Privacy Policy.

01Who we are (Data Controller)

The data controller responsible for your personal data is:

For any question about this policy or your data, contact us at info@efippos.com.

02What this policy covers

It covers personal data we handle through:

• our website and the booking calendar embedded on it;
• enquiries you send us by email, phone, or WhatsApp;
• the ride itself and any transfer you ask us to arrange.

Our website links to third-party platforms (e.g. Tripadvisor, Viator, GetYourGuide, Google/Apple Maps, WhatsApp). When you use those, their own privacy policies apply.

03What data we collect, and why

Booking data. When you reserve a ride, our booking is handled through Bokun (a Tripadvisor company), which collects the details needed to confirm your ride — typically your name, email address, phone number, number of riders, chosen date/time, and your deposit payment. Payment card details are entered into and processed by Bokun and its payment providers; we never see or store your card details.

Enquiry data. If you contact us by email, phone, or WhatsApp, we receive the information you choose to share (e.g. your name, contact details, and the content of your message).

Transfer arrangements. If you ask us to arrange a private transfer, we share the minimum details needed (e.g. name, pickup location, time, party size) with our trusted local transfer partner.

Technical & cookie data. When you visit the site, limited technical data (such as device/browser information and cookie identifiers) may be processed by the embedded Bokun booking calendar and by any analytics we use. See Section 5.

We use this data to: respond to your enquiries; arrange and deliver your ride; take your deposit and the balance on the day; keep the records we are legally required to keep; and keep the site working and secure.

04Legal bases

We rely on the following legal bases under GDPR Article 6:

• Performance of a contract — to take your booking, deliver the ride, and arrange transfers you request.
• Legitimate interests — to respond to enquiries, run and secure our website, and keep basic operational records (we balance this against your rights).
• Consent — for non-essential cookies/analytics and any optional marketing. You can withdraw consent at any time.
• Legal obligation — to keep financial and tax records as required by Greek law.

05Cookies and tracking

Our site uses cookies and similar technologies. Some are strictly necessary for the site and the embedded Bokun booking calendar to function. The Bokun booking calendar (a third party) may also set its own non-essential cookies; these are only used with your consent, which we ask for through our cookie banner before they are set. We do not use our own analytics or advertising cookies.

You can change or withdraw your cookie choices at any time via the cookie settings in your browser. Blocking strictly necessary cookies may stop the booking calendar from working.

06Who we share your data with

We share data only as needed to run the rides and the site:

• Bokun (a Tripadvisor company) — our booking system and processor for reservations and deposits.
• Payment providers used by Bokun — to process your payment securely.
• Our local transfer partner — only if you ask us to arrange a transfer, and only the details needed.
• Our website host / technical providers — to keep the site online and secure.

We do not sell your personal data, and we do not share it for third-party advertising.

07International transfers

Some of our providers — in particular Bokun/Tripadvisor — may process data outside the European Economic Area (e.g. in the United States). Where this happens, transfers are protected by appropriate safeguards under GDPR, such as the European Commission’s Standard Contractual Clauses or an equivalent approved mechanism. You can ask us for more detail at info@efippos.com.

08How long we keep your data

• Enquiries that don’t lead to a booking: kept for up to 12 months, then deleted.
• Booking records: kept for the period required by Greek tax and accounting law (typically 5 years).
• Cookie data: kept for the duration set out for each cookie (see Section 5).

We delete or anonymise data once it is no longer needed for the purpose it was collected for.

09Your rights

Under GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased (“right to be forgotten”), where applicable;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent at any time (without affecting processing already carried out).

To exercise any of these, email info@efippos.com. We will respond within the timeframes set by GDPR (normally one month).

Note: some booking data is held within Bokun’s system; we will help you direct requests to Bokun where relevant.

10Children

The minimum age to take part in a ride is 12, and bookings are made by adults. Our website is not directed at children, and we do not knowingly collect data from children for marketing.

11Security

We use HTTPS across the site, and payments are handled entirely by Bokun and its payment providers — we never store your card details. We take reasonable measures to protect the data we do hold.

12Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows the latest version. Material changes will be reflected on this page.

13How to complain

If you have a concern, please contact us first at info@efippos.com — we’ll do our best to resolve it.

You also have the right to lodge a complaint with the Greek supervisory authority: