Responsible for processing your personal data collected through the digital platform "Avis Car Sharing" is the company with the corporate name "OLYMPIC COMMERCIAL & TOURIST ENTERPRISES SINGLE-MEMBER SOCIETE ANONYME", which is based in Chalandri, Attica, Vas. Georgiou Street 50A ("Avis" or "Company" or "We").
Our Company takes the protection of your personal data seriously. For this reason, we strictly comply with the rules of the present data protection policy, which ensures the protection of your fundamental rights and guarantees our compliance with the applicable data protection law in the context of the provision of our short-term vehicle rental service with the distinctive title "Avis Car Sharing" ("Service"), as well as the corresponding mobile phone application, through which you are able to manage the Service ("Application").
Object
This Policy determines the terms and conditions, which our Company follows in order to protect your personal data as recipient of the Service and user of the Application.
In specific, this Policy lays down the rules, on which we collect and process your personal data and ensure their confidentiality in the context of the provision of the Service and the use of the Application.
Our Company reserves the right to modify and update this policy, whenever it deems it appropriate, and any changes thereof shall come in force and effect from the instance they appear online on the respective webpage of the Application, which can be accessed by you at any time.
In the event that any of these terms are held to be void and unenforceable for any reason, the remaining terms will remain valid and effective as such to the extent that the original intent of this policy will not be altered in any material respect.
Registration, Login and Use of our Application
When registering, logging-in and using our Application you provide us with the following data:
- Name / Surname.
- Email address.
- Address Information (Street Name, Street Number, Zip Code, City, Country)
- Mobile Phone
- Internet Protocol Address.
- Navigation and Usage Data.
- Copy and data of driver's license.
- Copy and data of ID or passport.
- Credit/Debit card details.
The purpose of processing your data is the provision and use of the Application.
The legal basis for processing your personal data is Article 6 § 1 (b) of Regulation (EU) 2016/679 (“GDPR”), which allows us to process your personal data to the extent that this is necessary to provide and use of the Application.
We keep your personal data for five (5) years after you unsubscribe from the Application.
Provision of our Service
In the context of providing you with the short-term vehicle rental service, you provide us with the following data:
- Name / Surname.
- Email Address.
- Address Information (Street Name, Street Number, Zip Code, City, Country)
- Mobile Phone Number.
- Pricing details.
- Credit/Debit card details.
- Bank account details.
- Billing and Payment Data.
- Transaction details.
- Fuel consumption data.
- Movement and location data
- Copy and data of driver’s license.
- Copy and data of ID or passport.
The purposes of processing your data are the following:
- Execution of our Company's contractual obligations towards you.
- Ensuring your compliance with your contractual obligations, in particular those related to the payment of the fee for the Service, the consumption of the fuel of the rented vehicle as well as the timely and appropriate delivery of the vehicle after the end of the Service.
- Tax purposes and use for purposes of invoicing and collecting our fee.
The legal basis for processing your personal data is Article 6 § 1 (b) of the GDPR, which allows us to process your personal data to the extent that this is necessary for the provision of our services.
With regard to data related to our tax obligations, the legal basis for processing your personal data is Article 6 § 1 (c) of the GDPR, which allows us to process your personal data to the extent that this is necessary for our compliance with our legal obligations, deriving from the tax legislation, as applicable each time.
We keep your data for the following periods:
- Eleven (11) years with respect to tax data, and
- Five (5) years regarding other data related to the Service.
Your provision of the foregoing categories of data is a requirement for entering into a contract for the provision of the Service. In the event that you do not provide us with your data, which is necessary for us to provide the Service you request, then we will not be able to provide you with our Service.
Contact our Company
When communicating with us through the online contact form of the Application, you provide us with the following data:
- Name / Surname
- Email address
- Mobile phone number
Content of communications
The purpose of processing your data is to respond to your messages and, in general, to serve you within the framework of the contract between us for the provision of the Service and the use of the Application as well as for the execution of the necessary actions in the context of our contractual relationship.
The legal basis for processing your personal data is Article 6 § 1 (b) of the GDPR, which allows us to process your personal data to the extent that this is necessary to take actions at your request in the context of our contractual relationship.
We keep your personal data for two (2) years from the completion of our communication.
Driver and Vehicle Safety
For the entire period of providing the Service, we process your following personal data:
- Real-time movement and location data of the rental vehicle.
- Data about works along your route.
- Accident, damages and vehicle assistance data.
The purpose of processing your data is to protect both you and the rented vehicle from accidents, damage or malicious and/or illegal actions of third parties.
The legal basis for processing your personal data is Article 6 § 1 ( f ) GDPR, which allows us to process your personal data to the extent that this is necessary for the purposes of the legitimate interests of your life / physical integrity and property us.
