Privacy Policy
Last updated: 6 June 2026
AutoKefalonia respects your privacy and handles personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Greek and European data protection rules. Use the sections below to see what we collect, why we collect it, how long we keep it, and what rights you have.
Who we are
This website is operated by AutoKefalonia, a local car rental business in Kefalonia, Greece.
- Website: https://autokefalonia.com
- Email: info@autokefalonia.com
- Service area: Kefalonia, Greece, including Kefalonia Airport and selected pickup/drop-off locations
If you have any question about this policy or how your personal data is handled, contact us at info@autokefalonia.com.
Personal data we collect
Depending on how you use the website or our services, we may collect the following information:
- Contact details, such as your name, email address, phone number, and WhatsApp number.
- Rental enquiry details, such as travel dates, pickup and drop-off locations, vehicle preference, number of passengers, child seat requests, and message content.
- Booking details, such as selected car, rental period, pickup/return time, price, extras, and booking notes.
- Driver and rental eligibility details when needed to complete a rental, such as driving licence information, age, identification details, or passport/ID details.
- Payment and invoice information when required for accounting, tax, or rental records. AutoKefalonia currently supports payment on arrival; if online payments are introduced later, payment data may be processed by a secure payment provider.
- Technical website data, such as IP address, browser type, device type, pages visited, referral source, and cookie identifiers.
How we use your data
We use personal data only when there is a lawful reason to do so. The main purposes are:
- To answer enquiries and provide customer support.
- To check availability, prepare quotes, and manage car rental bookings.
- To deliver and collect rental vehicles at agreed pickup/drop-off locations.
- To prepare rental agreements and comply with legal, tax, insurance, and accounting obligations.
- To communicate important booking information before, during, or after your rental.
- To improve the website, understand how visitors use it, and fix technical issues.
- To protect the website, prevent misuse, and maintain service security.
Legal basis for processing
We process personal data under one or more of the following legal bases:
- Contract: to provide quotes, bookings, rental agreements, and related services you request.
- Legal obligation: to keep records required by Greek tax, accounting, insurance, or legal rules.
- Legitimate interest: to operate our business, respond to enquiries, protect the website, and improve our services.
- Consent: where required, for example for optional cookies, analytics, marketing communications, or similar non-essential processing.
Booking system and service providers
Our website uses a car rental booking system to manage availability, vehicles, prices, locations, extras, and reservations. Information you submit through the booking process may be stored in this system so that we can manage your rental.
We may use trusted service providers for website hosting, email delivery, booking management, analytics, spam/security protection, review display, or payment processing if online payments are enabled in the future. These providers may process personal data only as needed to provide their services to us.
When we share personal data
We do not sell your personal data. We may share limited information only when necessary, including with:
- Staff or partners who help provide the rental service, vehicle delivery, customer support, or booking administration.
- Insurance providers, roadside assistance providers, accountants, legal advisers, or authorities when required for a rental, claim, dispute, tax, or legal obligation.
- Technology providers that support the website, hosting, email, booking system, analytics, security, or payment processing.
Cookies and similar technologies
The website may use cookies or similar technologies to make the site work correctly, remember booking/session choices, improve performance, protect forms, display reviews, and measure website traffic.
Some cookies are essential for the website and booking process. Non-essential cookies, such as analytics or marketing cookies, should only be used where permitted by law and, where required, after your consent. You can manage or block cookies through your browser settings. If a cookie consent tool is active on the website, you can also use it to change your preferences.
Analytics, reviews, and third-party content
We may use analytics tools to understand how visitors find and use the website. We may also display customer reviews or third-party content, such as review widgets, maps, social media links, or embedded services. These services may collect technical information such as your IP address, device details, or interaction data according to their own privacy policies.
How long we keep data
We keep personal data only for as long as necessary for the purpose it was collected, including:
- Enquiry and contact data: for as long as needed to respond and manage follow-up communication.
- Booking and rental records: for as long as needed to provide the service and meet legal, tax, insurance, and accounting obligations.
- Technical logs and security records: for a limited period needed to maintain website security and diagnose issues.
- Cookie and analytics data: according to the retention settings of the relevant tool or provider.
International transfers
Some technology providers may process data outside Greece or the European Economic Area. Where this happens, we rely on appropriate safeguards required by data protection law, such as adequacy decisions, Standard Contractual Clauses, or equivalent protection mechanisms used by the provider.
Your GDPR rights
Under GDPR, you may have the right to:
- Request access to the personal data we hold about you.
- Ask us to correct inaccurate or incomplete data.
- Ask us to delete personal data where there is no lawful reason to keep it.
- Ask us to restrict or object to certain processing.
- Request a copy of your data in a portable format where applicable.
- Withdraw consent where processing is based on consent.
To exercise your rights, contact info@autokefalonia.com. We may need to verify your identity before responding.
Complaints and changes to this policy
If you believe your personal data has not been handled correctly, please contact us first so we can try to resolve the issue. You also have the right to contact the Hellenic Data Protection Authority at https://www.dpa.gr.
We may update this Privacy Policy when our services, website tools, or legal requirements change. The latest version will always be published on this page.
