What this site collects
This website itself collects what you type into it, and a count of how many times each page was opened. The count has no name attached to it and no way to get one: it is a daily total, not a record of you. There is no advertising pixel and nothing here follows you to other sites. The cookie policy sets out exactly what is counted, by whom, and which part of it you can switch off.
The contact form collects your name and your email or phone, plus your message. We use it to answer you and to keep a record of what was agreed. The newsletter box collects your email address and nothing else.
What a booking collects
Bookings are handled by ARMA, our reservation system, and the booking form on this site is theirs. The details you enter there — name, contact details, dates, driver age, payment details where you choose to pay online — go to ARMA and to us, not to this website.
At pickup we take the details the law requires for a rental agreement: your licence, your ID or passport, and the named drivers.
Why we are allowed to hold it
To perform your rental contract: your booking and rental agreement details. To meet legal obligations: invoices and tax records, and driver details we are required to record. With your consent: marketing emails, which you opt into deliberately and can leave at any time. For our legitimate interest in running the business: answering your enquiry, and handling a claim or a traffic fine.
Marketing email
Our mailing list is double opt-in. You give us your address, we email you a confirmation link, and you are not on the list until you click it. We use Mailchimp (Intuit Inc.) to send these; your address is stored there and in our own database.
Every email has an unsubscribe link, and it works immediately. You can also just ask us.
Who else sees it
ARMA, for bookings. Mailchimp, for newsletter email. Supabase, which hosts this site’s database in the European Union (Frankfurt). Our payment provider, for online payments. The insurer, where there is a claim. The authorities, where the law requires it — for example when a traffic fine has to be attributed to a driver.
We do not sell your data and we do not share it for anyone else’s advertising.
Where it is held
The site’s database is in the EU. Mailchimp processes data in the United States under the EU–US Data Privacy Framework and standard contractual clauses.
How long we keep it
Rental and invoice records: as long as Greek tax law requires. Enquiries: up to two years after we last spoke. Newsletter subscribers: until you unsubscribe, and we remove the record after that except for the minimum needed to prove you had opted in. Google reviews shown on this site are refreshed daily and are not kept beyond that.
Your rights
Under the GDPR you can ask for a copy of what we hold, ask us to correct it, ask us to delete it, object to how we use it, or ask for it in a portable format. Write to info@aegeanrent.gr and we will answer within one month.
If you think we have got it wrong, you can complain to the Hellenic Data Protection Authority (dpa.gr).