Personal data protection statement

ACT & DRIVE considers your personal data a very serious matter and therefore complies with the respective national legislation as well as Regulation (EU) 2016/679 of the European Parliament for the protection of personal data (General Data Protection Regulation – GDPR).

ACT & DRIVE is committed to the full implementation of current legislation and European regulations, taking into account the adoption of appropriate technical and organizational measures for the protection of personal data.

This policy applies to the personal data collected by the website:

https://adrentacar.gr

Controller of your personal data for this website is ACT AND DRIVE IKE (Frangon 1 - Thessaloniki), phone: +30 2311218248, Email: info@adrentacar.gr), hereinafter referred to as "ACT & DRIVE".

The purpose of our policy is to capture in as simple, understandable and concise a way as possible the following:

∙ Which of your data do we process through our website, for what purpose and with what legal basis

∙ How long we store your data

∙ Who are the recipients of your data?

∙ What are your rights and how can you exercise them?

∙ What legal interests do we pursue?

∙ What applies to personal data collected through cookies

∙ What applies to your data and Social Media

∙ Hyper-links

ACT & DRIVE can identify the IP address through which the computer or any other electronic device accesses the Internet and subsequently our website. This is due to the way the internet works and aims to secure networks from malicious activity. For the same reason, this function collects information about the type of browser and the operating system (windows, android, iOS, etc.) of the user. This information cannot identify you directly and is stored for the minimum period necessary for network security. The specific information does not require your prior consent before downloading, as it is necessary for the safe operation of each website.

ACT & DRIVE, loyal to the values of personal data protection, uses the minimum required cookies for the operation of the website and the response to a request you submit (via the contact form or the booking form, so that the information you send with your message is delivered to us).

Cookies are small data / text files that are stored on your computer's hard drive by your browser and which are necessary or useful for the use of our website.

More about the cookies used, their categories (necessary-functional, statistical analysis, marketing) and your options regarding them, you can see here.

We do not use your personal data to make automated decisions that may have legal or other significant consequences for you, nor do we profile you based on your personal data.

You can submit your message on our website through the contact form. For this purpose, you will need to provide your name, mobile phone and email address so that we can contact you to respond to your message.

In case you choose to contact us using the contact form, none of the data you provide will be stored by this website or transferred / processed by anyone. Instead, the data will be entered into an email message and sent to us. Email content is encrypted before it is sent over the internet to travel securely and is decrypted by our local computers and devices after it is received. We will keep your message in our electronic mailbox for 12 months from the last communication, unless it includes your order to us, in which case it will be kept for up to 5 years after the end of our cooperation.

If you wish to request a reservation of a vehicle in order to rent it, you will need to register an email account to receive notifications about your orders, your name, address, delivery and pickup address, as well as a contact phone number. In case you act in your professional capacity and place an order as an entrepreneur, you will additionally be required to fill in the name of your business, so that the reservation can be made in its name. You will also be required to state your preferred payment method, i.e. bank deposit or cash. After submitting your order, you will receive an electronic message confirming its receipt to the e-mail address you provided. This message is not a commitment to rent the vehicle you selected, as ACT & DRIVE will first check its availability and respond to you. The payment will not be made through our website, but after our agreement, after confirming the possibility of renting the vehicle on our behalf.

The booking details you submit to us will be kept for 5 years from their submission, for the purposes of proving the transaction and establishing, supporting or exercising legal claims.

You have the right to know whether your personal data has been or will be the subject of processing and in any case to demand from ACT & DRIVE the correction of your personal data if it is inaccurate, or the completion of it in case of deficiencies. When updating your personal information, you may be asked to verify your identity before we can fulfill your request.

You can receive your personal data in electronic form. This right of yours applies:

A) if you provided them yourself

B) either by giving your consent

C) or for entering into a contract with us.

You will receive them in a structured, commonly used and machine-readable format (i.e. a type of electronic file widely used and easily readable by common software), and transmit or request that we transmit them to another controller, provided that this, not to adversely affect the rights and freedoms of other persons.

Under the conditions of the law, you can request the deletion of your personal data, as well as in specific cases the limitation of the processing that they are subject to. Personal data that we are required to retain due to legal obligations cannot be deleted. Deletion of personal data that is necessary for the execution of a contract, may lead to the cancellation of the contract or the impossibility of its execution.

You have the right to object at any time to the processing of data concerning you.

This right of yours applies if the reason for their processing by us is our legitimate interest and you have an objection due to any particular situation of yours (for personal, professional or social reasons).

You have the right to request the restriction of processing of your data.

This will apply if you dispute the accuracy of your data and until we verify it, when you consider the processing to be unlawful, when we no longer need it, or when you have exercised the right to object.

