Privacy Policy

1. Who we are

This Privacy Policy applies to Rental Center Chania (operating as rental-center-chania.com), a car rental service based in Chania, Crete, Greece ("we", "us", "our").

Contact: info@rental-center-chania.com

2. Data we collect

2a. Quote request form

When you submit a quote request on our website, we collect:

• Your email address (required)
• Your phone number (required, as we may need to contact you about your rental)
• Rental details: pick-up/drop-off location, dates, times, vehicle category, transmission preference, driver age
• Any additional message you choose to include (flight number, special requests)

We use this information solely to respond to your enquiry and provide you with a rental quote. We do not use it for marketing without your explicit consent.

2b. Analytics (Google Analytics 4)

With your consent, we use Google Analytics 4 (GA4) to collect anonymised data about how visitors use our website. This includes:

• Pages visited and time spent on each page
• General geographic location (country/city level)
• Device type, browser and operating system
• Referring website or search engine

This data is aggregated and does not identify you personally. GA4 is operated by Google LLC. For information on how Google processes this data, see Google's Privacy Policy.

You can opt out of Google Analytics at any time using the Google Analytics Opt-out Browser Add-on, or by clicking "Decline" on our cookie banner.

2c. Server logs

Our web server automatically records standard log data including IP addresses, browser type, pages requested and timestamps. This data is used for security purposes and is retained for a maximum of 30 days.

2d. IP geolocation

When you submit a quote request, your IP address is looked up via ip-api.com to determine your approximate country/city. This is used solely for internal fraud prevention and is included in the email notification we receive. It is not stored in a database.

3. Legal basis for processing

We process your personal data on the following legal bases under GDPR Article 6:

• Contract performance (Art. 6(1)(b)) — processing your quote request and providing rental services
• Legitimate interests (Art. 6(1)(f)) — server security logs and fraud prevention
• Consent (Art. 6(1)(a)) — analytics cookies (Google Analytics 4). You may withdraw consent at any time.

4. Cookies

We use the following cookies:

• gdpr_consent — stores your cookie consent preference (accepted/declined). Stored in localStorage. No personal data.
• Google Analytics cookies (_ga, _ga_*, _gid) — only set if you accept cookies. Used to distinguish visitors and sessions. Set by Google LLC.

You can manage or delete cookies through your browser settings at any time. Note that disabling all cookies may affect website functionality.

5. Data sharing

We do not sell, rent or trade your personal data. We share data only as follows:

• Google LLC — analytics data (if you consent), processed under Google's standard contractual clauses
• ip-api.com — your IP address is sent for geolocation lookup on form submission (no personal data stored by them)
• Email provider — quote requests are sent via our server's mail function to our email inbox

All third parties are required to process your data securely and only for the purposes we specify.

6. Data retention

• Quote request emails are retained in our inbox for up to 2 years for business correspondence purposes
• Server logs are deleted after 30 days
• Analytics data is retained according to Google Analytics default settings (up to 14 months)

7. Your rights under GDPR

As an EU resident, you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to restriction — request that we limit how we use your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw analytics consent at any time via the cookie banner

To exercise any of these rights, contact us at info@rental-center-chania.com. We will respond within 30 days.

8. Data security

We take reasonable technical and organisational measures to protect your data, including HTTPS encryption on all pages and secure email handling. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

9. Children's privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has submitted data to us, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically.