Privacy Policy — WanderVans Crete Camper Van Rental

Section 1

Introduction

1.1 Privacy Statement

We are pleased that you are visiting our website. The protection of your personal data is very important to us. Wander Vans Crete ("WVC", "we" or "us") attaches great importance to the security of user data and compliance with data protection law.

WVC websites may contain links to third-party websites to which this privacy statement does not apply. We have no knowledge of or influence over the data collected by those operators.

1.2 Definitions (GDPR)

Personal DataAll information which refers to an identified or identifiable natural person — including name, address, date of birth, phone number, email address, bank details.

ProcessingEach activity carried out with personal data: collection, storage, adjustment, use, disclosure, comparison, restriction, or destruction.

Data SubjectEach identified or identifiable natural person whose personal data are processed.

Data ControllerThe entity making decisions about the purposes and means of processing personal data — in this case, WanderVans Crete.

ConsentA freely given, specific, informed and unambiguous indication of the data subject's agreement to the processing of their personal data.

1.3 Data Collection

Use of our website is principally possible without entering personal data. When you use specific services, processing of personal data may be necessary. Where no statutory basis exists, we obtain consent from the data subject.

Section 2

Purposes of Collection & Legal Basis

2.1 Anonymous Data (Server Logs)

We automatically store access data each time our website is visited: internet service provider, operating system, referring website, date and duration of visit, requested file, and IP address (stored for 7 days for security purposes). These data are evaluated only to improve our services and cannot identify you personally. Legal basis: Art. 6 Para. 1 GDPR.

2.2 Cookies

We use cookies to make your visit attractive and to enable certain functions. Session cookies are deleted when you close your browser. Permanent cookies remain on your device to recognise your browser on return visits.

You can configure your browser to refuse cookies. Deactivation may restrict some website functionality. Opt-out links:

2.3 Google Analytics

We use Google Analytics (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) to analyse site usage. Data collected via cookies is transmitted to Google servers in the USA. We have activated IP anonymisation — your IP address is truncated before transmission. You can opt out via the Google Analytics Opt-Out Plugin.

2.4 Google Remarketing

We use Google Remarketing to show relevant ads to visitors of our website on the Google advertising network. Cookies placed on your device allow Google to recognise your browser when you visit other sites. You can opt out at Google Ad Settings.

2.5 Google Ads Conversion Tracking

We use Google Conversion Tracking to measure the effectiveness of our advertising. A "Conversion Cookie" is placed on your device when you arrive via a Google ad and expires after 30 days. This data is only used for aggregate conversion statistics and does not identify individual users.

2.6 Google Maps

We use Google Maps (Google Inc.) to display maps and directions. By using our website you consent to the collection and processing of your data by Google. Terms of use: maps.google.com/terms.

2.7 Social Media

When you visit pages with social media integrations, a connection may be established to the respective servers. These services may associate your visit with your social media account. We recommend logging out of social media platforms before visiting our site if you wish to prevent this.

2.8 Contact Form

Details submitted via our contact form — including name, email, phone number and message — are stored to process your enquiry and handle any follow-up questions. Legal basis: Art. 6 Para. 1 GDPR. Data is retained until you request deletion or the purpose ceases.

2.9 Email Contact

When you contact us by email, we store your details (email address, message content, subject, date, name, phone if provided) for processing and follow-up. Data is not forwarded without your consent. Legal basis: Art. 6 Para. 1 GDPR.

Section 3

Data Transmission

3.1 InternalWe transmit your data internally to administration, HR and finance teams only to the extent necessary to fulfil contractual or statutory obligations.

3.2 Group-wideWVC operates in Greece. Data may be forwarded within associated entities for administrative purposes, in compliance with all applicable data protection laws and GDPR Art. 44 et seq.

3.3 Third PartiesWe use third-party service providers (newsletter services, IT providers, tax offices) who process data only pursuant to our instructions and are forbidden from using data for their own commercial purposes.

We only forward your personal data if:

You have explicitly granted consent (Art. 6 Para. 1 S.1 lit. a GDPR)
Forwarding is necessary to assert, exercise or defend legal claims (Art. 6 Para. 1 S.1 lit. f GDPR)
A statutory obligation exists for the forwarding (Art. 6 Para. 1 S.1 lit. c GDPR)
It is necessary for the processing of contractual relationships with you (Art. 6 Para. 1 S.1 lit. b GDPR)

Section 4

Automated Decision-Making

We partly process your data automatically to assess certain personal aspects (profiling) in the following cases:

To combat money laundering and fraud as required by law
To provide targeted product information and advertising
For creditworthiness assessment using scoring based on statistically recognised methods

      Your right: You have the right not to be subjected to decisions made exclusively on automated processing (including profiling) that have a legal or significant effect on you, unless such decisions are necessary for a contract, permitted by law with appropriate safeguards, or made with your explicit consent.
    

Section 5

Storage, Security & Your Rights

5.1 Data Retention

We store your data as long as necessary to provide our services, or as required by applicable law (e.g. tax and commercial law storage obligations). Data is erased after the purpose ceases unless mandatory retention applies.

5.2 Technical Security

WVC uses technical and organisational security measures to protect your data against manipulation, loss, or unauthorised access. Our site uses SSL encryption (256-bit) for all data transfers — identifiable by the lock symbol and "https://" in your browser address bar.

5.6 Your Rights as a Data Subject

Under the GDPR you have the following rights:

Art. 15 GDPR

Right of Access

Request information about your personal data stored by us, including processing purposes and recipients.

Art. 16 GDPR

Right to Rectification

Request correction of inaccurate or completion of incomplete personal data.

Art. 17 GDPR

Right to Erasure

Request erasure of your data where processing is no longer necessary or lawful.

Art. 18 GDPR

Right to Restriction

Request restriction of processing where accuracy is disputed or processing is unlawful.

Art. 20 GDPR

Right to Portability

Receive your data in a structured, machine-readable format or have it transmitted to another controller.

Art. 21 GDPR

Right to Object

Object to processing based on legitimate interests or for direct marketing purposes.

Art. 77 GDPR

Right to Complain

Lodge a complaint with a supervisory authority at your habitual place of residence or workplace.

Any time

Right to Withdraw Consent

Withdraw consent at any time by emailing info@wandervans.gr. Previous processing remains lawful.

5.5 Minors

This website is not directed at children under 16. Persons under 16 may not transmit personal data to WVC without the consent of a legal guardian.