Privacy Policy

1. Who We Are

Versatours is the data controller responsible for the personal data described in this policy.

In this policy, “Versatours”, “we”, “us” and “our” refer to the data controller. “You” and “your” refer to website visitors, customers and passengers whose personal data we process.

2. When This Policy Applies

This policy applies when you:

• Visit or use the Versatours website
• Request a price or make a reservation
• Book a private transfer, private excursion or tailored transport service
• Contact us by email, telephone, WhatsApp, a contact form or social media
• Request a child seat, folding-wheelchair transport or another special arrangement
• Submit a cancellation, refund request, complaint or other customer-service enquiry.

This policy does not control how independent third-party websites or services process personal data. Their own privacy notices apply when you use them.

3. Personal Data We Collect

Depending on how you use our services, we may collect the following categories of personal data.

Identity and contact information

• Name and surname
• Email address
• Telephone or WhatsApp number
• Billing information required for a receipt or invoice
• Preferred communication language.

Reservation and journey information

• Pickup and destination addresses
• Pickup date and time
• Return-journey details, where applicable
• Flight or ferry number and publicly available arrival information
• Number of passengers
• Selected vehicle and service
• Luggage quantity and special-luggage information
• Private-excursion itinerary and requested stops
• Booking reference, price, deposit, balance and payment status.

Special service information

• Child age when a baby seat or booster seat is requested
• Folding-wheelchair or mobility-assistance requirements
• Pet and pet-carrier information
• Other information you choose to provide so that we can arrange the requested service safely.

Payment information

Online payments are processed by Viva.com. We receive transaction information such as the amount, payment status, transaction reference and limited billing details. Versatours does not receive or store your complete card number, card security code or online-banking credentials.

Communications

• Emails, WhatsApp messages and contact-form submissions
• Customer-service notes
• Cancellation, refund and complaint correspondence
• Feedback or reviews sent directly to us.

Website and technical information

• IP address
• Browser, device and operating-system information
• Date and time of access
• Pages requested and referring page
• Security, error and server-log information
• Cookie preferences and technical identifiers, where applicable.

4. Where We Obtain Personal Data

We normally receive personal data directly from you. We may also receive it from:

• A person, travel organiser, hotel, company or event organiser making a booking on your behalf
• A licensed driver or transport partner involved in your service
• Viva.com in relation to payment status and transaction administration
• Publicly available flight or ferry arrival systems
• Mapping and route-calculation services used when you enter journey addresses
• Public authorities where disclosure is legally permitted or required.

If you provide personal data about another passenger, you must ensure that you are authorised to do so and that the passenger has been informed about this Privacy Policy.

5. Why We Use Personal Data and Our Legal Bases

Where we rely on legitimate interests, we consider the necessity of the processing and balance our interests against your rights and reasonable expectations. You may object to this processing as explained in section 13.

6. Accessibility and Health-Related Information

Information about mobility or accessibility may reveal health-related information and may therefore receive additional protection under data-protection law.

Please provide only the minimum information needed to arrange the requested assistance. Where the information qualifies as special-category personal data, we process it on the basis of your explicit consent, unless another legal basis is available under applicable law.

You may withdraw your consent at any time. Withdrawal does not affect processing already completed lawfully, but it may prevent us from arranging or continuing a service that depends on the information.

7. Who We Share Personal Data With

We share personal data only when necessary and only to the extent required for the relevant purpose.

Versatours personnel and drivers

Authorised staff and drivers may access the booking information required to arrange and complete the service.

Licensed transport partners

When a service is assigned to an appropriately licensed transport partner, we may share the lead passenger’s name, telephone number, pickup and destination, journey time, passenger and luggage requirements, and confirmed special requests.

Viva.com

Viva.com processes online payments, payment verification and refunds. Viva.com may process personal data as an independent controller where required for payment-security, fraud-prevention, financial and regulatory obligations. For more information, read the
Viva.com Privacy Notice.

Google Maps Platform

The booking form uses Google Maps Platform for address search, route calculation, distance and estimated journey time. When these features load, Google may receive technical information such as your IP address, browser or device information and the addresses or coordinates entered into the form. Google may process this information under its own terms. Read the
Google Privacy Policy.

Communication providers

Email, telephone, hosting and IT providers may process limited personal data when supporting our communications and systems. If you choose to contact us through WhatsApp or another social-media service, that provider also processes information under its own privacy terms. Email and telephone remain available as alternative contact methods.

Professional advisers and public authorities

We may share information with accountants, legal advisers, insurers, banks, auditors, courts, tax authorities, police or another competent authority where necessary to comply with the law, establish or defend legal claims, prevent fraud or protect a person’s safety.

We do not sell or rent personal data.

