Privacy notice
Last updated: 17 May 2026
This Privacy Notice describes how Lirida Car Rentals processes personal data in accordance with the General Data Protection Regulation (EU 2016/679 — "GDPR") and Greek Law 4624/2019.
1. Data controller
Lirida Car Rentals
Matthaiou Zachariadi 57, 700 07 Malia, Greece
Email: info@liridarentals.gr
Phone: +30 698 604 3882
We have not appointed a Data Protection Officer (DPO) as the conditions of Article 37 GDPR are not met. For any data-protection matter, please contact us at info@liridarentals.gr.
2. Categories of personal data
- Contact details: name, country, phone, email.
- Rental details: pickup/dropoff dates and times, locations, chosen vehicle, notes.
- Driver details: age, years licensed, flight number (optional).
- Contract data (after booking): ID or passport details, driving licence number, credit-card details for deposit (handled directly via the bank terminal — not stored by us).
- Technical website data: pseudonymised IP address, device/browser type, visit timestamps. Collected only if you accept statistics cookies.
3. Purposes and legal bases
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Responding to your enquiry / quote request | Art. 6(1)(b) — pre-contractual measures |
| Concluding and performing a rental contract | Art. 6(1)(b) — performance of contract |
| Issuing invoices, keeping tax records | Art. 6(1)(c) — legal obligation (Greek tax code) |
| Handling accidents, damage and insurance claims | Art. 6(1)(f) — legitimate interest |
| Website analytics (Google Analytics 4) | Art. 6(1)(a) — consent through the banner |
4. Retention
- Enquiries that do not lead to a booking: 12 months from last contact.
- Completed rentals (contracts, invoices): 5 years from end of use, in line with Greek tax law.
- Accident / claim records: until final settlement plus one (1) year.
- Google Analytics 4 statistics: 14 months (GA4 default).
- Cookie-consent records: 12 months or until withdrawn.
5. Recipients and processors
- Brevo (Sendinblue SAS), France — sending confirmation and customer-care emails.
- Google Ireland Limited — Google Analytics 4, only if consent is given.
- Our accountants — for tax bookkeeping.
- Insurance carriers — only in the event of damage or accident.
- Public authorities — where there is a legal obligation to provide data.
We do not sell or otherwise make your data available to third parties for commercial purposes.
6. International transfers
Google may process some data outside the European Economic Area. Where applicable, transfers rely on European Commission adequacy decisions or on Standard Contractual Clauses (SCCs).
7. Your rights
You have the following rights, free of charge unless your requests are manifestly unfounded or excessive:
- Access (Art. 15)
- Rectification (Art. 16)
- Erasure — "right to be forgotten" (Art. 17)
- Restriction (Art. 18)
- Portability (Art. 20)
- Objection (Art. 21)
- Withdraw consent at any time, where processing is based on it (Art. 7(3))
To exercise these, email info@liridarentals.gr. We respond within one (1) month, extendable by two (2) further months for complex requests.
8. Right to lodge a complaint
If you believe the processing infringes your rights, you may lodge a complaint with the Hellenic Data Protection Authority (HDPA): 1–3 Kifissias Ave., 115 23 Athens, Greece, tel. +30 210 6475600, www.dpa.gr.
9. Automated decision-making
We do not take decisions based solely on automated processing, nor do we carry out profiling concerning you (Art. 22 GDPR).
10. Whether providing data is required
Completing the form fields is necessary to respond to your enquiry and to enter into a rental contract. Without that data we will not be able to serve you.
11. Security
We apply technical and organisational measures: transport-layer encryption (HTTPS), access controls, activity logging, regular backups and staff training.
12. Cookies
Details about the cookies we use and how to manage your consent are on the Cookies page.
13. Changes to this notice
We update this notice when needed. The "last updated" date appears at the top. Material changes are announced clearly on the website.
