1. About Us

1.1 Welcome to the privacy policy of the company “ROUSSOU MARIOU TOU IOANNI”, operating under the trade name “VroumVroum.gr”. We respect your privacy and are committed to protecting your personal data. This privacy policy informs you about how we handle your personal data as a customer and provides information about your privacy rights and how you are protected by law. Our company is responsible for the collection, management, and processing of your personal data.

1.2 You have all rights under the provisions of EU regulation 2016/679 and the relevant European and national legislation. We will process your personal data only when the law permits us to do so.

• When we have your explicit consent to do so.
• When we need to execute the contract we are about to enter into or have already entered into with you.
• When it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override these interests.
• When we need to comply with a legal or regulatory obligation.
• When it is imposed for reasons of public interest.

2. For What Purposes We Process Your Personal Data

We process personal data that you voluntarily provide and only after obtaining your prior explicit consent, when processing is necessary to execute our contract or to take steps at your request before the contract is finalized. Specifically, the purposes are defined as follows: the rental of vehicles to third parties, with or without a driver.

3. Categories of Information We Collect

We reserve the right to collect, process, store, and transfer various types of personal data about you, categorized as follows:

• Contact Data: Includes residential address, full name, email, and telephone numbers.

4. How We Collect Your Information

We collect personal data about you in digital or printed form every time you use our services, whether these services are provided at our customer service points, stores, or other legal physical locations where our company operates (e.g., airports, hotels, service stations, etc.). We also collect your data when you use our call centers, any mobile applications, the company’s email, and our websites. In the latter case, especially when you create or manage your profile, we collect the necessary data for this purpose.

Additionally, please note that for information regarding our cookie policy, you can refer to our website (Cookie Policy).

• We collect personal data with your consent through various means, including phone calls, customer service contacts, websites, and other sources as outlined above.
• We collect personal data from customers or drivers during the process of short-term or long-term rental bookings, such as full name, address, phone, driver’s license, credit card details, and Tax Identification Number (TIN).

5. How Long We Retain Your Personal Data

We will retain your personal data only as long as necessary to fulfill the purposes for which we collected it, including any legal, accounting, or reporting obligations.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure of your data, the purposes for which we process your data, whether we can achieve these purposes through other means, and the applicable legal requirements.

Customer tax data is retained for a period of ten (10) years from the year of issuance of each tax document for auditing purposes by the competent tax authorities, within the statutory limitation period for tax claims. Data related to the establishment, exercise, and support of legal claims by the Company or a third party, before any competent Court or Administrative Authority, is retained for a period of up to twenty (20) years from the time the claims arise, and in any case, for any additional period until the expiration of related claims and until the conclusion of any potential judicial disputes between the parties. The Company may retain Customer Personal Data even after fulfilling the purposes of their collection and processing if there is a legal obligation deriving from any relevant legal provision.

6. Personal Data Security

We have taken all appropriate organizational and technical measures to secure your personal data and protect it from accidental or unlawful destruction, accidental loss, alteration, prohibited disclosure, or access, and any other form of unlawful processing.

7. How We Ensure That Processors & Sub-processors Respect Your Data

Processors acting on our behalf have contractually agreed and committed to the Company to:

• Maintain confidentiality,
• Not send your data to third parties without the Company’s permission,
• Take appropriate security measures,
• Comply with the legal framework for personal data protection, specifically Regulation 679/2016/EU (GDPR),
• