Privacy Policy

At Rent a Car in Mykonos, we are committed to protecting your privacy and handling your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Greek data protection laws.

Last updated: July 2026

1. Who We Are

Rent a Car in Mykonos is an online booking platform that connects travellers with licensed local car rental companies on Mykonos island, Greece. We facilitate the comparison and booking of rental vehicles but do not own vehicles or provide rental services directly.

For inquiries about your data, please visit our contact page.

2. Data We Collect

When you use our website or booking services, we may collect the following types of personal data:

Booking information: name, email address, phone number, pick-up and drop-off dates and locations, driver's license details
Technical data: IP address, browser type and version, device information, time zone setting, operating system
Usage data: pages visited, time spent on pages, links clicked, search queries
Cookies and tracking technologies: as described in our cookies policy below

3. How We Use Your Data

We process your personal data for the following purposes:

To facilitate and complete your car rental booking
To communicate with you regarding your reservation
To provide customer support and respond to your inquiries
To improve our website functionality and user experience
To comply with legal and regulatory obligations
To prevent fraud and ensure platform security

The legal basis for processing is the performance of our contract with you, our legitimate business interests, and compliance with legal obligations.

4. Third-Party Widget and Data Sharing

Our website integrates a booking widget provided by DiscoverCars, our booking technology partner. When you interact with the booking widget, certain personal data (such as search criteria, booking details, and contact information) is transmitted to DiscoverCars and the selected local rental supplier to complete your reservation.

We share your personal data only when necessary for:

Processing and fulfilling your booking request
Payment processing and fraud prevention
Compliance with legal obligations or law enforcement requests

All third-party partners are contractually obligated to protect your data in accordance with GDPR standards.

5. Cookies Policy

We use cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and personalize content. Cookies are small text files stored on your device.

Types of Cookies We Use:

Essential cookies: necessary for the website to function properly (e.g., session management)
Analytics cookies: help us understand how visitors interact with our site (e.g., Google Analytics)
Functional cookies: remember your preferences and settings
Third-party cookies: set by our booking widget provider and payment processors

You can control cookie preferences through your browser settings. Note that disabling certain cookies may affect website functionality and the booking process.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this privacy policy:

Booking data: retained for up to 7 years to comply with accounting and tax regulations
Communication records: retained for up to 3 years for customer service purposes
Analytics data: anonymized after 26 months
Marketing data: retained until you withdraw consent or request deletion

After the retention period expires, we securely delete or anonymize your personal data.

7. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

Right of access: request a copy of the personal data we hold about you
Right to rectification: request correction of inaccurate or incomplete data
Right to erasure: request deletion of your personal data (subject to legal retention requirements)
Right to restriction: request limitation of processing in certain circumstances
Right to data portability: receive your data in a structured, machine-readable format
Right to object: object to processing based on legitimate interests or for direct marketing
Right to withdraw consent: withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us. We will respond to your request within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

SSL/TLS encryption for data transmission
Secure server infrastructure with regular security updates
Access controls and authentication protocols
Regular security audits and vulnerability assessments

While we strive to protect your data, no method of transmission over the internet is 100% secure. We encourage you to take precautions when sharing personal information online.

9. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) where our service providers are located. We ensure that such transfers comply with GDPR requirements through appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly.

11. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on this page with a new "last updated" date.

We encourage you to review this privacy policy periodically to stay informed about how we protect your data.

12. Contact and Complaints

If you have questions, concerns, or complaints about this privacy policy or our data processing practices, please contact us.

You also have the right to lodge a complaint with the Greek Data Protection Authority (Hellenic Data Protection Authority - HDPA) if you believe we have not complied with applicable data protection laws.

Related Information

Terms of Use - Our service terms and conditions
About Us - Learn more about our platform
Contact Us - Get in touch with questions or data requests
Home - Return to our homepage