This policy on personal data processing/protection (hereinafter "Policy") informs about the collection, storage, processing and use of your personal data in accordance with the paragraphs below.
The company “KGH TOURISM CORPORATION LIMITED" (hereinafter Athens Airport Car Rental AACR or "Company" or "we" or "us"), having its registered office at Koropi, Attica, 3rd Km Markopoulou-Paianias Avenue, Tel.: +302106022220, contact email: info@acr.gr, acting as the Controller, collects, stores, uses and generally processes your personal data.
1. What are Personal Data?
"Personal data" means any information concerning individuals, including first and last names, mailing address, email address, contact telephone number, etc., which identifies or can identify you (hereinafter "Personal Data" or "Data").
2. What is Personal Data Processing?
"Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated tools, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
3. Data we collect
We make sure to collect only Data absolutely necessary to serve the purpose for which they were provided and such Data are used solely and exclusively for the purposes for which they were collected. We will also use your contact data to inform you about issues concerning the rental and about new offers and services. Data are limited to data explicitly provided by you for a specific purpose subject to your consent. Also, we collect Data when you visit our website subject to your consent, which you are deemed to have granted by filling in the appropriate fields.
Identity data, such as first name, last name, father's name, date of birth, driver's license, tax identification number, personal identification card number.
Contact/product shipment data, such as mailing address, email address, telephone number.
Payment details, such credit/debit card number, PayPal account, bank account number.
Authentication details, such as IP address.
Rental contract history data with our Company.
Data of any overdue debts to our Company.
Data on car accidents involving our Company's vehicles.
Data on any abusive behavior towards ACR officials.
Geolocation data (gps), electronic application data (Bluetooth, navigator), Telematics application data.
4. How we use your Data
Your Data are processed either by authorized Company staff or by means of IT systems and electronic devices used by our Company and in certain cases, by third parties who are bound by a contract with our Company, undertaking the contractual responsibility to ensure the confidentiality and protection of your Data, and process them solely and exclusively for the purposes for which they were provided.
As a general rule, your Data are processed with a view to providing you with services, including:
Car Rental: The Company processes your Data as part of its contractual obligation to rent you a car, provide you with services (such as maintenance, paintwork, repair, car replacement, etc.), comply with its legal obligations, rebut, raise or exercise legal claims.
Compliance with applicable Legislation: The Company processes your Data to enable it to meet its obligations under the law, in particular tax and insurance legislation or to provide insurance coverage for vehicles under active insurance agreements.
Telematics application data: Some of our vehicles nay carry a Telematics application. This system locates the vehicle in case of theft or embezzlement or in case the vehicle is unjustifiably not returned to the lessor on the agreed date and at the same time it has not been possible to contact the lessee. Further data provided by the application is: a) Smart Check – in, i.e. evaluation of the kilometers traveled during the Lease, fuel level, etc., b) timely information on the maintenance status, etc., c) asset management in cases of significant damage to the vehicle, etc. d) list of assets, i.e. live mapping of the exact location at any time of the vehicles (owned by the lessor). The legal basis for processing is the legitimate interest in protecting the legal property of the company.
Response to personal data requests: To satisfy any of your rights (access, deletion, correction, etc.) we will ask you for the minimum identification data as well as your signature. Legal basis is our legal obligation to respond to data subjects’ requests.
4. You can ask us to erase your Data if they are no longer necessary for the above purposes of processing or if you wish to withdraw your consent in cases where it is the sole legal basis.
5. You have the right to the portability of your Data.
6. You can ask us to provide you with Data you have provided in a readable format or to transmit them to another controller.
7. You have the right of restriction of processing.
8. You can ask us to restrict the processing of your Data for as long as your objections to their processing is under review.
9. You have the right to object and withdraw your consent to the processing of your Data.
10. You can object to the processing of your Data and we will stop processing them in the absence of other imperative or legal grounds overriding your right. If you have declared your consent to the collection, processing and use of your personal data, you may withdraw it at any time with prospective effect.
11. Applicable law to the processing of your Data by us
The applicable law is Greek law as shaped by the General Data Protection Regulation (Regulation (EU) 2016/679), and the applicable national and European legislative and regulatory framework on personal data protection.
The Courts of Athens have jurisdiction over disputes arising in connection with your Data.
Member of the Greek Tourism Organization
