Privacy Policy

GDPR – EU Regulation 2016/679

1. Data Controller

The business LELEDAKI AIKATERINI, operating under the trade name Krasanos Rentals, with registered office at Prassa Alikarnassou 0, 71500 Heraklion, Greece, VAT Number 041980192, Tax Office of Heraklion, tel. (+30) 2811216329, contact email info@krasanosrentals.com (hereinafter referred to as the “Company”), is the Data Controller of the personal data collected through the website www.krasanosrentals.com.

Reservations are completed through an external booking platform, to which the user is redirected via the domain krasanosrentals.gocars.gr, operated by the provider GoCars. This platform acts as a Data Processor in accordance with Article 28 of the GDPR.

2. What Data We Collect

When using our website and services, we may collect:

A. Identification Data

• Full name
• Date of birth
• Identity Card or Passport number
• Driving License number
• Country of driving license issuance

B. Contact Information

• Telephone number
• Email address
• Residential address

C. Reservation Data

• Rental dates
• Pick-up / drop-off location
• Selected vehicle
• Reservation history

D. Financial Data

• Billing details

• VAT Number (for invoice issuance)

• Payment details (via secure payment providers – we do not store card details)

E. Technical Data

• IP address
• Browser type
• Operating system
• Cookies

3. Purpose of Processing

Your data is processed for the following purposes:

• Execution of the rental agreement
• Reservation management
• Communication regarding the reservation
• Issuance of tax documents
• Legal compliance
• Service improvement
• Fraud prevention
• Statistical analysis

4. Legal Basis for Processing

Processing is based on:

• Performance of a contract (Article 6(1)(b) GDPR)

• Compliance with a legal obligation (Article 6(1)(c) GDPR)

• Legitimate interest of the business (Article 6(1)(f) GDPR)

• Your consent (Article 6(1)(a) GDPR), where required

5. Data Retention Period

Personal data is retained:

• For 10 years for tax purposes

• For as long as required for legal claims

• For as long as consent remains valid (in marketing cases)

• Technical data according to the Cookie Policy

6. Who Receives the Data

Data may be shared with:

• Accountants and tax consultants
• Hosting providers

• The booking platform provider (GoCars), acting as a Data Processor

• Payment providers (e.g. banking institutions)

• Insurance companies (in case of accidents)

• Public authorities where required by law

We do not sell or trade personal data.

7. Transfers Outside the EU

If providers outside the European Union are used (e.g. cloud services), appropriate safeguards are ensured in accordance with the GDPR (Standard Contractual Clauses).

8. Your Rights

Under the GDPR, you have the right to:

• Access your data
• Rectification

• Erasure (“right to be forgotten”)

• Restriction of processing
• Data portability
• Objection
• Withdrawal of consent

You may exercise your rights by sending an email to: info@krasanosrentals.com

You also have the right to lodge a complaint with:

Hellenic Data Protection Authority
www.dpa.gr

9. Data Security

The Company implements technical and organizational measures such as:

• SSL encryption
• Firewall protection
• Restricted staff access
• Regular backups
• Antivirus & monitoring systems

10. Cookies

The website uses cookies for:

• Basic website functionality
• Statistical analysis
• Improving user experience

Users may manage cookies through their browser settings or through the cookie banner.

11. Automated Decision-Making

No automated decision-making or profiling is carried out that produces legal effects.

12. Policy Amendments

This Policy may be amended.
Last updated on: 05/03/2025.