Regarding the lawful processing of personal data:
The following website dirtwheels.gr fully complies with the applicable standards ofprotection concerning personal data and the privacy of its visitors. By this, we informour visitors about the type of information we collect, maintain, and process whenusers browse and make reservations via the website.
The collection and processing of the aforementioned data makes our companyresponsible for processing under the legislation, specifically under the EuropeanRegulation 679/2016 and Law No. 4624/2019 (Government Gazette 137/29 Aug.2019) governing Personal Data. Hereby, we provide users with complete informationabout who we are, why we collect personal data, what we use them for, and whatusers' rights are as subjects of personal data.
If users consent to the use and retention of cookies (see more information aboutcookies in the terms of use) when they visit the website for the first time, thecompany may use cookies each time the same user visits the website.
The company under the trade name "DIRTWHEELS OE" is a legal entityheadquartered in the Municipality of Agios Nikolaos, Lasithi, registered in theGeneral Commercial Registry with number G.E.MI. 173917541000, making everypossible effort to comply with the provisions of the European Regulation for theProtection of Personal Data (EU 2016/679) and the relevant Greek legislation inforce and applicable.For this purpose, the company takes necessary measures to protect the privacy andsecurity of Personal Data. Specifically, it has developed and maintains an internalsecurity policy based on appropriate measures, while adequately informing andtraining its employees.
The company, acting as the data controller, hereby declares that it collects andprocesses personal data exclusively for specific, explicit, and legitimate purposes, andonly to the extent that the collection is necessary for their implementation. Thesepurposes mainly concern the proper and uninterrupted operation of the companyand the development of e-commerce.
We collect and retain personal data only for as long as it is deemed necessary, whilealso ensuring their accuracy and updating, always subject to the user's consent whoprovided us with this data.
According to the General Data Protection Regulation 679/2016, personal dataprocessing is any operation or set of operations performed on personal data, whetheror not by automated means, such as collection, recording, organization, structuring,storage, adaptation or alteration, retrieval, consultation, use, disclosure bytransmission, dissemination or otherwise making available, alignment orcombination, restriction, erasure, or destruction of such data.
According to the aforementioned General European Regulation 679/2016, whichallows the processing of personal data for certain purposes only, the companycollects, retains, and processes such data in order to achieve its commercial purpose.Specifically, the company collects and processes personal data, which are certainpieces of information regarding users of the website (and generally its customers), sothat each user/customer can be identified directly or indirectly based on thisinformation.
For example, the company informs its users that it may collect, retain, and processthe following personal data:
The company also notifies users that in case of refusal to disclose any of theabove-mentioned personal data, as requested on a case-by-case basis, it may not bepossible to provide our services to them.
Furthermore, the company reserves the right to automatically collect certaintechnical data during your use and browsing of the website. Indicatively, it maycollect:
The processing of personal data takes place in order for users to make use of theservices of our website and specifically, to make relevant bookings for the rental offour-wheel vehicles or participation in organized tours. For this reason, the companyrequests identification and contact details from users, such as name, telephonenumber, email address, as well as information regarding the payment method chosenby you, etc. Some of the information requested in order to make the reservation isconsidered mandatory, while others are optional, and their non-disclosure does notprevent the completion of the reservation.
Furthermore, the company uses and stores some of the personal data to maintainand update its customer database.
The processing of personal data is primarily for the smooth execution of yourcontractual relationship with us or third parties (companies cooperating with us).
In addition, the company processes the aforementioned "technical data" underspecific circumstances, which may fall under the concept of personal data and areprotected by law. The company informs users that it collects and processes this datasolely to prevent or address illegal or malicious use of the website or for statisticalpurposes, always in an anonymous or pseudonymous form.
Finally, the company processes personal data in cases where this is mandatory bylaw, such as for example, in view of an official directive or a judicial or other decisionof the Authorities, as well as to safeguard its rights and demands, and for cases ofdefense of the company before any judicial, arbitration, or administrative authority.
Specifically, the company collects and processes personal data in order to:
In the event that you visit the website and perform some of the steps described formaking a reservation, if it is not completed, the company collects and processespersonal data within the framework of the applicable legislation on the protection ofpersonal data.
The company informs users that even in the case of payment being made through thewebsite, the company itself does not record or store payment details (e.g.,credit/debit card number or other banking details). Payment details and relevantinformation are provided directly and exclusively by users of the website to therespective provider of payment banking services.
The company processes personal data, depending on the purpose of processing.Mainly, the processing of personal data is carried out:
The company ensures that it will not transfer, disclose, or provide users' data to thirdparties (except those mentioned herein) for any purpose or use other than what isrequired by applicable law or demanded by public/judicial authorities.
Recipients of your data may include:
The company informs users that it takes measures to ensure the security of theirpersonal data. The personal data of users that we maintain are protected throughtechnical and organizational measures to effectively prevent loss, alteration, ormisuse by third parties.
In any case of personal data transmission, they are transmitted in encrypted formand stored on secure (password-protected and firewall-protected) servers. In anycase, information transmission over the internet is inherently insecure, and thecompany cannot guarantee the absolute security of data transmitted through it, a factthat you accept by reading our Privacy Policy and using the website.εια των δεδομένων που διακινούνται μέσω αυτού, γεγονός το οποίο αποδέχεστε έχοντας διαβάσει την Πολιτική Απορρήτου μας και κάνοντας χρήση του ιστότοπου.
Users' contribution to the security of their data is crucial, especially concerningmaintaining confidentiality for their credit/debit card details (which are discloseddirectly to relevant banking institutions or authorities).
Beyond the foregoing, the company informs users that its personnel, employees, andexecutives who process personal data are bound by law to maintain confidentiality.
The company informs users that personal data are retained for as long as necessaryto achieve the purpose for which the data were collected. This period is determinedby law. In any case, personal data are not retained for a period longer than necessaryto achieve the respective purpose.
All data we maintain within the framework of the contractual relationship is retainedfor a maximum period of twenty (20) years.
Your consent statement for receiving a newsletter is retained for as long as theCompany sends you newsletters, unless you opt to unsubscribe
All personal data are subject to this privacy policy. If website users withdraw theirconsent, the legality of processing before such withdrawal is not affected.
Ο παρόν ιστότοπος ενδέχεται να περιλαμβάνει "υπερ-συνδέσμους" (hyperlinks) ή διαφημιστικά μηνύματα (banners), που οδηγούν σε ιστότοπους τρίτων επιχειρήσεων.
This website may contain "hyperlinks" or banner advertisements leading tothird-party websites.If users follow the above links/banners, the company is in no way responsible andcannot control the data protection practices and measures regarding externalwebsites. In this case, users are encouraged to inform themselves independentlyabout the protection of their data on these external websites.
The company informs users that the data we collect and process may be processedand transferred between any countries where our partners operate. They may evenbe transferred to countries that do not have equivalent legislation on personal dataprotection as that applied in the European Economic Area, such as the USA, Russia,Japan, China, India, etc.
Website users are aware that browsing the internet is notalways safe. The personal data you provide through our website or submit forpublication on our website may be exposed via the Internet anywhere in the world.We will make every effort within the scope of our capabilities and in accordance withour Policy, but we cannot prevent the use or misuse of such information by thirdparties, particularly those located abroad.
Website users, upon indicating in the corresponding field that they agree andconsent to the processing of their Personal Data, give their consent and approval forthe processing of such data, either by the company or by a business collaboratingwith us, regarding the specific purposes described in this policy. Users have the rightto revoke this consent and to exercise their rights provided by law at any time.
The rights that website users have as "data subjects" include the following inparticular:
If you wish to exercise any of the above rights, you should contact us via email at thefollowing address dirtwheelscrete@gmail.com
In case the company does not respond within a reasonable time to your request, or incase of an inappropriate response from the company, you have the right to lodge acomplaint with the Hellenic Data Protection Authority.
Such complaints can be submitted electronically at the address www.dpa.gr, byphone at +30-210 6475600, or in writing to: Hellenic Data Protection Authority, 1-3Kifisias Ave., 115 23 Athens (or wherever the aforementioned Authority is based).
This privacy policy is reviewed, and if necessary, updated and revised periodically,based on current national and EU legislation, as well as any changes in our servicesand our use of personal data. You should periodically check this section to ensurethat you understand any changes to our policy. We may inform you of changes to ourpolicy via email or SMS, or through a private messaging system on our website.