Privacy Policy

The controller within the meaning of the GDPR is the operator of GR CAR. The operator's full company name and address will be added before publication (see Legal Notice).

Controller

Full company name and address: to be added before publication (see Legal Notice).
Email: info@grcar.gr
Phone: 0030 2310 762780

What data is actually processed

This description reflects only what the website actually does — not generic or assumed statements.

1. Contact form

Our contact form asks for your name, city, phone number, email address and a message. When you submit it, an email is generated from this information and sent to our contact address; the content is also stored in our database. There is no forwarding to an external email-delivery service, SMS gateway or payment provider — delivery runs on our own server infrastructure. The legal basis is Art. 6(1)(b) GDPR (handling your enquiry) or Art. 6(1)(f) (legitimate interest in customer communication).

2. Booking form

The booking form on the homepage asks for pick-up location, drop-off location, and pick-up/drop-off date and time. The form itself does not include name, phone or email fields; this information is processed to handle your vehicle-availability request. Whether and where this booking information is stored long-term, and whether additional personal data is collected later in the booking process (for example by phone or follow-up email), will be confirmed by the operator and added here if needed.

3. Technically necessary session

Our website uses a technically necessary session cookie (PHPSESSID). It is used solely to remember your language setting and form entries during a single visit, and has no tracking function. No other cookie-setting by the active website code was found.

Google Analytics — disabled since 2026-10-18

Until 2026-10-18, our homepage loaded a Google Analytics tracking script (account UA-19909913-1) on every visit without prior consent. This was fully removed on 2026-10-18; since then no script is loaded from Google's servers and no new tracking requests or data transfers to Google take place. Cookies already set on your device from visits before that date were not retroactively deleted by this change. No replacement tracking or consent-management tool was introduced.

Recipients / disclosure to third parties

Since Google Analytics was disabled, no transfer of contact-form or booking data to external services (e.g. payment providers, SMS delivery, CRM or analytics providers) takes place.

Storage period

The specific retention periods for contact-form and booking records will be defined and added by the operator.

Your rights

Under the GDPR you have, among others, the right to access, rectification, erasure, restriction of processing, data portability, and objection to processing. Requests can be sent to the contact email above. The notice of your right to lodge a complaint with the competent data-protection supervisory authority will be added once the operator's country of establishment is finally confirmed.

← Back to homepage