1. About Us

Welcome to the privacy policy of the company trading as PAPADAKIS RENT CAR. We respect your privacy and are committed to protecting your personal data. This privacy policy informs you about how we take care of your personal data as a customer and provides information about your privacy rights and how you are protected by law. Our company is responsible for the collection, management, and processing of your personal data. You have all the rights according to the provisions of the EU Regulation 2016/679 and generally the relevant European and national legislation. We will process your personal data only when the law permits us to do so. We will use your personal data in the following cases: When we have your explicit consent to do so. When we need to perform the contract we are about to enter into or have already entered into with you. When it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. When we need to comply with a legal or regulatory obligation. When it is required for reasons of public interest.

2. Purposes for which we process your personal data

We process personal data that you provide voluntarily and after receiving your prior explicit consent, when processing is necessary for the execution of the contract between us, or to take steps at your request before entering into the contract, when you activate the online check-in service and any other similar service we offer. More specifically, the purposes are defined as follows: car rental to third parties with or without a driver, sale of cars to third parties (wholesale or retail), rental of trucks and light trucks with or without a driver.

3. Categories of information we collect

We have the right to collect, process, store, and forward various types of personal data that we have classified as follows: Identity data include full name (trade name for sole proprietorships), mother and father’s name, date of birth, identity card (number, date of issue/expiry and place of issue), or passport (number, date of issue/expiry and place of issue), residence permit, valid driver’s license (number, date of issue/expiry and place of issue); Contact data include home address, email, fax, and phone numbers;

Financial data include VAT number, bank account, payment card details, VAT exemption indication, Activity (for sole proprietorships), Tax Office (for sole proprietorships), Headquarters (for sole proprietorships), Credit Check data, and Legal Documents (for sole proprietorships). We do not collect sensitive Personal Data in any of our activities or locations except for health-related information, which we receive with your consent, in case you suffer an injury in a traffic accident, solely for the purpose of transmitting it to the insurance company where we insure our vehicle.

4. How we collect your information

We collect your personal data in digital form or in print, every time you use our services, when these services are provided by us at our customer service points, namely in our stores, or in other places where our company legally operates (indicatively airports, hotels, service stations, etc.). We also collect your data when you use our call centers or any of our mobile applications, when you use our company email, as well as when you use our company websites and digital applications (indicatively online check-in). In the above cases and in particular for the cases in which you create or manage your profile, we collect the necessary data for this purpose. You are solely responsible for the accuracy and correctness of the information and documents that you transmit to our company. In addition, please refer to our company website for information about our cookies policy (Cookies Policy). We may collect personal data with your consent in many ways, such as telephone calls, customer service contacts, websites, and other sources, as specified above. We collect personal data of customers or drivers while booking short or long-term car rental or sale of a car, such as full name, address, phone number, driver’s license, credit card details, taxpayer ID, etc. (as specified in paragraph 3). We also collect your personal data when you create a profile on our website, as follows:

– Personal Data that we collect: Full Name, Email, Telephone Number.

– Access: It is obtained by creating a password which you choose and create. You have the option to renew the password or reset it in case of loss. The password is strictly personal. Its creation, as well as any change, is done exclusively through your email and at your own risk. Third party access to your reservation management profile is strictly prohibited. This is why we advise you not to give access to your profile to third parties and to contact us if you have any problems or have any questions about your reservation. In no case does our company bear any responsibility if you provide access to authorized or non-authorized third parties. Accordingly, we have no obligation to serve or provide information to third parties regarding the management of your reservation, through your electronic profile, even if you request it, as the profile and its use are strictly personal. Access to your profile is free 24 hours a day, all days of the year (excluding cases of maintenance of our website or the existence of a technical problem). You reserve the right to update your contact details at any time.

– Reasons for creating a profile: i) the management of your reservation, ii) the storage of your reservation history by our company, from the creation of your profile and onwards, iii) making a future reservation.

– Retention period: i) you have the right to delete your profile at any time. Your data will be automatically deleted from your profile only. Data provided to us in connection with the performance of a contractual transaction and an obligation will be retained by us as provided in paragraph 5 of this Privacy Policy, ii) all data will be deleted from your profile automatically after five years from the completion of your last reservation, without requiring any prior action from you, iii) the right to portability of your profile and its content is not granted. For this reason, we give you the opportunity to delete your profile at any time, without our prior approval.

5. How long we keep your personal data

We will retain your personal data only as long as necessary to fulfill the purposes for which we collected it, including the fulfillment of any legal, accounting, or reporting obligations. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

The Customer’s tax data are kept for a period of ten (10) years from the date of issue of each tax document, to be made available, as required, to the tax authorities within the time frame of valid tax demands. Any data pertinent to establishing, enforcing, and supporting legal claims of the Company or a third party in the presence of any competent court of law or administrative authority are kept for a period starting at the time that the Company demands are generated and up to twenty (20) years or for a longer period up to the statute of limitations and the termination of possible bilateral litigations. The Company may keep the customer’s personal data after fulfilling the purposes of collecting and processing them if such is our legal obligation as stipulated by any relevant legal provision.

