Last updated: July 2026
This policy explains what personal data we process when you use this website, why we process it, and what rights you have. We are based in the European Union and follow the General Data Protection Regulation (GDPR).
The operator of this website is responsible for the data described below. For any privacy question, or to exercise any of the rights listed further down, write to us through our contact page. We answer privacy requests within 30 days.
We do not ask for and do not store payment card numbers, passport data or driving licence details. Those are handled by the booking platform and the supplier at the moment of booking and pick-up.
| Purpose | Data used | Legal basis |
|---|---|---|
| Showing live offers for your search | Search details | Legitimate interest - delivering the service you requested |
| Answering your message | Contact details | Legitimate interest / pre-contractual steps |
| Keeping the site secure and available | Technical data | Legitimate interest |
| Understanding how the site is used | Analytics cookies | Consent |
To show offers and complete a booking we pass your search parameters to our booking partner, Discover Cars (Discover Car Hire Ltd). When you choose an offer you continue on their platform, where their own privacy policy applies. We also use hosting and analytics providers acting as processors on our behalf. We never sell personal data and never share it with third parties for their own marketing.
Some providers may process data outside the European Economic Area. Where this happens, transfers rely on European Commission adequacy decisions or Standard Contractual Clauses.
Server logs are kept for up to 12 months. Messages you send us are kept for up to 24 months so we can follow up on your request. Analytics data is retained in aggregated form. Cookies expire as described in the cookie policy.
Under the GDPR you may request access to your data, correction of inaccurate data, deletion, restriction of processing, portability, and you may object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time - this does not affect processing carried out before withdrawal. You also have the right to lodge a complaint with your national data protection authority; in Greece this is the Hellenic Data Protection Authority (dpa.gr).
This site is not directed at children under 16 and we do not knowingly collect their data.
If this policy changes we update the date at the top of the page. Material changes are announced on this page before they take effect.