Data Protection Notice
1. Controller
The controller of your data is {{COMPANY_LEGAL_NAME}}, {{COMPANY_ADDRESS}}, VAT no. {{COMPANY_VAT}}. For any matter concerning your personal data you may contact us at {{CONTACT_EMAIL}} or on +30 697 357 6854.
2. What data we collect
For the transfer/rental request we collect: full name, email address, telephone number, pick-up date and time, pick-up location, rental duration, vehicle preference and any comments you enter. We also record the time of your consent and a hashed indication of your connection, solely as proof of that consent.
3. Purpose and legal basis
We process this data solely in order to contact you and handle your request for a transfer or vehicle rental. The legal basis is your consent (Article 6(1)(a) GDPR). If you choose to receive news and offers, that constitutes separate and optional consent. The transfer request is independent of the cruise booking and does not affect your booking or your payment in any way.
4. Recipients
Your data is accessible only to our authorised personnel. We use the following processors: Supabase (database hosting) and Resend (sending the notification email). We do not sell your data and do not transmit it to third parties for advertising purposes. Any transfer outside the EEA takes place under the safeguards provided by the GDPR.
5. Retention period
We keep your request for twenty-four (24) months from its submission, or for six (6) months from completion of the request, whichever occurs first. After that period the data is permanently and automatically deleted.
6. Your rights
You have the right of access, rectification, erasure, restriction of processing and data portability, as well as the right to object. You also have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on it before its withdrawal. To exercise your rights contact {{CONTACT_EMAIL}}. We respond within one (1) month.
7. Complaint
If you consider that the processing of your data infringes the GDPR, you have the right to lodge a complaint with the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα, 1-3 Kifissias Ave., 11523 Athens, tel. 210 6475600, www.dpa.gr).
8. Newsletter
If you tick the newsletter box we store your email address, your language, the exact consent wording you were shown, the date and time of your consent and the IP address of your connection, solely as proof of that consent. The purpose is to send you news and offers about Barco Tours; the legal basis is your consent (Article 6(1)(a) GDPR). Emails are delivered by our processor Resend. We keep the record for as long as you stay subscribed and for five (5) years after unsubscribing, as proof of lawful consent. You can unsubscribe with one click from the link in every marketing email, or by writing to {{CONTACT_EMAIL}}, and you may request access to or deletion of your data at the same address. Unsubscribing does not affect tickets, booking confirmations or departure reminders.