You have the right to file a complaint with the Personal Data Protection Authority if you believe that your data is being processed unlawfully. The Data Protection Authority recommends that you first contact us to submit any complaint or request. You can do it for free, by emailing info@adrentacar.gr. We will make every effort to satisfy your request. In case you are not satisfied with our answer, you can submit your complaint to the Authority (Kifisias Street 1-3, 115 23 Athens, tel. 210-6475600, www.dpa.gr, email: complaints@dpa.gr).

To exercise your rights, as well as for any information regarding the processing of your personal data, you can submit a request to info@adrentacar.gr).

We may need to ask you for identification before responding to make sure someone else is not exercising your right.

As a general rule, your request will be answered within one month of its receipt, or if it is particularly complex, you will be informed about it at least within a month for the delay that the complexity of the request may entail.

The information and all related actions in response to your requests are provided free of charge, unless they are excessive or repetitive.

Your personal data is kept only for as long as is necessary for the purpose for which it was collected, in accordance with what is stated above for each different use.

For the use of your data to be lawful, there must be a reason provided by law (legal basis). In any case where we make use of your personal data, this is done only if one of these legitimate reasons exists, which are specific:

The law allows the processing of personal data in certain cases to achieve the legitimate interests of the development of an organization, the promotion of its actions and services and their improvement, (unless the interests or the fundamental rights and freedoms of the data subject prevail). We see about not to infringe your fundamental rights and freedoms to serve our own legitimate interests. That is why we process your personal data on this basis, only if this processing is not particularly annoying or invasive to you.

Our legitimate interest in satisfying our customers and partners allows us to respond to questions or requests you submit to our email address or contact form. You can indicate that you object to this processing of your data by telling us in your message that you do not wish us to respond to you and/or to keep your data. Your objection statement will be accepted unless it outweighs our legitimate interests, such as when the message gives rise to our legal claims.

In some cases we may need to collect your personal data because we are required to do so by a legal provision. For example, you will have to give us your VAT number if you wish to issue an invoice for the vehicles we leased to you. For the same reason and because the law obliges us to take measures to fight fraud and corruption on the internet, we collect your electronic connection address (IP) when you visit our website.

In the above cases, failure to provide the necessary information will prevent us from providing you with the services you requested in order not to violate the law.

In the event that you submit a booking request to us, we process the personal data included in your request based on your request to enter into a rental contract with us. This data will be kept for 5 years from its submission, for the purpose of proving the transaction and establishing, exercising and supporting any legal claims.

Only the authorized partners of ACT & DRIVE have access to the data, whenever this is necessary. We may, on a case-by-case basis, give access to your data to our partners, who provide their services to us (such as website hosting providers, website management providers, IT support providers, courier companies, etc.) if their services are necessary for our operation and your service. All our partners are contractually bound to us to protect your personal data and are committed not to disclose it to anyone else.

In any case, your personal data will not be transferred, sold or disclosed to anyone for marketing purposes, without your prior express consent.

Your personal data is not transferred to third countries outside the EEA or to international organizations that do not enjoy a decision of adequacy for the protection of personal data. Our website data is stored on secure servers within the EU.

ACT & DRIVE implements appropriate technical and organizational measures in order to ensure the appropriate level of security of your data against risks. However, no information system is 100% secure. In any case, ACT & DRIVE has in place a plan to deal with any incident of violation, in order to eliminate or limit its consequences, according to which if a high risk is created for your rights or freedoms, you will be informed immediately.

Our Website may offer Social Networking and other related tools that allow you to share your actions within the Website with other applications, websites or mass media, and vice versa. Using such features allows information to be shared with your friends or the general public, depending on the settings you have specified in your personal profile on the social media you post. Also, if you follow us on the above media, or send us messages through them, we collect any information you have on them (name or nickname you use, photo or avatar, etc.), in order to provide you with information or respond to your messages. Regarding the data collected by each social media, please refer to the privacy policies of those social media services for more information about how they handle your data.

Also, within our Website you can find embedded third-party content (eg videos from You Tube, images, articles, etc.) or hyperlinks to third-party websites. This embedded content or clicking on the link technically behaves exactly as if you had visited the website that contains it.

The above sites may collect data about you, use cookies, embed additional third-party tracking, and track your interaction with this embedded content. This privacy statement does not apply to the user's access to other websites. Please consult the privacy policy of the website you are visiting each time.

    In the event that our website hyperlinks or embedded content lead to websites where protected intellectual works are presented to the public, we are not responsible for the event that these websites make a presentation without the permission of the copyright holders. In any case, ACT & DRIVE never places hyperlinks for profit and checks as far as possible these hyperlinks, in terms of the websites they lead to, so as not to present protected intellectual property without the permission of the owner of their intellectual rights.

ACT & DRIVE reserves the right to modify / update this Policy, without any obligation to notify you beforehand. Please always read the Privacy Policy before using our website so that you are informed of the current version of the Policy.

Last updated: April 2023