Legal
Privacy Policy
Effective date: 23 April 2025
1. Data Controller
Prestige Transfer ("we", "us", "our") operates as the data controller for personal information submitted through this website. We are based in Santorini, Greece and are subject to the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Greek data-protection law.
2. Information We Collect
When you submit a booking enquiry through our contact form we collect the following personal data: • Full name • Email address • Phone / WhatsApp number • Pickup and drop-off locations • Transfer date and time • Number of passengers • Service type (Transfer or Tour) We do not collect payment card details; no payment is processed on this website.
3. How We Use Your Data
We use your personal data solely to: • Respond to your booking enquiry via WhatsApp or email • Confirm and manage your transfer reservation • Send service-related communications (e.g. driver details, schedule changes) We do not use your data for marketing purposes without your explicit consent, and we do not sell or rent your data to third parties.
4. Legal Basis for Processing
Processing is based on: • Contract performance – to take steps prior to entering a contract with you and to perform the transfer service you request (Article 6(1)(b) GDPR). • Legitimate interests – to respond to enquiries and operate our business (Article 6(1)(f) GDPR).
5. Data Retention
We retain booking-related personal data for up to two (2) years from the date of your last enquiry or completed transfer, after which it is securely deleted. Data may be retained longer only where required by applicable law (e.g. accounting or tax obligations).
6. Data Sharing
Your data is shared only with: • Our assigned driver, to the extent necessary to fulfil your booking. • WhatsApp (Meta Platforms), through which booking confirmations are communicated. Their privacy policy is available at whatsapp.com/legal/privacy-policy. No data is transferred outside the European Economic Area without appropriate safeguards.
7. Your Rights
Under GDPR you have the right to: • Access the personal data we hold about you • Rectify inaccurate data • Request erasure ("right to be forgotten") • Restrict or object to processing • Data portability To exercise any of these rights, please contact us at prestigetransfertours@gmail.com. We will respond within 30 days.
8. Cookies
This website uses only technically necessary cookies required for the site to function (e.g. session state). No analytics, advertising, or tracking cookies are set. You can disable cookies in your browser settings without affecting site functionality.
9. Security
We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data transmissions use TLS encryption.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised effective date. We encourage you to review this page periodically.
11. Contact
For any privacy-related enquiries or complaints: Prestige Transfer, Santorini, Greece Email: prestigetransfertours@gmail.com WhatsApp: +30 697 175 8517 You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).