Personal Data
Protection Policy

🔒 Privacy at a Glance

We respect your privacy. Here is how we handle your data:

  • We Collect: Name, License info, and Contact details solely for your rental contract.
  • We Do Not: Sell your data to third parties.
  • Security: Your credit card info is encrypted and not stored on our servers.
  • Control: You can request to view or delete your data at any time by emailing info@bestwaytravel.gr.

1. Introduction & Data Controller

This present policy of editing and protecting data of personal character (hereinafter “Policy”) provides information about the collection, storage, processing, and use of your personal data.

The Data Controller: The company under the name Best Way Travel (hereinafter referred to as “the Company” or “we” or “us”) located in Heraklion Crete, 37 Idomeneos street P.O. 71202, acts as the Data Protection Officer (DPO) responsible for collecting, storing, using, and processing your personal data.

  • Telephone: +30 2810 334334

  • Email: info@bestwaytravel.gr

What is Personal Data?

The term “personal data” refers to information of individuals—such as name, postal address, email address, telephone number, etc.—that identify or can identify you.

What is Personal Data Processing?

Any act performed with or without the use of automated means, such as the collection, registration, organization, storage, alteration, retrieval, use, disclosure, or deletion of personal data.

2. What Data Do We Collect?

We only collect Data that is strictly necessary to serve the purpose for which it was provided. The Data is limited to what you have provided expressly and with your consent.

We collect the following types of data:

  • 3.1. Identity Data: First name, surname, date of birth, driving license number, VAT number, and ID card number.

  • 3.2. Contact Data: Postal address, email address, and telephone number.

  • 3.3. Payment Data: Credit/debit card numbers, PayPal, or bank account numbers (processed securely).

  • 3.4. Technical Data: IP address, username, and browser cookies (see our Cookie Policy).

3. How We Use Your Data

Your Data is processed by authorized personnel of our Company or by secure electronic systems. We process your data to provide the following services:

  • 4.1. Submission of Offer: To bid for short or long-term car leases.

  • 4.2. Car Hire Contracts: To fulfill the rental agreement, including vehicle maintenance, repair, or replacement.

  • 4.3. Car Purchase: To complete used car purchase agreements.

  • 4.4. Legal Compliance: To comply with Tax and Insurance laws.

  • 4.5. User Accounts: To create and manage your online account.

  • 4.6. Newsletters: To send promotional offers (only if you have opted in).

  • 4.7. Customer Privileges: To offer priority service, discounts, or loyalty rewards.

  • 4.8. Customer Service: To respond to requests made through our Contact Center.

  • 4.9. Recruitment: To evaluate CVs for job applications.

4. Who We Share Your Data With

The Company guarantees that it will not transmit or sell your Data to third parties for any purpose unless required by law.

Authorized Recipients: Access to your Data is strictly limited to:

  1. Payroll companies (for employees).

  2. Insurance companies covering our vehicles.

  3. Affiliate partners for car rental operations.

  4. Vehicle repair and maintenance providers.

  5. Chartered Accountants for financial audits.

  6. Roadside assistance partners.

  7. Global car booking systems (if applicable).

5. Data Security & Retention

Is Your Data Safe?

Yes. The Company is committed to safeguarding your Data. We have taken all appropriate organizational and technical measures to protect your Data from accidental loss, unauthorized access, or disclosure.

When do we delete your Data?

We retain your Data only for as long as necessary to fulfill the purpose for which it was collected and to comply with legal tax obligations.

  • Newsletters: Retained until you unsubscribe.

  • CVs: Retained for two (2) years (or 6 months upon request).

  • Rental Contracts: Retained according to Greek Tax Law requirements.

6. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of Access: You can ask us what data we hold about you and why.

  • Right to be Forgotten (Deletion): You can ask us to delete your data if it is no longer legally necessary.

  • Right to Portability: You can ask for a copy of your data to transfer to another provider.

  • Right to Rectification: You can ask us to correct wrong information.

  • Right to Object: You can withdraw your consent for processing at any time.

How can you exercise your rights?

To exercise your rights, please send a written request to:

  • Post: Best Way Travel, 37 Idomeneos Street, Heraklion Crete, P.O. 71202

  • Email: info@bestwaytravel.gr (Subject: “Exercise of Right”)

We will respond to your request free of charge within one (1) month.

7. Applicable Law & Complaints

The applicable law is Greek Law (GDPR 2016/679/EU). Any disputes shall be settled by the Courts of Heraklion.

Right to Complain: If you believe your rights have been violated, you may file a complaint with the Hellenic Data Protection Authority:

  • Address: Kifissias 1-3, 115 23, Athens

  • Email: contact@dpa.gr

  • Phone: +30 210 6475600

Last Updated: January 2026

Scroll to Top