8. Cookies and Similar Technologies

The website may use the following categories of cookies or similar technologies:

• Strictly necessary technologies required for website security, booking-form operation, payment selection, session continuity and storage of privacy choices
• Functional technologies used to provide optional website features or remember preferences
• Third-party technologies associated with services such as Google Maps or embedded external content
• Analytics or advertising technologies only if they are introduced, clearly identified and enabled in accordance with applicable consent requirements.

Where consent is legally required, optional technologies must remain disabled until you make an affirmative choice. You may later withdraw or change your choice through the website’s cookie-preference tool. Withdrawing consent does not affect the lawfulness of earlier processing.

Disabling a technology needed for an optional third-party feature may prevent that feature from working. You can still contact Versatours by email or telephone if you prefer not to use the online booking form.

9. Location, Addresses and Route Calculation

The addresses entered into the booking form are used to identify the requested pickup and destination, calculate the route, estimate journey time and determine the booking price.

Do not enter a private address unless it is required for the requested journey. Address and route information is stored with the booking when the reservation is submitted.

10. International Data Transfers

We aim to use providers that process data within the European Economic Area. Some service providers may nevertheless process information in another country or allow support access from outside the European Economic Area.

Where personal data is transferred internationally, we require an appropriate legal mechanism, such as a European Commission adequacy decision, approved Standard Contractual Clauses or another safeguard permitted by data-protection law. Independent providers may describe their own transfer safeguards in their privacy notices.

11. How Long We Keep Personal Data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including contractual, tax, accounting, insurance, dispute-resolution and legal requirements.

We may retain information for longer where required by law, an active dispute, a legal hold, fraud prevention or the establishment, exercise or defence of legal claims. When identifiable information is no longer required, it is deleted or anonymised.

12. How We Protect Personal Data

We use reasonable technical and organisational measures designed to protect personal data against accidental or unlawful loss, alteration, unauthorised access, disclosure or misuse. These measures include access controls, secure connections, account protection, software maintenance, backups and limiting access to people who need the information for their work.

No internet service or storage system can be guaranteed to be completely secure. If you believe that information sent to Versatours has been compromised, contact us immediately at
[email protected].

13. Your Data-Protection Rights

Subject to the conditions and exceptions of applicable law, you may have the right to:

• Access the personal data we hold about you and receive information about its use
• Rectify inaccurate or incomplete personal data
• Erase personal data where there is no lawful reason to continue keeping it
• Restrict processing in specific circumstances
• Object to processing based on legitimate interests and to direct marketing at any time
• Data portability for certain information processed automatically on the basis of consent or contract
• Withdraw consent at any time where processing relies on consent
• Complain to a competent data-protection supervisory authority.

To exercise a right, email [email protected]. Please describe your request clearly. We may ask for information necessary to verify your identity and protect personal data from unauthorised disclosure.

We normally respond within one month of receiving a valid request. Where a request is particularly complex or several requests are made, the response period may be extended as permitted by law. We will inform you if an extension is necessary.

A right may be limited where we must retain information to comply with the law, protect another person’s rights, prevent fraud or establish, exercise or defend a legal claim. If we cannot fulfil all or part of a request, we will explain the applicable reason.

14. Complaints to the Supervisory Authority

We encourage you to contact Versatours first so that we can try to address your concern. You also have the right to submit a complaint to the Hellenic Data Protection Authority or, where applicable, another competent supervisory authority in the European Economic Area.

15. Children’s Information

Reservations must be made by an adult. We do not knowingly invite children to create accounts or submit personal data directly through the website.

Where an adult requests a child seat, we use the child’s age only to arrange the requested transport equipment and manage the booking. The adult making the reservation is responsible for providing this information lawfully.

16. Automated Calculations

The booking system may automatically calculate route distance, estimated journey time, available vehicle options and price using the information entered into the form. These calculations support the service requested by the customer.

Versatours does not use personal data for solely automated decision-making that produces legal or similarly significant effects about an individual.

17. Marketing Communications

If we offer promotional emails or messages, they will be sent only where we have an appropriate legal basis. Where consent is required, marketing consent will be optional, separate from acceptance of the Booking Terms and Privacy Policy, and will not be a condition of completing a reservation.

You may withdraw marketing consent or unsubscribe at any time by using the unsubscribe method provided in the message or by emailing
[email protected].

18. External Links and Embedded Content

The website may link to or display content from external websites, social networks, map providers or review platforms. Visiting an external website or activating embedded content may allow that provider to collect information under its own privacy policy. Versatours does not control the independent processing performed by those providers.

19. Changes to This Privacy Policy

We may update this Privacy Policy when our services, providers or legal obligations change. The latest version will be published on this page with a revised “Last updated” date.

Where a change materially affects how we use personal data, we will provide additional notice where reasonably possible or legally required.

20. Contact Us

For questions about this Privacy Policy, our use of personal data or a data-protection request, contact: