Privacy Policy

A legal disclaimer

Effective Date: 29/03/2026
Last Updated: 29/03/2026

This Privacy Policy explains how Mavo Rentals, a vehicle rental service based in Crete, Greece, collects, uses, and protects your personal data when you visit our website or use our services.

Mavo Rentals is committed to ensuring that your privacy is protected in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Greek data protection laws.

2. Data Controller

For the purposes of data protection law, the data controller is:

Mavo Rentals
Email: info@mavorentals.com
Location: Crete, Greece

3. Personal Data We Collect

We may collect and process the following categories of personal data:

Information you provide directly:

Full name
Email address
Telephone number
Pick-up and drop-off locations
Booking dates and times
Vehicle preferences
Any additional information submitted through forms or communication

Information collected automatically:

IP address
Browser type and device information
Website usage data (pages visited, interactions, session duration)

4. Legal Basis for Processing

We process personal data in accordance with Article 6 of the GDPR on the following legal bases:

Performance of a contract: to process and manage booking requests
Legitimate interests: to improve our services and website functionality
Consent: where you voluntarily provide information or agree to specific processing activities
Legal obligation: where processing is required to comply with applicable laws

5. Purpose of Processing

Your personal data is used for the following purposes:

To process and manage booking requests
To communicate with you regarding your reservation
To provide customer support
To improve the functionality and performance of our website
To send confirmations, updates, or service-related communications

We do not use your personal data for purposes incompatible with those listed above.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data.

We may share your data with:

Service providers (such as website hosting, email delivery services, and technical support providers)
Legal or regulatory authorities where required by law
Third-party platforms used for communication (e.g. WhatsApp), where initiated by the user

All third parties are required to process personal data in compliance with GDPR and applicable data protection laws.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, including:

Booking and transaction records for operational and legal purposes
Customer communication records for support and follow-up
Data required to comply with tax and legal obligations under Greek law

Once retention is no longer necessary, data will be securely deleted or anonymised.

8. Data Security

We implement appropriate technical and organisational measures to safeguard personal data, including:

Secure hosting infrastructure
Access controls and restricted data access
Standard industry security practices

While we take all reasonable steps to protect your data, no system can guarantee absolute security.

9. Your Rights Under GDPR

You have the following rights under the GDPR:

Right of access to your personal data
Right to rectification of inaccurate or incomplete data
Right to erasure (“right to be forgotten”)
Right to restriction of processing
Right to object to processing
Right to data portability
Right to withdraw consent at any time

To exercise your rights, please contact:
Email: info@mavorentals.com

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) or another competent supervisory authority within the European Union.

10. Cookies

Our website may use cookies and similar technologies to:

Enhance user experience
Analyse website traffic and performance
Store user preferences

You may manage or disable cookies through your browser settings.

11. Third-Party Services

Our website may integrate or link to third-party services, including:

Communication platforms (e.g. WhatsApp)
Website hosting providers
Email delivery systems

These services operate independently and may process your data according to their own privacy policies. We ensure that any providers we use comply with GDPR or equivalent standards.

12. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses approved by the European Commission
Use of GDPR-compliant service providers

13. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be published on this page with an updated effective date.

14. Contact Information

For any questions regarding this Privacy Policy or the processing of your personal data, please contact:

Mavo Rentals
Email: info@mavorentals.com
Location: Crete, Greece