Privacy Policy

Last updated: March 2026

Introduction

Freedom Wheels ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website at www.freedomwheels.gr or use our services. This policy is in compliance with the General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679.

Data Controller

The data controller responsible for your personal data is: Freedom Wheels, 7 Apokoronou Str, 73100 Chania, Crete, Greece. Email: info@freedomwheels.gr. Phone: +30 2821 405 794.

Personal Data We Collect

We collect the following personal data when you interact with our Website and services:

  • Booking information — full name, email address, phone number, and any notes you provide when making a booking request.
  • Payment data — payment is processed securely by Stripe. We do not store your credit card details on our servers. Stripe may collect card number, expiry date, and CVC as your payment processor.
  • Contact form data — name, email, phone number, and message content when you use our contact form.
  • Technical data — IP address, browser type and version, operating system, referral source, pages visited, and time spent on pages. This data is collected automatically through cookies and server logs.

How We Use Your Data

We use your personal data for the following purposes:

  • To process and manage your scooter rental bookings.
  • To process payments securely through our payment provider.
  • To communicate with you regarding your bookings, enquiries, and customer support.
  • To comply with legal obligations, such as tax and accounting requirements under Greek law.
  • To improve our Website and services by understanding how visitors use our site.

Legal Basis for Processing

We process your personal data on the following legal bases under the GDPR:

  • Contract — processing is necessary for the performance of a contract (your rental booking) or to take steps at your request prior to entering into a contract.
  • Consent — where you have given consent for specific processing activities, such as receiving marketing communications.
  • Legal obligation — processing is necessary for compliance with Greek tax and commercial law.
  • Legitimate interest — processing is necessary for our legitimate interests, such as improving our Website and preventing fraud, provided these interests do not override your fundamental rights and freedoms.

Data Sharing

We do not sell your personal data. We may share your data with the following third parties, solely for the purposes described above:

  • Stripe — our payment processor, to handle online payments securely. Stripe's privacy policy applies to the data they process.
  • Google — for Google Maps functionality on our Contact page and potentially for analytics.
  • Vercel — our hosting provider, which may process technical data (IP addresses, request logs) as part of delivering the Website.
  • Greek authorities — when required by law (e.g. tax authorities).

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected: Booking and payment records are retained for 5 years to comply with Greek tax legislation. Contact form submissions are retained for up to 12 months. Technical data (server logs) is retained for up to 12 months. If you request deletion of your data, we will comply within 30 days, unless we are required by law to retain it.

Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access — you can request a copy of the personal data we hold about you.
  • Right to rectification — you can request correction of inaccurate or incomplete data.
  • Right to erasure — you can request deletion of your personal data, subject to legal retention requirements.
  • Right to restriction — you can request that we limit the processing of your data in certain circumstances.
  • Right to data portability — you can request your data in a structured, commonly used, machine-readable format.
  • Right to object — you can object to processing based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at info@freedomwheels.gr. We will respond to your request within 30 days. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include: secure HTTPS encryption on all pages; payment processing through PCI DSS-compliant Stripe; access controls limiting who can view personal data; regular review of our data protection practices.

Children's Privacy

Our Website and services are not directed at children under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately and we will take steps to delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Continued use of our Website after any changes constitutes acceptance of the revised policy.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Email: info@freedomwheels.gr

Phone: +30 2821 405 794