Privacy Policy

Introduction

At  ElisCar (“we”, “our”, “us”), we are committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, disclose, store and protect your personal data when you visit our website, make a reservation, contact us, or use our services.

We process your personal data in accordance with:

  • Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR);
  • applicable national data protection legislation; and
  • any other relevant European privacy laws.

By using our website, you acknowledge that you have read this Privacy Policy.

The controller responsible for processing your personal data is:

Elis Car
Address: Vartzeli 0,P.C. 27051 , Andravida
Email: info@eliscar.gr
Telephone: +30 694-060-41-78
VAT Number: 134659451

Depending on how you interact with us, we may collect the following categories of personal data.

Identification Information

  • Full name
  • Date of birth (where required)
  • Nationality (where required)
  • Driver’s licence information (during the rental process)


Contact Information

  • Email address
  • Telephone number
  • Postal address


Booking Information

  • Pick-up and return locations
  • Rental dates
  • Vehicle category
  • Special requests


Payment Information

Payments are processed through secure third-party payment providers.

We do not store your complete credit or debit card details on our servers.


Technical Information

When visiting our website we may automatically collect:

  • IP address
  • Browser type
  • Device information
  • Operating system
  • Referring website
  • Pages visited
  • Date and time of access


Cookie Data

Information collected through cookies and similar technologies is described in our Cookie Policy.

We collect personal data when you:

  • submit a reservation;
  • contact us by email or telephone;
  • complete contact forms;
  • subscribe to newsletters (where applicable);
  • browse our website;
  • accept cookies;
  • communicate with customer support.

We process personal data only where there is a lawful basis under Article 6 GDPR.

These legal bases include:

Performance of a Contract

We process your data to:

  • manage reservations;
  • provide rental services;
  • communicate about bookings;
  • process payments.


Legal Obligation

We may process personal data to comply with:

  • accounting regulations;
  • tax legislation;
  • law enforcement requests;
  • insurance obligations;
  • vehicle rental regulations.


Legitimate Interests

We may process data for:

  • website security;
  • fraud prevention;
  • service improvement;
  • customer support;
  • defending legal claims.


Consent

Where required, we process data based on your consent, including:

  • marketing communications;
  • optional cookies;
  • newsletter subscriptions.

Consent may be withdrawn at any time without affecting processing carried out before withdrawal.

We use your information to:

  • process reservations;
  • confirm bookings;
  • provide customer service;
  • respond to enquiries;
  • verify identity where necessary;
  • process payments;
  • comply with legal obligations;
  • improve website functionality;
  • prevent fraud;
  • maintain website security;
  • perform statistical analysis;
  • send marketing communications where consent has been provided.

Our website uses cookies and similar technologies.

Cookies help us:

  • remember user preferences;
  • improve website functionality;
  • analyse website traffic;
  • ensure website security;
  • provide a better browsing experience.

Non-essential cookies are used only after obtaining your consent where required by law.

You may change your cookie preferences at any time through our Cookie Settings.

We do not sell your personal data.

We may share your information with trusted third parties where necessary, including:

  • payment service providers;
  • IT hosting providers;
  • website maintenance providers;
  • reservation software providers;
  • insurance providers;
  • accounting services;
  • legal advisers;
  • governmental authorities where required by law.

All processors are contractually required to protect your personal data in accordance with GDPR.

We retain personal data only for as long as necessary for the purposes described in this Policy or to comply with legal obligations.

Retention periods may vary depending on:

  • tax requirements;
  • accounting obligations;
  • contractual obligations;
  • dispute resolution;
  • legal claims.

When retention is no longer required, personal data are securely deleted or anonymised.

We implement appropriate technical and organisational measures to protect personal data, including:

  • SSL/TLS encryption;
  • secure hosting infrastructure;
  • restricted access controls;
  • password protection;
  • regular software updates;
  • firewall protection;
  • malware monitoring;
  • secure backups.

Although we apply industry-standard security measures, no internet transmission can be guaranteed to be completely secure.

Under the GDPR, you have the right to:

  • access your personal data;
  • request correction of inaccurate information;
  • request deletion (“Right to be Forgotten”) where applicable;
  • restrict processing;
  • object to processing;
  • receive your personal data in a portable format;
  • withdraw consent at any time;
  • lodge a complaint with your national Data Protection Authority.

To exercise any of these rights, please contact us using the details below.

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.

Our website may contain links to third-party websites.

We are not responsible for the privacy practices or content of those websites. We encourage users to review the privacy policies of any third-party websites they visit.

If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority and affected individuals where required by applicable law.

We may update this Privacy Policy from time to time.

The latest version will always be available on this website, and the “Last Updated” date will be revised accordingly.

We encourage users to review this Policy periodically.

If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us:

Elis Car
Address: Vartzeli 0,P.C. 27051 , Andravida
Email: info@eliscar.gr
Telephone: +30 694-060-41-78

If you are not satisfied with our response, you have the right to lodge a complaint with the competent Data Protection Authority in your country of residence or where the alleged infringement occurred.