Legal
Privacy policy
What we collect, why, and how you stay in control.
This policy explains what personal data Drive4u collects, why, and what your rights are under the EU General Data Protection Regulation (GDPR) and Greek law 4624/2019.
1. Who is responsible
SAGKIRIADIS GEORGIOS (trading as Drive4u)
Chanioti, 630 85 Kassandra, Halkidiki, Greece
VAT EL152537399 · GEMI 158789357000 · MHTE 0938Ε81000218101
Phone +30 23740 53224 · WhatsApp +30 698 664 4233 · Email info@drive4u.gr
For anything about your data, write to info@drive4u.gr.
2. What we collect and why
| When | What | Why | Legal basis |
|---|---|---|---|
| You book online | Name, email, phone, dates, pick-up and return place, car, flight or hotel details you give us, notes | To confirm and run your rental | Contract (Art. 6(1)(b) GDPR) |
| At pick-up | Driving licence, ID or passport details, address, payment details, deposit | Rental agreement, insurance, tax and traffic-law obligations | Contract and legal obligation (Art. 6(1)(b), (c)) |
| You send a question through the form, WhatsApp, email or phone | Name, email or phone number, dates, your message | To answer you | Steps before a contract / legitimate interest (Art. 6(1)(b), (f)) |
| You visit the site | IP address, browser type, pages requested (technical logs) | To deliver the site securely | Legitimate interest (Art. 6(1)(f)) |
| Only if you accept cookies | Analytics and advertising identifiers | To measure visits and our ads | Consent (Art. 6(1)(a)) — see the Cookie policy |
We do not sell your data and we do not make automated decisions about you.
3. Who else receives your data
- Booking system: the online booking form runs on the Arma booking platform, provided by Localle (Greece), which processes booking data on our behalf.
- Website hosting: our hosting provider.
- Contact form: Web3Forms, which forwards your question to our email.
- Communication: WhatsApp (Meta) and our email provider, when you contact us there.
- Payments: Stripe, which processes online card payments for the booking form, and our card terminal provider, Revolut or PayPal, when you pay that way. We never see or store your full card number.
- When needed: our insurer, accountant, roadside assistance, and public authorities (police, tax office) where the law requires it.
Some of these providers may process data outside the European Economic Area. When they do, it is protected by the safeguards the GDPR requires, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
4. How long we keep it
- Rental and invoicing records: as long as Greek tax and accounting law requires.
- Questions that do not lead to a booking: up to 12 months.
- Technical logs: as kept by the hosting provider, normally a few weeks.
5. Your rights
You can ask to see, correct, delete or receive a copy of your data, to restrict or object to its use, and to withdraw any consent at any time (for cookies, through “Cookie settings” at the bottom of each page). Write to info@drive4u.gr; we reply within one month.
You can also complain to the Hellenic Data Protection Authority, Kifisias 1–3, 115 23 Athens, www.dpa.gr.
6. Changes
If we change this policy, we will update the date at the top of this page.