Privacy Policy

Read carefully

Privacy Policy

Thank you for visiting https://gvrtransfers.gr/ (referred to as “the Website”). We highly value your privacy and are committed to protecting your personal information in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This Privacy Policy outlines the types of data we collect, how we use and protect that information, and your rights and choices concerning your personal data.

1. Data Controller

The data controller responsible for the processing of your personal information is:

ΔΙΟΝΥΣΙΑ ΚΑΣΣΙΟΥ
info@gvrtransfers.gr
+306941533840
MHTE: 1471E70000178801

2. Information We Collect

2.1 Personal Information:
When you visit the Website, we may collect and process the following types of personal information from you:

– Name
– Email address
– Phone number
– Billing address
– Credit card details (processed securely by a trusted payment gateway)
– Other information you choose to provide us voluntarily through forms or other means.

2.2 Automatically Collected Information:
We may automatically collect certain non-personal information when you visit the Website, including your IP address, browser type, device type, operating system, and browsing behavior. This information is used for website analytics, to improve our services, and to enhance your experience on the Website.

3. Lawfulness of Processing

We process your personal information based on the following lawful grounds:

– The processing is necessary for the performance of a contract with you or for taking steps at your request prior to entering into a contract.
– The processing is necessary for compliance with our legal obligations.
– The processing is based on your consent, which you can withdraw at any time.
– The processing is necessary for the purposes of our legitimate interests, except where such interests are overridden by your interests or fundamental rights and freedoms.

4. Purpose and Legal Basis for Processing

We collect and process your personal information for the following purposes and based on the corresponding legal bases:

– To provide and maintain our services: Processing is necessary for the performance of a contract with you.
– To process and fulfill bookings and payments: Processing is necessary for the performance of a contract with you.
– To communicate with you regarding your bookings, inquiries, or customer support requests: Processing is necessary for the performance of a contract with you or for taking steps at your request prior to entering into a contract.
– To personalize your experience on the Website: Processing is based on your consent.
– To improve our services, website functionality, and user experience: Processing is based on our legitimate interests.
– To comply with legal obligations: Processing is necessary for compliance with our legal obligations.
– To protect our rights and interests: Processing is necessary for the purposes of our legitimate interests.

5. Data Sharing and Transfers

We may share your personal information with third parties in the following circumstances:

– With service providers and partners who assist us in delivering our services (e.g., payment processors, customer support providers) based on appropriate data processing agreements.
– With affiliated companies or subsidiaries for business purposes, subject to your consent if required by applicable laws.
– In response to a legal request or to comply with applicable laws, regulations, or legal processes.
– To protect the rights, property, or safety of GVR Transfers, its users, or others.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

If we transfer your personal information to a country outside the European Economic Area (EEA), we will ensure that appropriate safeguards are in place, such as using standard contractual clauses approved by the European Commission or relying on the recipient’s Privacy Shield certification (where applicable).

6. Data Retention

We retain your personal information for as long as necessary to fulfill

the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. We will securely dispose of your information when we no longer need it.

7. Security Measures

We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, loss, misuse, or alteration. We regularly review and update our security practices to ensure the ongoing confidentiality, integrity, and availability of your data.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal information:

– Right to access: You have the right to request access to the personal information we hold about you.
– Right to rectification: You have the right to request the correction of inaccurate or incomplete personal information.
– Right to erasure: You have the right to request the deletion of your personal information in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected or processed.
– Right to restriction of processing: You have the right to request the restriction of processing your personal information in certain circumstances, such as when you contest the accuracy of the data or the lawfulness of the processing.
– Right to data portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another controller where technically feasible.
– Right to object: You have the right to object to the processing of your personal information in certain circumstances, such as when the processing is based on our legitimate interests.
– Right to withdraw consent: If we rely on your consent to process your personal information, you have the right to withdraw your consent at any time.

To exercise your rights or if you have any questions or concerns about our use of your personal information, please contact us using the information provided in Section 1 (Data Controller) of this Privacy Policy.

9. Third-Party Links

The Website may contain links to third-party websites or services. Please note that we are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of those third-party websites or services before providing any personal information.

10. Changes to this Privacy Policy

We reserve the right to modify or update this Privacy Policy from time to time to reflect changes in our privacy practices or legal obligations. We will notify you of any material changes by posting the revised policy on the Website with an updated effective date.

By continuing to use the Website after any changes to this Privacy Policy, you acknowledge and agree to the updated terms.