Privacy Notice (GDPR)
1. Data Controller
Martin Preci, Apollonos 10, Vouliagmeni 166 71, Greece. Contact: precimartin4@gmail.com.
2. Data we collect
To process a booking we collect: full name, email, phone number, pickup/drop-off addresses, date and time, optional flight number, payment confirmation reference. We do not store payment card details — these are handled directly by Viva Wallet (PCI-DSS compliant).
3. Purpose & legal basis
Performance of the transport contract (Art. 6(1)(b) GDPR). The driver receives a WhatsApp message with the booking details so the trip can be performed.
4. Retention
Your booking data (name, contact details, pickup and drop-off) is automatically deleted within 48 hours of the scheduled trip time. Proof of payment is retained by our payment provider, Viva Wallet, for the period required by Greek tax law (currently 5 years); we do not separately store your operational personal data beyond that window.
5. Recipients
We share booking data only with the service providers needed to perform your trip: Viva Wallet (payment processing), Upstash (secure booking database), Resend (sending your confirmation email and notifying the driver by email), CallMeBot (WhatsApp notification to the driver), and Geoapify and Google Maps (address autocomplete and distance calculation if you enter a custom address). These providers act as our processors and may only use the data to provide their service to us.
6. International transfers
Some of our processors (for example Resend, Google, and Vercel) are based outside the European Economic Area, mainly in the United States. Where your data is transferred outside the EEA, it is protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision.
7. Your rights
Access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
8. Cookies & analytics
We use only essential cookies, needed to keep your booking session active and to remember your language choice. We do not use advertising or cross-site tracking cookies. For anonymous, aggregated visitor statistics we use Vercel Web Analytics, which is cookieless: it sets no cookies and stores no persistent identifier or directly identifying data. Vercel acts as our processor for this.