We keep your data for the following periods:
- One (1) month regarding the movement and location data of the leased vehicle, and
- Five (5) years regarding the remaining categories of data, mentioned above.
Improving our Application and Service
We may also process your personal data for the following purposes:
- The smooth operation of our Application.
- User-friendly and efficient operation of our Application.
- Improving your online experience when navigating and using our Application.
- Improving our Service so that it meets the needs of our customers as much as possible.
- Administrative organization and operation of our Company.
- Managing our clientele.
- Supporting our legal claims.
The legal basis for processing your personal data is Article 6 § 1 ( f ) of the GDPR, which allows us to process your personal data to the extent that this is necessary for the purposes of the aforementioned lawful interests.
We keep your above personal data for five (5) years from their collection.
Commercial Communications
Your contact information, provided to us through the Application in the context of providing our Service or other business communication, may be used by us to directly promote similar services or to serve similar purposes.
In each electronic message sent to you, our Company will clearly communicate our identity to you and will give you the possibility to object and request, in an easy way and free of charge, the termination of the communication.
Advertisement and Promotion of our Services
When using the Application and providing the Service, you provide us with the following data:
- Mobile phone number.
- Email address.
The purpose of processing your data is to inform you about our services and the activities of our Company as well as the promotion and advertising of our Company.
The legal basis for processing your personal data is Article 6 § 1 (a) GDPR, which allows us to process your personal data with your consent.
We retain your personal data until you withdraw your consent.
You have the right to withdraw your consent at any time by using the relevant electronic unsubscribe from our updates, included in each of our messages to you.
The withdrawal of your consent does not affect the lawfulness of the processing based on your consent prior to its withdrawal. The means to withdraw your consent are the same as those of providing it.
Which Parties May Be Recipients of Your Data
Subject to the following terms, our Company does not grant your personal data or link its file for financial or other consideration with any third-party private companies, natural or legal persons, public bodies or other organizations.
For the operation and provision of the Application, our Company cooperates with the company with the corporate name “IUGO TECHNOLOGY A.S., residing at "Resitpasa Mah. Katar Cad. Arı 4 Binası No:2/50/6, Sariyer/Istanbul/Turkey" which receives and processes your data as data processor on our behalf.
In order to serve the purposes of processing, referred to in this policy, our Company may provide access to or transfer the following types of your personal data to the following processors on its behalf and on its behalf:
- Your personal data to the web hosting service provider, with whom we maintain a contractual relationship, for the purpose of hosting the Application and our Company's IT and communications systems and infrastructure.
- Your personal data to businesses that provide us with maintenance and support services for IT and communications systems and infrastructure, software programs and databases of our Company.
- Contractual data, consumer behaviour data and contact information to third party marketing and advertising companies for the marketing and advertisement of our products, when you have given us your consent or to send commercial communications, as described below.
- Your personal data to third-party consulting firms to provide data analysis services.
- Your personal data to lawyers, financial or professional advisers or investors in the context of the provision by the latter of services to our Company or financing our Company.
The processing of your personal data by the foregoing partners cooperating with us is carried out under our control and only at our orders and we oblige them to adhere to the same data protection rules as those described herein or rules of at least the same level of protection.
In order to serve the processing purposes stated in this policy, our Company may transfer the following types of your personal data to the following third party recipients:
- Data of your transactions at the hotel where you stay and with which we cooperate to provide the Service to you, such as indicatively for the allocation of a parking space and delivery / collection of your rental vehicle.
- payment data to the financial institution, with which we each time cooperate for the processing of payments to and from your bank accounts, credit / debit cards and other means of payment, in order to pay off your financial debts towards our Company.
- Contractual data with our parent company for the organization and management of the Service and the Application at group level.
- Your tax data to the relevant tax authorities for the purpose of addressing our tax obligations.
In the event that it is required by a court or other administrative authority, as well as in any other case where it has a legal obligation to do so, our Company may provide your personal data to the extent required by law, on the condition that we give respective notice to you.
Our Company transfers data to recipients in third countries outside the European Economic Area, for which there is no adequacy decision by the European Commission, only if appropriate protection and security measures for your personal data are in place that ensure a level of protection equal to that of the Regulation (EU) 2016/679 ("GDPR") and in alignment with the provisions of articles 44 et seq. of this, such as indicatively the adoption of standard contractual clauses of the European Commission. Upon your request we can provide you with information in relation to the above protection and security measures we take.
Security & Confidentiality of Personal Data
In order to ensure the proper use and integrity of your personal data as well as to prevent unauthorized or accidental access, processing, deletion, alteration or other use thereof, our Company has in place appropriate appropriate organizational, technical, physical and organisational security measures in accordance with applicable laws and regulations.
