Privacy Policy

Last updated: June 2026

1. Introduction

This Privacy Policy describes how i-CARia | Rent a Car Ikaria collects, uses, stores, and protects the personal data of visitors to the website i-caria.gr and its customers.

We are committed to protecting your privacy in accordance with the General Data Protection Regulation (EU Regulation 2016/679 – GDPR) and Greek Law 4624/2019.

Please read this Policy carefully before using our services or submitting personal data through the website.

---

2. Data Controller

The Data Controller for your personal data is:

[OWNER’S FULL NAME] Sole Proprietorship – Car Rental Services Trade name: i-CARia | Rent a Car Ikaria Registered address: [REGISTERED ADDRESS], Agios Kirikos, Ikaria, Greece Tax ID (AFM): [TAX ID], Tax Office (DOY): [TAX OFFICE] Business Registry No. (GEMI): [GEMI NUMBER – if applicable] Email: info@i-caria.gr Phone: +30 2275 300443 / +30 6973 807137

For any questions or requests regarding your personal data, you may contact us using the details above.

---

3. What Data We Collect

3.1 Data you provide to us

a) Through the contact form / booking request:

• Full name
• Email address
• Phone number (if provided)
• Desired rental dates
• Pickup/drop-off location
• Any additional notes you send us

b) At the time of vehicle pickup (in person):

• Full name
• Driving license number and copy
• ID card or passport number and copy
• Residential address
• Date of birth

The collection of identification details at vehicle pickup is mandatory under Presidential Decree 237/1986 and applicable Greek legislation for car rental businesses.

3.2 Data collected automatically

When you browse the i-caria.gr website, the following are collected automatically:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent
• Referring website
• General geographic location (country/city level)

These data are collected through cookies and Google Analytics (see Section 8).

---

4. Purpose of Processing & Legal Basis

We process your data for the following purposes and based on the corresponding legal grounds (Article 6 GDPR):

---

5. Data Retention Period

After the retention period expires, your data is securely deleted or anonymized.

---

6. Who We Share Your Data With

We never sell your personal data. We only share data with the following data processors or third-party recipients when necessary:

• Accountant / Accounting firm – for maintaining tax and accounting records
• Vehicle insurance company – in case of accident or damage
• Legal advisor – in case of claims or legal disputes
• Public authorities (Police, Courts, Tax Authority) – when there is a legal obligation to provide information
• Google LLC – for the provision of Google Analytics and Google Maps services (see Sections 8 & 7)
• Website hosting provider – for the technical operation of the site

All of the above recipients have a contractual obligation of confidentiality and compliance with GDPR requirements.

---

7. International Data Transfers

Certain data collected through the website may be transferred outside the European Union, particularly to the United States, via Google services (Analytics, Maps).

This transfer is carried out under the European Commission’s Standard Contractual Clauses and the EU-US Data Privacy Framework, which ensure an adequate level of protection.

---

8. Cookies & Tracking Technologies

Our website uses cookies to optimize your experience and analyze traffic.

8.1 Types of Cookies We Use

Strictly necessary cookies (no consent required):

• WordPress functionality cookies
• Cookie-banner cookies that store your consent choice

Analytics cookies (consent required):

• Google Analytics (_ga, _gid, _gat) – for anonymous analysis of website traffic and user behavior. Duration: up to 14 months.

Third-party cookies:

• Google Maps – for displaying the map on the Contact page

8.2 Managing Cookies

You can manage or withdraw your consent at any time:

• Through the cookie banner at the bottom of the website
• From your browser settings

Note: Disabling certain cookies may affect website functionality.

---

9. Your Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

• Right of access (Article 15): Request a copy of the data we hold about you.
• Right of rectification (Article 16): Request correction of inaccurate or incomplete data.
• Right of erasure / “right to be forgotten” (Article 17): Request deletion of your data, provided there is no other legal obligation to retain it.
• Right to restriction of processing (Article 18).
• Right to data portability (Article 20): Receive your data in a structured, commonly used format.
• Right to object (Article 21): To processing based on legitimate interest.
• Right to withdraw consent: Where processing is based on consent (e.g. cookies), you may withdraw it at any time.

To exercise any right, you may contact us at info@i-caria.gr. We will respond within one (1) month of receiving your request.

---

10. Data Security

We implement all appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration, or disclosure:

• Encrypted connection (HTTPS/SSL) across the entire website
• Protected access to our systems with strong passwords
• Restricted data access only to authorized personnel
• Regular software and platform updates

Despite our efforts, no method of electronic transmission or storage is 100% secure. In the event of a breach that may affect your rights, we will notify you within 72 hours, as required by GDPR.

---

11. Minors

Our services are addressed to adults (aged 18 or over and with a valid driving license). We do not knowingly collect personal data from minors. If we discover that we have collected data from a minor, we will delete it immediately.

---

12. Right to Lodge a Complaint

If you believe that the processing of your data violates GDPR, you have the right to lodge a complaint with the:

Hellenic Data Protection Authority (HDPA) 1-3 Kifisias Avenue, 11523 Athens, Greece Phone: +30 210 6475 600 Email: contact@dpa.gr Website: www.dpa.gr

However, we kindly ask you to contact us first so we can resolve any issues.

---

13. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Significant changes will be announced through a visible notice on the website.

The date of the last update appears at the top of this document.

---

14. Contact

For any question, request, or comment regarding this Privacy Policy or your personal data:

• Email: info@i-caria.gr
• Phone: +30 2275 300443 / +30 6973 807137
• Address: Agios Kirikos, Ikaria, Greece

We are at your disposal.