Privacy Policy

• 1. What we collect
• 2. Why & legal basis
• 3. Cookies
• 4. Who we share with
• 5. International transfers
• 6. Retention
• 7. Your rights
• 8. Security
• 9. Children
• 10. Changes

Introduction

This Privacy Policy explains how Luxury Auto Link Mykonos collects, uses and protects personal data when you visit our website, request a quote, or travel with us. We process personal data in accordance with the EU General Data Protection Regulation (Regulation 2016/679, "GDPR") and Greek data protection law.

We keep this simple: we ask only for what we need to drive you safely and to run our business lawfully. We do not sell personal data.

1. Personal data we collect

Booking and service data

• Name of the person booking and, where relevant, of the lead passenger
• Contact details: email address, mobile or WhatsApp number
• Journey details: pick-up and drop-off addresses, date and time, flight or vessel number, number of passengers, luggage, vehicle preference
• Special requests you choose to tell us, such as child seat requirements or accessibility needs
• Payment and invoicing information — for example the amount, method and, where an invoice is issued, billing name, address and VAT number. We do not store full card details.
• Correspondence with us by email, WhatsApp, telephone or web form, and any feedback or complaint

Website data

• Technical data automatically recorded by our hosting provider in server logs, such as IP address, date and time of request, pages requested, referring page and browser type
• Cookie and similar data, as described in clause 3

Please provide only the information needed for your transfer. If a special request requires health-related detail (for example wheelchair assistance), we use it solely to arrange a suitable vehicle and delete it once the service is complete.

2. Why we use it, and our legal basis

• To arrange and perform your transfer — confirming the booking, assigning a driver and vehicle, monitoring your flight or vessel, contacting you on the day. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• To answer enquiries and quote requests. Legal basis: performance of a contract or steps prior to it, or our legitimate interest in responding to you (Art. 6(1)(b) and (f)).
• To issue receipts and invoices and meet tax and accounting duties. Legal basis: legal obligation (Art. 6(1)(c)).
• To keep our service and website secure and to prevent fraud or misuse. Legal basis: legitimate interests (Art. 6(1)(f)).
• To handle complaints, insurance matters and legal claims. Legal basis: legitimate interests and legal obligation.
• To send service messages or, if you have asked for them, occasional offers. Legal basis: consent, which you may withdraw at any time (Art. 6(1)(a)).
• To use non-essential cookies or analytics. Legal basis: consent.

3. Cookies and similar technologies

Our website relies on a minimal set-up. Strictly necessary cookies or local storage may be used so that the site functions correctly and securely; these do not require consent. Any analytics or marketing cookies, or content embedded from third parties such as fonts, maps, review widgets or messaging buttons, may set cookies or transmit your IP address to those providers, and are used only where permitted by law or with your consent.

You can block or delete cookies at any time in your browser settings. Blocking strictly necessary cookies may affect how parts of the site work.

4. Who we share data with

We disclose personal data only where necessary, and only to:

• Our drivers and partner transport providers, who receive the minimum details needed to complete your journey (name, contact number, pick-up and drop-off, timing, passenger and luggage count).
• Service providers acting on our instructions — website hosting, email and messaging platforms, payment handling and accounting support. These act as processors under written agreements.
• Professional advisers, insurers and authorities, where required by law or to establish, exercise or defend legal claims.

We do not sell or rent personal data, and we do not use it for automated decision-making or profiling that has legal effects on you.

5. International transfers

Our data is primarily processed within the European Economic Area. Where a provider processes data outside the EEA, we rely on an adequacy decision of the European Commission or on appropriate safeguards such as the Standard Contractual Clauses, together with additional measures where needed. You may request further information about these safeguards.

6. How long we keep it

• Booking and journey data: for the duration of the service and normally up to 12 months afterwards, to handle follow-up questions, lost property and complaints.
• Invoices and accounting records: for the retention period required by Greek tax law.
• Correspondence: normally up to 24 months, unless it relates to an ongoing matter.
• Marketing consents: until you withdraw consent, plus a short record of the withdrawal itself.
• Server logs: for a short period set by our hosting provider, for security purposes.

When data is no longer needed, we delete it or anonymise it securely.

7. Your rights

Under the GDPR you have the right to request access to your personal data, correction of inaccurate data, erasure, restriction of processing, and portability; to object to processing based on our legitimate interests; and to withdraw consent at any time where processing is based on consent.

To exercise any of these rights, write to info@luxuryautolinkmykonos.com. We reply within one month, and may ask for information to confirm your identity. Exercising your rights is free of charge.

If you believe we have not handled your data properly, you may lodge a complaint with the Hellenic Data Protection Authority (Athens, Greece) or with the supervisory authority of your country of residence. We would appreciate the chance to resolve the matter with you first.

8. Security

We apply appropriate technical and organisational measures to protect personal data, including encrypted transmission of our website (HTTPS), access limited to those who need it, and instructing drivers and staff to treat passenger details as confidential. No system can be guaranteed completely secure, but we act promptly to investigate and, where required, notify any personal data breach.

9. Children

Our services are booked by adults. We do not knowingly collect data directly from children; details of children travelling (such as age or weight for a child seat) are provided by the booking adult and used only to arrange safe transport.

10. Changes to this Policy

We may update this Policy to reflect changes in our services or in the law. The current version is always published on this page with its update date shown above. Material changes affecting you will be communicated where reasonably possible.

Questions about this Policy? Contact us at info@luxuryautolinkmykonos.com.