At Autocreta, we take your privacy very seriously. This policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and other relevant data protection laws.
Who we are
We are Autocreta, a car rental company providing car rental services to individuals and businesses. Our company is registered in Greece and our registered office is at Kokkini Hani 71500, Heraklion Crete.
What personal data we collect
We may collect the following types of personal data from you when you make a booking or when you request an offer:
- Full name
- Address
- Phone number
- Email address
- Flight details (if you request airport pickup/drop-off)
- Hotel details (if you request delivery/pickup at a hotel)
- Ferry details (if you request port pickup/drop-off)
- We also collect information about the type of vehicle you are interested in, your preferred dates and times, and any other information you provide to us in relation to your booking or enquiry
How we use your personal data
We use your personal data for the following purposes:
- To provide you with our car rental services, including processing your bookings and rental contracts
- To communicate with you about your bookings and enquiries
- To provide customer support and resolve any issues or complaints you may have
- To improve our services and website
- To comply with legal and regulatory requirements
Legal basis for processing your personal data
We process your personal data on the following legal bases:
Contractual necessity: we need your personal data to enter into and perform our contract with you for car rental services
Legitimate interests: we have a legitimate interest in using your personal data for customer service and business improvement purposes
Legal obligation: we may need to process your personal data to comply with legal and regulatory requirements
We do not share this data with any third parties, except as required by law or with the explicit consent of the customer.
Retaining of personal data
We retain personal data for as long as it is necessary to provide our services to the customer and fulfill our contractual obligations. This typically includes retaining data for a period of seven years after the end of the rental agreement, as required by tax and accounting laws in Greece.
After this period, we securely delete or destroy all personal data in our possession, unless we are required to retain it for legal, regulatory, or legitimate business purposes. We take all necessary measures to protect personal data from unauthorized access, use, or disclosure, and we ensure that our employees are trained in data protection and privacy best practices.
How we protect your personal data
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, accidental loss or destruction, and unauthorised disclosure or alteration. We use secure servers, firewalls, and SSL encryption to protect your personal data.
Changes to this policy
We may update this policy from time to time to reflect changes in our business or legal requirements. We will post any updates on our website and notify you of any significant changes.
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, accidental loss or destruction, and unauthorised disclosure or alteration. We use secure servers, firewalls, and SSL encryption to protect your personal data.
If you have any questions or concerns about our GDPR policy or how we process your personal data, please contact us at info@autocreta.gr or at +306977574699