This Privacy Policy describes how Athanasios Posantzis, trading as Your Tour Transfer Service, collects, uses, and protects your personal data in accordance with GDPR 2016/679 and applicable Greek law, both through our website and our "Naxos Your Tour Transfer" mobile application. In effect from 15 April 2026.
1. Data Controller
Name: Athanasios Posantzis | Trading as: Your Tour Transfer Service
Email: info@naxosyourtourtransfer.com | Phone: +30 6980248240
2. Personal Data We Collect
When you make a booking
- Full name, phone number, email address
- Pick-up and drop-off addresses (including hotel name, flight terminal)
- Flight number and arrival/departure time
- Date, time, and type of journey
- Number of passengers and luggage requirements
- Special requests or accessibility needs
During the journey
- GPS/location data for route navigation
- In-vehicle CCTV footage (where applicable, for safety purposes)
From our website
- Strictly necessary cookies only
- Contact/booking form data (name, email, journey details)
- IP address and browser type (collected automatically)
From our mobile application
Our app requests the following device permissions, used only for the purposes stated:
- Calendar (read/write) — used only when you choose to export a booking to your device's calendar app, so that a matching event (and reminder) is created. We do not read, collect, or transmit any other calendar entries on your device.
- Notifications — used to alert you about booking reminders and app-related updates. Notification content is generated and stays on your device; it is not transmitted to us or any third party.
We do not access your contacts, photos, microphone, or camera through the app, and no app usage data is currently collected or transmitted to external analytics services.
3. Purposes and Legal Basis
- Booking fulfilment (Art. 6(1)(b) GDPR) — confirming reservations, coordinating pick-ups, communicating updates, issuing invoices
- Legal obligations (Art. 6(1)(c) GDPR) — financial records per Greek tax law, transport licensing compliance
- Legitimate interests (Art. 6(1)(f) GDPR) — fraud prevention, CCTV security, handling disputes or insurance claims, app functionality (e.g. calendar export, reminders)
- Consent (Art. 6(1)(a) GDPR) — promotional offers, photography/video during tours, device permissions granted within the app (calendar, notifications)
4. Recipients of Your Data
We share your data only where necessary with: substitute/partner drivers, booking platforms, hotels and accommodation providers, airlines/airport authorities, tax authorities (AADE), and insurance providers in the event of a claim.
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
If advertising is introduced into the app in the future (e.g. via Google AdMob), this section will be updated to disclose the ad network, any advertising identifiers collected, and the relevant opt-out mechanisms before that update is published.
5. Data Retention
- Booking records and invoices: 5 years (Greek tax legislation)
- Communication records: 2 years from last contact
- CCTV footage: overwritten within 15–30 days unless required for an incident
- Consent-based data: until consent is withdrawn
- Calendar/notification permissions: active only while granted; you may revoke them at any time in your device settings, with no effect on other app functionality
6. Your Rights (GDPR)
- Right of access — to know what data we hold about you
- Right to rectification — to correct inaccurate data
- Right to erasure — where there is no lawful basis for continued retention
- Right to restriction of processing
- Right to data portability
- Right to object to processing based on legitimate interests
- Right to withdraw consent at any time, including revoking app permissions (calendar, notifications) via your device settings
To exercise any right, contact us at the details in Section 1. We will respond within 1 month.
7. International Data Transfers
Your data is stored and processed within Greece and the EEA. Where third-party services involve servers outside the EEA, we ensure appropriate safeguards through EU adequacy decisions or standard contractual clauses (SCCs).
8. Cookies Policy
Our website uses only strictly necessary cookies required for its proper operation. These cookies do not identify you as an individual, are not shared with third parties for advertising, and do not require prior consent. We do not use tracking, analytics, or advertising cookies.
9. Data Security
Gmail (Google Workspace)
All email communication is protected via TLS encryption in transit. Access is secured with two-step verification (2FA) and restricted to authorised staff on a need-to-know basis.
Hostinger (Web Hosting)
Our website and enquiry forms are protected by an SSL/TLS certificate. Hostinger's environment includes firewall protection, DDoS mitigation, and automatic software updates.
Mobile application
Appointment data entered into the app is stored locally on your device. Calendar events created via the app are stored in your device's own calendar provider, governed by your device's operating system, not by us.
Shared operational measures
- Strong, unique passwords on all accounts and systems
- Access restricted to authorised personnel only
- Regular review of account permissions and security settings
Payment processing
All payments are made in person at the time of the appointment. We do not accept or process payments online, and we do not currently offer in-app purchases — no payment or card data is collected, transmitted, or stored through our website, our app, or any digital system.
10. Automated Decision-Making
We do not make decisions about you based solely on automated processing. All booking confirmations and communications involve human review.
11. Right to Lodge a Complaint
If you believe your personal data is being processed unlawfully, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr.
12. Contact Us
Email: info@naxosyourtourtransfer.com | Phone: +30 6980248240
13. Validity
This Privacy Policy came into effect on 15 April 2026 and is subject to periodic review. Any significant changes — including changes related to app functionality such as the addition of advertising or in-app purchases — will be communicated via our website and, where applicable, an updated app listing, prior to taking effect.