6. Security of Personal Data

We have taken all appropriate organizational and technical measures to secure your personal data and protect it from accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure or access, and any other form of unlawful processing.

7. Who receives your data

Our company guarantees that it will not transfer, disclose, grant, etc., your data to third parties (other than those mentioned herein) for any purpose or use unless it is mandatory by applicable law or required by public/judicial authorities. Access to your data is granted only to the absolutely necessary company staff, who are committed to confidentiality and cooperating businesses that have complied with the provisions of the EU Regulation 2016/679 and process your data as Joint Controllers or Processors on our behalf and according to our instructions. Indicatively, recipients of your data are:

The insurance agencies that collaborate with our Company; collaborating users of our logos and on a case-by-case basis our systems (franchisees). Relevant information can be found on our Company webpage; the car rental companies (in Europe or elsewhere) that are part of the international car rental system and handle bookings, with whom we share information pertaining to our car rental activities. Said information may include personal details of your booking entered through the respective application. Your data will not be used for any other reason, without your prior notification and consent. Let it be noted that personal data are also relayed/forwarded to non-EU countries (to cater to bookings outside the EU) on condition that they possess adequate legislation to protect personal data; companies of sworn auditors that check our Company’s financial statements; cooperating companies that provide roadside assistance to drivers using our Company vehicles; cooperating companies in car rentals; legal service providers (lawyers, law firms) that defend our Company interests against third parties, natural or legal persons, judiciary and administrative authorities, independent authorities, and bodies.

8. How we ensure that Processors & Sub-processors respect your data

The processors working on our account have agreed with the company and are contractually committed: to observe confidentiality; not to forward your data to third parties without our Company’s permission; to take safety measures; to comply with the legal framework concerning personal data protection and particularly regulation 679/2016/EU (GDPR); to have been informed and observe all relevant laws and regulations towards the protection of personal data.

It is possible that Processors, in performing their duties, employ other persons called Sub-processors. In this case, the controller will have authorized them to handle the entire or part of the processing of the data. Consequently, the Sub-processor has the same obligations and rights as the Processor mentioned above, as outlined in this Privacy Policy and always within the scope of his assigned duties. Our company has the right to renew and amend the terms of this Privacy Policy at any time, updating this text accordingly, without prior notice. We advise you to read this text at regular intervals so that you are always up to date regarding the ways your data is processed and protected.

9. What are your rights

You have the right to access the information we process about you; the right to rectify the information we keep about you that is inaccurate or incomplete; the right to have your information erased under certain conditions; the right to restrict the processing of your information under certain conditions; the right to data portability under certain conditions; the right to object to our processing of your information under certain conditions; and the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. If you wish to exercise any of these rights, please contact us in writing at info@papadakisrental.gr.

We will endeavor to respond to your request within one month. However, if your request is particularly complex or if you have made a number of requests, it may take us longer to respond. In this case, we will notify you accordingly and keep you updated.

If you feel that your data has not been handled correctly or you are unsatisfied with our response to any requests you have made to us regarding the use of your personal data, you have the right to lodge a complaint with the supervisory authority.

10. How you can exercise your rights

You can send an e-mail to the email address: info@papadakisrental.gr or a letter to the postal address: PAPADAKIS RENT CAR. Gr. Lambraki 541, Keratsini 18757. You reserve the right to submit complaints at any time to your country’s supervisory authority regarding data protection issues. In Greece, this authority is the Hellenic Data Protection Authority and you can find relevant details via the link: www.dpa.gr We would however appreciate the opportunity to deal with your concerns before approaching the data protection authority and so please contact us first, using the details listed.

11. Remuneration

You will not have to pay any fee or charge to access your personal data (or to exercise any other right). However, we reserve the right to charge a reasonable fee if your request is manifestly unfounded, repetitive or abusive.

12. What we may need from you

Reserve the right to request certain information from you in order to confirm your identity and to ensure the right to access your personal data (or to exercise another right). This is a protective measure that ensures that personal data is not disclosed to any person who does not have the right to receive it. We also reserve the right to contact you for more information about your request in order to shorten the response time.

13. Response Time Limit

We try to respond to all legitimate requests within one month. It may take us longer than a month to respond to your request if your request is very complex or you are making a series of requests. In this case, we will notify you to let you know.

14. How you will be notified of any changes to this Policy

We reserve the right to change this policy and to implement changes to previously collected information as required by law. If there are material changes to the Policy or the way we use your Personal Data, we will post an update to this Policy in our history, and you will be able to be notified of any changes from there. It is clarified that these changes take effect from the day of their publication in our Privacy Policy, on the official website of our company https://papadakisrental.gr We encourage you to read, at regular intervals, this Policy to know how the Your data.