Privacy & Cookie Policy
This Privacy & Cookie Policy explains how Timos Rentals ("we", "us", "our") collects, uses, stores, and protects your personal data when you visit www.rentacarzantetimos.gr or use our car rental services, and which cookies and tracking technologies we use. We process personal data in accordance with the EU General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and applicable Greek data protection law.
1. Who We Are (Data Controller)
The data controller responsible for your personal data is:
- Timos Rentals — car rental, Laganas, Zakynthos 29100, Greece
- Email: info@rentacarzantetimos.gr
- Telephone: +30 697 399 8901
2. What Personal Data We Collect
- Information you provide directly — when you use our contact/enquiry form or contact us by phone, email, WhatsApp, or Viber: your name, email address, telephone number, requested pick-up and drop-off dates, and the content of your message.
- Booking & rental information — where a rental is arranged: driver details, driving licence, identification document, and rental dates. Bookings completed through our online booking system are handled by our booking provider (see Section 6).
- Technical & usage data — collected automatically through cookies and similar technologies: IP address, device and browser type, operating system, pages visited, referring website, and interactions with the site (see Section 9 – Cookies).
We do not knowingly collect special categories of data (e.g. health, religion) and ask that you do not send such data through our forms.
3. How and Why We Use Your Data
- To respond to your enquiries and provide quotes.
- To arrange, manage, and fulfil your vehicle rental.
- To communicate with you about your booking or request.
- To operate, secure, and improve our website (including spam and fraud prevention).
- To measure and analyse website traffic and performance (only with your consent).
- To comply with our legal, accounting, and regulatory obligations.
4. Legal Bases for Processing
- Performance of a contract (Art. 6(1)(b) GDPR) — to process your booking and provide the rental service.
- Consent (Art. 6(1)(a) GDPR) — for non-essential cookies and analytics/marketing technologies. You may withdraw consent at any time.
- Legitimate interests (Art. 6(1)(f) GDPR) — to respond to enquiries, secure our website, and prevent fraud and abuse.
- Legal obligation (Art. 6(1)(c) GDPR) — to meet tax, accounting, and other legal requirements.
5. reCAPTCHA
Our contact form is protected by Google reCAPTCHA, which helps us distinguish humans from automated abuse. reCAPTCHA analyses technical data (including your IP address and browser behaviour) and sets cookies. Its use is subject to the Google Privacy Policy and Terms of Service.
6. Who We Share Your Data With
We do not sell your personal data. We share it only with:
- Our booking provider (GoCars) — the online booking engine (rentacarzantetimos.gocars.gr) that processes reservations you make online.
- Google (Ireland/LLC) — analytics, tag management, reCAPTCHA, Maps, and Fonts, as described in Section 9.
- Our hosting and email providers — to operate the website and deliver enquiry emails.
- Authorities or advisors — where required by law, or to establish, exercise, or defend legal claims.
7. International Data Transfers
Some of our service providers (in particular Google) may process data outside the European Economic Area, including in the United States. Where this happens, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses and/or the EU–US Data Privacy Framework.
8. Data Retention
- Enquiry and contact messages: kept for as long as needed to handle your request and for a reasonable period afterwards.
- Booking and rental records: kept for the duration of the rental and as required by tax and accounting law.
- Cookie and analytics data: kept for the periods set out in the cookie table below, or until you withdraw consent.
9. Cookies & Tracking Technologies
Cookies are small text files stored on your device. We also use similar technologies such as your browser's local storage. When you first visit our site, a consent banner lets you accept or decline non-essential cookies. Strictly necessary cookies are always active because the site cannot function properly without them; analytics, functional, and advertising cookies are only set after you give consent.
We use Google Tag Manager to load tags and Google Consent Mode so that Google services respect your cookie choices. Analytics is provided by Google Analytics 4. The specific technologies we use are:
| Name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
| PHPSESSID | Timos Rentals (first-party) | Maintains your session and secures form submissions (CSRF protection). | Session | Strictly necessary |
| cookie_consent_user_accepted, cc_* | Timos Rentals / Cookie Consent | Stores your cookie consent choices. | Up to 12 months | Strictly necessary |
| rentq_template (local storage) | Timos Rentals (first-party) | Remembers your light/dark theme preference. | Persistent | Functional |
| gocars_* (local storage) | Timos Rentals (first-party) | Temporarily caches vehicle and location data to speed up the booking form. | ~30 minutes | Functional |
| _ga | Google Analytics | Distinguishes unique visitors. | 2 years | Analytics |
| _ga_G-70J4PVW572 | Google Analytics | Persists the GA4 session state. | 2 years | Analytics |
| _gid | Google Analytics | Distinguishes visitors. | 24 hours | Analytics |
| _gat / _gat_gtag_* | Google Analytics | Limits the rate of data requests. | 1 minute | Analytics |
| _GRECAPTCHA | Google reCAPTCHA | Bot and spam protection on the contact form; risk analysis. | ~6 months | Strictly necessary / Security |
| NID, CONSENT, SOCS, AEC (and similar) | Google (Maps, Fonts, account) | Set when the embedded Google Map, Google Fonts, or other Google services load; store preferences and security/ad settings. | Session to ~2 years | Advertising / Third-party |
Cookie names and durations set by Google may change over time and are controlled by Google. Note that our website also loads Google Fonts and an embedded Google Map on the contact page; when these load, your IP address is transmitted to Google. These third-party services are governed by the Google Privacy Policy.
10. Managing Your Cookie Choices
- Use the cookie consent banner shown on your first visit to accept or decline non-essential cookies.
- You can withdraw or change your consent at any time by clearing this site's cookies in your browser and reloading the page, which will show the banner again.
- You can block or delete cookies through your browser settings. Disabling strictly necessary cookies may cause parts of the site to stop working.
- You can opt out of Google Analytics across all websites using Google's opt-out browser add-on.
11. Your Rights Under the GDPR
Subject to conditions in the GDPR, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request erasure of your data ("right to be forgotten").
- Restrict or object to certain processing.
- Data portability (receive your data in a structured, machine-readable format).
- Withdraw consent at any time, without affecting processing carried out before withdrawal.
- Lodge a complaint with a supervisory authority.
To exercise any of these rights, contact us at info@rentacarzantetimos.gr. You also have the right to complain to the Greek supervisory authority, the Hellenic Data Protection Authority (Kifisias 1-3, 115 23 Athens, www.dpa.gr).
12. Data Security
We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including HTTPS encryption of our website. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.
13. Children
Our website and services are not directed at children under 16, and we do not knowingly collect their personal data.
14. Changes to This Policy
We may update this Privacy & Cookie Policy from time to time. The current version, with its "Last updated" date, is always published on this page.
15. Contact Us
For any question about this policy or your personal data, please contact us or call +30 697 399 8901.