1. Introduction
Welcome to Crete Car Hub (cretecarhub.com). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use it and what rights you have under the General Data Protection Regulation (GDPR) and applicable Greek law.
By using our website and services, you agree to the terms described in this Privacy Policy. If you have questions, please contact us at book@cretecarhub.com.
2. Who We Are
Crete Car Hub is a car rental aggregator platform operating at cretecarhub.com. We connect travelers with local car rental companies in Crete, Greece. We are not a car rental company ourselves - we are an intermediary platform.
For data protection purposes, Crete Car Hub acts as the Data Controller for personal data collected through this website.
3. What Personal Data We Collect
We may collect the following personal data:
- Identity data: first name, last name
- Contact data: email address, phone number
- Booking data: pickup and return dates, location preferences, car type selection
- Payment data: partial payment details processed through secure third-party payment providers (we do not store full card numbers)
- Technical data: IP address, browser type and version, time zone, operating system, device data collected automatically via cookies and analytics tools
- Usage data: pages visited, links clicked, booking widget interactions
4. How We Collect Your Data
We collect data:
- Directly from you — when you fill in the booking widget, contact us by email, or provide information on this website
- Automatically — through cookies, server logs and analytics services when you browse our website
- From third parties — from our booking partner (LocalRent / Rentalcars24h affiliate system) when you complete a booking
5. How We Use Your Data
We use your personal data to:
- Process your car rental booking and send confirmation
- Communicate with you about your booking, cancellations or changes
- Provide customer support
- Improve our website and services based on usage analytics
- Comply with legal obligations
- Detect and prevent fraudulent bookings
We do not use your personal data for unsolicited marketing communications without your explicit consent.
6. Legal Basis for Processing
We process your personal data on the following legal bases:
- Contract performance — to process your booking and deliver the services you requested
- Legitimate interests — to improve our services, detect fraud and ensure website security
- Legal obligation — to comply with applicable laws in Greece and the EU
- Consent — for cookies and analytics, where required by applicable law
7. Cookies and Analytics
Our website uses cookies and third-party analytics tools including:
- Yandex Metrika — website analytics (session tracking, page views, conversion tracking)
- LocalRent booking widget — functional cookies for the booking search widget
You can manage cookie preferences in your browser settings. Disabling cookies may affect the functionality of the booking widget.
8. Sharing Your Data
We may share your personal data with:
- Local rental companies in Crete — to fulfill your car rental booking
- Our booking partner (LocalRent affiliate system) — to process the reservation and generate your confirmation voucher
- Payment processors — to handle secure online payment of the advance booking fee
- Analytics providers — Yandex Metrika for aggregated website analytics
We do not sell your personal data to any third parties for marketing purposes.
9. Data Retention
We retain your personal data for the period necessary to fulfill the purposes described in this policy, typically:
- Booking data — up to 3 years from the rental date for accounting and dispute resolution purposes
- Analytics data — as per the retention policies of Yandex Metrika (typically up to 1 year)
- Contact/enquiry data — up to 1 year from the date of contact
10. Your Rights Under GDPR
As a data subject in the EU, you have the following rights:
- Right of access — to request a copy of the personal data we hold about you
- Right to rectification — to correct inaccurate or incomplete data
- Right to erasure ("right to be forgotten") — to request deletion of your personal data
- Right to restriction of processing — to request that we limit how we use your data
- Right to data portability — to receive your data in a structured, machine-readable format
- Right to object — to object to processing based on legitimate interests
- Right to withdraw consent — where processing is based on consent, to withdraw it at any time
To exercise any of these rights, contact us at book@cretecarhub.com.
11. Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) at dpa.gr.
12. Data Security
We implement technical and organisational measures to protect your personal data from unauthorised access, accidental loss, destruction or disclosure. Our website uses HTTPS encryption. Payments are processed by certified PCI-DSS compliant providers.
13. International Transfers
Some of our service providers (such as Yandex Metrika) may process data outside the European Economic Area (EEA). We ensure that appropriate safeguards are in place for any such transfers in accordance with GDPR requirements.
14. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available at cretecarhub.com/privacy-policy/. We encourage you to review this page periodically.
15. Contact Us
For any data protection questions or to exercise your rights, contact:
Crete Car Hub
Email: book@cretecarhub.com
Website: cretecarhub.com
