Privacy Policy | Corfu Car Hub

Last Updated: 1 January 2025

This Privacy Policy explains how Corfu Car Hub ("we", "us", "our"), operating at corfucarhub.com, collects, uses, stores and protects your personal data when you visit our website or make a car rental booking. We are committed to compliance with the General Data Protection Regulation (GDPR) and all applicable data protection laws.

1. Data Controller

The data controller responsible for your personal data is:

Corfu Car Hub
Email: book@corfucarhub.com
Website: https://corfucarhub.com

2. Data We Collect

We may collect the following categories of personal data:

Identity data: First name, last name, date of birth, nationality, driving licence number.
Contact data: Email address, phone number.
Booking data: Pickup and return dates, vehicle preference, pickup location, flight number, special requests.
Payment data: Partial payment information processed via secure third-party payment gateways. We do not store full card numbers.
Technical data: IP address, browser type and version, time zone, operating system, pages visited, referring URL.
Usage data: How you interact with our website, search queries, booking steps completed.
Cookie data: See Section 4 below.

3. Purpose & Legal Basis

We process your personal data for the following purposes:

Purpose	Legal Basis
Processing your car rental booking and sending confirmation	Performance of a contract (Art. 6(1)(b) GDPR)
Communicating with you about your booking	Performance of a contract (Art. 6(1)(b) GDPR)
Fraud prevention and security	Legitimate interests (Art. 6(1)(f) GDPR)
Website analytics and performance improvement	Legitimate interests (Art. 6(1)(f) GDPR)
Compliance with legal obligations	Legal obligation (Art. 6(1)(c) GDPR)
Marketing communications (with consent)	Consent (Art. 6(1)(a) GDPR)

4. Cookies & Analytics

We use cookies and similar tracking technologies to improve your experience on our site. Cookies are small text files stored on your device.

Types of cookies we use:

Essential cookies: Required for the website to function correctly. Cannot be disabled.
Analytics cookies: Help us understand how visitors interact with the website. We use Yandex Metrika for website analytics. Yandex Metrika collects anonymised usage data including page views, session duration and click behaviour.
Booking widget cookies: Set by our third-party booking engine (LocalRent) to track booking sessions and preferences.

You can control cookie settings through your browser settings. Disabling cookies may affect website functionality.

5. Third Parties

We share personal data with trusted third parties only where necessary:

LocalRent (booking engine): Processes booking data on our behalf to facilitate car rental reservations. Subject to their own privacy policy.
Car rental suppliers: Receive necessary personal data (name, driving licence, flight details) to facilitate vehicle collection.
Payment processors: Handle payment transactions securely. We do not receive or store full card details.
Yandex Metrika: Receives anonymised analytics data. See Yandex Privacy Policy.
Legal authorities: We may disclose data where required by law or court order.

We do not sell your personal data to third parties.

6. Data Retention

We retain your personal data only for as long as necessary:

Booking data: Retained for 3 years after your rental end date for accounting and legal purposes.
Email communications: Retained for 2 years.
Analytics data: Aggregated and anonymised; individual session data retained for up to 14 months.
Marketing consent records: Retained until consent is withdrawn.

7. Your Rights

Under GDPR, you have the following rights regarding your personal data:

Right of access: Request a copy of the personal data we hold about you.
Right to rectification: Request correction of inaccurate or incomplete data.
Right to erasure: Request deletion of your personal data ("right to be forgotten"), subject to legal retention requirements.
Right to restriction: Request that we restrict processing of your data in certain circumstances.
Right to data portability: Receive your data in a structured, machine-readable format.
Right to object: Object to processing based on legitimate interests, including direct marketing.
Right to withdraw consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at book@corfucarhub.com. We will respond within 30 days.

You also have the right to lodge a complaint with your national supervisory authority. In Greece: Hellenic Data Protection Authority (HDPA).

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These include SSL encryption, access controls and regular security reviews. However, no internet transmission is 100% secure - we encourage you to use strong passwords and protect your account credentials.

9. Children

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at book@corfucarhub.com.

10. Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by updating the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

11. Contact

If you have any questions, concerns or requests relating to this Privacy Policy or your personal data, please contact us:

Corfu Car Hub
Email: book@corfucarhub.com
Website: corfucarhub.com/contacts/