bookings or contact us regarding our services in Paros.

2. Data controller

The data controller for your personal data is Paros Car Bookings. For questions about how we process your data you can contact us via the Contact page.

3. What data we collect

We may collect and process the following categories of data:

• Identification details: first name, last name, date of birth.
• Contact details: email address, phone number, postal address.
• Booking data: pickup and drop‑off dates, vehicle category, payment method (without storing full card details when external payment systems are used).
• Driving licence data: where required for legal delivery of the vehicle (e.g. licence number, validity).
• Technical data: IP address, browser type, operating system, access times, for security and website improvement purposes.

4. Purpose and legal basis of processing

We use your data to:

• perform the rental contract (booking, delivery, return of the vehicle),
• communicate with you for booking confirmations, reminders and customer support,
• fulfil legal obligations (e.g. accounting, tax, insurance),
• protect our legitimate interests (claims, disputes),
• improve our services and website (where anonymisation or consent applies).

Processing is based on the rental contract you enter into with us, on legal obligations and, where required, on your consent.

5. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes described above or as required by law (e.g. tax and accounting retention). After this period, data is deleted or anonymised.

6. Sharing with third parties

We may share data with partners who help us provide services (e.g. payment systems, hosting, email). These partners are contractually bound to comply with data protection requirements and not to use your data for their own purposes. We do not sell or rent your personal data to third parties for advertising purposes.

7. Your rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• access your data and receive information on how it is processed,
• rectify inaccurate or incomplete data,
• erasure (“right to be forgotten”) under the legal conditions,
• restriction of processing,
• data portability,
• object or withdraw consent, where processing is based on consent.

To exercise your rights or make a complaint, please contact us or the Hellenic Data Protection Authority (`www.dpa.gr`).

8. Security

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, destruction or breach. Communication via our website may be protected by encryption (e.g. HTTPS) where available.

9. Cookies and technologies

Our website may use cookies and similar technologies for platform functionality, security and user experience improvements. You can configure your browser not to accept cookies, although this may affect some features.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Significant changes will be announced on the website and, where appropriate, we will inform you using the contact details you have provided.

11. Contact

For questions about this Privacy Policy or your personal data, please contact us via the Contact page or using the details provided on our website.