GDPR (General Data Protection Regulation)
The company “SKG CARS S.A.”, based in Thessaloniki, at 14th km. Thessalonikis-Peraias, 57001, (hereinafter referred to as the “Company”), operates, under the distinctive titles “SKG Rent A Car” and “SKG Rent A MotoScooter”, in the provision rental services of all types of vehicles (rental services).
In the context of the above activity, we collect and process through our websites (www.skgrentacar.com, www.skgrentamotoscooter.com) personal data concerning you, based on the Personal Data Protection Policy stated below.
1. Personal Data collected and processed
The Company collects and processes various categories of personal data through our websites, in order to allow you to benefit from the products and services provided both by itself and by its sub-licensees throughout the Greek territory.
Categories of Personal Data:
- Identification details: Surname, First name, Date Birth, Postal address, etc.
- Identity details of 2nd driver (if required for the rental)
- Driving license details
- Payment details: Account number, card number, etc.
- Data collected during your navigation on our website (see Cookies Policy)
2. For what purpose is your Data processed?
We collect your Data for the purposes of the provided products and/or services indicatively for:
A. the evaluation of your request on the one hand for the submission of an offer and on the other hand for the conclusion of the lease contract.
B. managing the lease of the vehicle you have chosen, e.g., communicating and informing you about the availability, the execution of the contract, the sending of the necessary documents for products or services that may have been provided to you, the management of your debts to the Company, the making of returns.
C. compliance with the obligations imposed by the applicable legislation.
D. the sending, by e-mail, of information about the Company’s products and/or services,
E. our customer satisfaction survey, the promotion of our products and/or services, the sending of newsletters about our products and/or services,
3. What is the legal basis for processing your Data by the Company?
The processing of your Data is carried out in accordance with:
– The terms of our contractual relationship,
– Your consent, where required,
– The legal interest of our Company.
4. Recipients of your Personal Data:
Your personal data may be shared with our employees, our network of sub-licensees, our agents and intermediaries who are authorized to provide you with our products and services, as well as with our affiliated/affiliated/partnered companies, namely:
– To our relevant sub-licensee or other SKG Cars licensee who may perform the rental service to you.
– To the competent authorities in accordance with applicable laws and regulations.
The Company takes every measure so that the personal data that may be transmitted is always the minimum necessary.
How do we ensure that Processors & Subprocessors respect your Data?
The Processors on our behalf have agreed and contractually committed to the Company:
– To observe confidentiality,
– Not to send your Data to third parties without the Company’s permission,
– To take appropriate security measures,
– To comply with the legal framework for the protection of personal data and in particular Regulation 679/2016/EU (otherwise known as GDPR).
5. When is your Data deleted?
We retain for up to 5 years from the end of the relevant rental the Data you have given us for the Management of your booking and rental contract through a central booking engine, for:
– the collection of the necessary data to organize your booking.
– the communication of said data to our relevant sub-licensee or other SKG Cars licensee providing the service.
– managing your payment.
Your declaration of consent to send a newsletter is kept for as long as the Company sends you a newsletter, unless you choose to stop sending it.
The policy we follow for the Data collected by Cookies is described in the Cookies Policy.
6. Rights you can exercise in relation to the processing of your Personal Data.
Within the limits and conditions permitted by applicable regulations, you may:
– to be informed by us if we are processing your Data. If we process your Data, you can ask to be informed about the purpose of the processing, the type of your Data we keep, to whom we give it, how long we store it, whether automated decision-making takes place, but also about your other rights, such as correction, deletion of Data, restriction of processing and submission of a complaint to the Personal Data Protection Authority.
– to request the correction, update and deletion (“right to be forgotten”) of the personal data concerning you, specifying that the deletion can only be carried out when: (a) the data is no longer necessary in relation to the purposes for which were processed, (b) if you withdraw your consent and there is no other legal basis for the processing, (c) if you object to the processing of the personal data concerning you and there is no compelling legal reason for the processing, (d ) if it has been established that the personal data concerning you has been unlawfully processed, (e) if the personal data needs to be deleted in order to comply with any of our legal obligations;
– to object to the processing of your personal data for commercial research purposes.
– request the restriction of the processing of your personal data, which means that we will not be able to use it for a certain period. You can exercise this right when:
a) you dispute the accuracy of the personal data concerning you, for a period that allows us to verify its accuracy.
b) the processing of personal data is unlawful and you object to its deletion and instead request that its use be restricted.
c) object to processing on grounds relating to your situation while we check whether the legitimate grounds, we are pursuing override yours.
– object to the processing of your personal data, at any time for reasons related to your situation, in which case we will stop processing them, unless we demonstrate compelling legal reasons for continuing the processing that override the interests, rights, your freedoms, or to establish, exercise or support our legal claims.
– withdraw your consent to processing where it is based on your consent.
The exercise of the above rights acts for the future and does not concern already performed data processing.
7. How can you exercise your rights?
In order to exercise your rights, you can submit a request to us by sending a letter – a request to the Company’s postal address (SKG Rent a Car, 14th km Thessaloniki-Peraias, 57001, Thessaloniki) or to its electronic address [email protected] with the title ” Exercise of Right”.
If you exercise any of your rights, we will take every possible measure to satisfy your request within thirty (30) days of receiving the relevant request, after informing you either of its satisfaction, or of the reasons preventing its satisfaction. This deadline can be extended for another three (3) months, if necessary, considering the complexity of the request and the number of requests.
To exercise your rights, you must prove your identity by clearly stating your surname, first name, booking ID number and any other useful information that allows us to identify you (such as the place and date of your last vehicle rental). You must also provide us with the e-mail address or postal address to which you would like the reply to be sent.
8. What is the applicable law when we process your Data?
Applicable Law is Greek Law, as formulated in accordance with the General Regulation for the Protection of Personal Data 2016/679/EU, and in general the current national and European legislative and regulatory framework for the protection of personal data.
The competent courts for any arising disputes related to your Data are the competent Courts of Thessaloniki.
9. Where can you go if we violate the applicable law for the protection of your Personal Data?
You have the right to submit a complaint to the Personal Data Protection Authority (postal address Kifisias 1-3, P.K. 115 23, Athens, tel. 210. 6475600, e-mail address (e-mail) [email protected]), if you consider that the processing of your Personal Data violates the applicable national and regulatory legal framework for the protection of personal data.
10. How will you be informed of any changes to this Policy?
We update this Policy whenever necessary. If there are material changes to the Policy or the way we use your Personal Data, we will post the update on our website, and we will notify you in any convenient way. We encourage you to read this Policy periodically to know how your Data is protected.
The Privacy Policy was updated on 07/06/2023.
