PanCrete Rent a Car is the controller responsible for the personal information described in this policy.

• Legal business name: [ADD LEGAL BUSINESS NAME]
• Trading name: PanCrete Rent a Car
• Address: Melidoni, Apokoronas, Chania, Crete, Greece
• Email: privacy@pancrete.gr
• Telephone: 1234567

Depending on how you interact with PanCrete, we may collect:

• Identity details: full name, date of birth, signature and customer reference.
• Contact details: postal address, email address and telephone number.
• Driver details: driving-licence number, issuing country, issue/expiry dates, licence category and details of additional drivers.
• Identification details: identity card or passport information where required to verify identity or complete the rental.
• Booking details: rental dates, vehicle category, collection/return locations, flight or accommodation details, selected extras and special requests.
• Payment details: transaction amount, payment method and payment status. Card information may be processed directly by our payment provider.
• Rental and incident details: rental agreement, vehicle inspection records, photographs, fuel level, mileage, fines, accidents, damage, insurance claims and roadside-assistance records.
• Communications: emails, messages, telephone enquiries, complaints and customer-service correspondence.
• Technical data: IP address, browser/device information, website logs and cookie preferences.

Please do not send health information or other sensitive personal data unless it is necessary for a specific request and we have asked you to provide it.

When information is required: If you do not provide details needed for the rental agreement, identity/licence verification or a legal obligation, we may be unable to confirm or provide the rental.

We collect information directly from you when you use our website, submit a booking, email or call us, complete a rental agreement, collect or return a vehicle, or report an incident.

We may also receive relevant information from a person making a booking for you, an additional driver, a travel or accommodation partner, a payment provider, an insurer, roadside assistance, the Police or another competent authority. A person providing another driver’s information must ensure that the driver is informed about this policy.

We share only the information reasonably necessary with:

• Website hosting, booking-system, email, IT and technical-support providers.
• Payment processors, banks and accounting providers.
• Vehicle owners, leasing providers and fleet-management providers where relevant to your rental.
• Insurance companies, loss adjusters, roadside assistance, repairers and towing providers.
• Airports, parking or delivery partners when necessary for the agreed collection or return.
• Police, courts, tax authorities and other public authorities when legally required.
• Professional advisers, including accountants and lawyers.

We do not sell or rent personal information to third parties.

If online card payments are enabled, card details are submitted securely to the payment provider and are handled under that provider’s privacy and security terms. PanCrete generally receives transaction details such as the amount, date, payment status and a limited payment reference rather than the complete card number.

If you pay at collection, the information recorded depends on the payment method and the requirements for issuing the relevant receipt or invoice.

Some technology providers may process information outside Greece or the European Economic Area. Where this occurs, we use providers and safeguards permitted under applicable data-protection law, such as an adequacy decision or approved contractual protections.

We keep personal information only for as long as required for the purpose for which it was collected, including contractual, accounting, tax, insurance and legal-claims requirements.

• Unsuccessful booking enquiries are normally kept for up to 12 months.
• Rental agreements, invoices, payment records and related documentation are kept for the period required by Greek law and for the establishment or defence of legal claims.
• Accident, damage and insurance files may be kept until the claim and any applicable limitation period have ended.
• Marketing information is kept until consent is withdrawn or the information is no longer necessary.
• Security and technical logs are retained for a limited period appropriate to their purpose.

Information may be kept longer where required by law, a court, a competent authority or an ongoing legal dispute.

We use reasonable technical and organisational safeguards designed to prevent unauthorised access, accidental loss, alteration or disclosure. Measures may include encrypted website connections, access restrictions, secure accounts, software updates, backups and staff confidentiality.

No internet transmission or storage system can be guaranteed to be completely secure. If a personal-data breach creates a risk requiring notification, we will act in accordance with applicable law.

Subject to the conditions of the General Data Protection Regulation (GDPR), you may have the right to:

• Request access to your personal information and receive a copy.
• Request correction of inaccurate or incomplete information.
• Request deletion of information in certain circumstances.
• Request restriction of processing in certain circumstances.
• Object to processing based on legitimate interests and object at any time to direct marketing.
• Request portability of information you provided to us, where applicable.
• Withdraw consent at any time, without affecting processing that occurred before withdrawal.
• Lodge a complaint with a competent supervisory authority.

To exercise a right, email privacy@pancrete.gr. We may request reasonable information to verify your identity before responding.

You may also contact the Hellenic Data Protection Authority, the supervisory authority in Greece.

Cookies are small text files stored on your device when you visit a website. PanCrete may use the following categories:

Where non-essential cookies are present, they should remain disabled until you make an affirmative choice. You can accept, reject or change optional cookie categories through the website’s cookie settings. You may also delete cookies through your browser, although this can affect some website functions.

Website setup note: This policy does not itself block cookies. The website must also use a properly configured consent banner that prevents optional analytics and marketing scripts from loading before consent.

Our vehicle-rental services are not directed to children and a minor cannot enter into a rental agreement. We may process limited information relating to a child only when an adult requests equipment such as a suitable child seat. Please provide only the information necessary for that request.

Our website may contain links to external websites or embedded services. Their operators are responsible for their own privacy practices. We recommend reviewing their privacy information before submitting personal data.

We may update this policy when our services, providers or legal obligations change. The current version will be published on this page and the “Last updated” date will be revised. Material changes may also be communicated by an additional appropriate notice.