The processing of your personal data by our Company is carried out in a way that ensures its privacy and physical and logical security and confidentiality, taking into account the latest developments, implementation costs and the nature, scope, context and purposes of the processing, as well as the risks for your rights and freedoms.
The processing of your personal data is carried out exclusively by authorized personnel or partners of the Company for this purpose, who are bound by strict obligations to maintain their confidentiality.
Data Retention Periods
We retain your personal data for the periods described above, during which the purposes for which it is processed remain valid.
Our Company may retain your personal data even after our purposes of processing have been attained in the following limited cases:
- As long as there is a legal obligation on our part by a relevant provision of the law.
- For use before tax authorities as well as any other competent public body within the legal limitation period.
- As long as it is required for the operation and organization of our Company, provided that your data is anonymized.
- To defend our rights and interests before any competent Court and any other public authority within the prescribed limitation period.
After the end of the retention period, your personal data shall be destroyed from our physical and electronic records in compliance with our Company's policy and provided that its retention is no longer required to fulfill the purposes we have described to you above.
What Are Your Rights?
Without prejudice to applicable law and subject to any limitations thereof, you have the right to request access, but also a copy of your personal data, which we collect and process. If you wish a copy of part or all of your personal data, please contact us at the contact details of our Business mentioned below.
We further inform you that you have the right at any time to exercise your rights without prejudice to applicable law, regarding the rectification, erasure, restriction of processing of your data and to object to their processing.
The Company will respond to any of your requests within one month from their receipt. Upon prior notice, this period may be extended by a further two months if necessary, taking into account the complexity of the request and the number of any other pending requests. In case of rejection of your request, we will provide relevant justification.
If your request does not meet the requirements of applicable law, we reserve the right either to: (a) impose a reasonable fee, taking into account the administrative costs of providing the information or communicating or executing the requested action, or (b) reject your request.
In the event of any violation of your personal data, which may place your rights and freedoms at a high risk, and provided that it does not fall under one of the exceptions expressly provided for by applicable law, we undertake to inform you without undue delay.
If there are any doubts as to the identity of the individual submitting the request, we reserve the right to request the provision of additional information necessary to confirm his / her identity.
If your rights are infringed, we inform you that you have the right to file a complaint with the Greek Data Protection Authority or with any other competent supervisory authority.
If your rights are violated, we inform you that you have the right to file a complaint with the Greek Data Protection Authority (via the following link https://www.dpa.gr/index.php/el/polites/katagelia_stin_arxi ) or another competent supervisory authority.
What are your Obligations?
By using the Application as well as when providing your personal data upon consent, you acknowledge that you have the obligation to declare the real, accurate and complete information requested from you by our Company. Furthermore, you must inform our Company of any changes to this information in order to keep it up-to-date and accurate.
If you are found not to comply with your obligations, or if our Company has reasonable suspicions that the information you provide is false or incomplete or in any way contrary to the law or to the Terms of Use or this Policy, we retain the right to reject your application to receive the Service or use the Application or to suspend or terminate your account immediately without notice. In this case, you have no right to any compensation due to the rejection of your application, or the suspension or termination of your account.
By using the Application you certify that you are over twenty-one (21) years of age. As long as you are under twenty-one (21) years of age, you have the obligation to refrain from any use of the Application as well as from any provision of your personal data without the approval of the person exercising your parental care. If you do not comply with the above obligations, you must notify our Company immediately. In any case, by using the Application you acknowledge that our Company is not responsible for your violation of the above obligations to the extent that it is unable, even if it makes reasonable efforts, to verify your age or consent of your guardian.
International Jurisdiction & Applicable Law
Any dispute between you and the Company arising from or in relation to the subject matter of this policy shall be governed and construed in accordance with Greek law without reference to its conflict of laws principles and shall be subjected to the exclusive jurisdiction of the competent courts of Athens, Greece.
In the event that a provision of this policy is invalidated by a decision of a competent court as unlawful, valid and unenforceable, this fact will not affect the rest of its provisions, which will remain in force and be applicable.
Contact
For any further information or request regarding this data protection policy, you can contact our Company as follows:
Trade Name: OLYMPIC COMMERCIAL & TOURIST ENTERPRISES SINGLE-MEMBER SOCIETE ANONYME.
Address: Vas Street. Georgiou no. 50 A, Chalandri, Attica.
Tel.: +302106879800.
email : gdpr@avis.gr
This notice may be amended at the discretion of Avis. An updated version of this Notice, bearing an amendment date, will be displayed for all users to be informed. We urge you to read it to be informed of any changes. Last amendment February 2025.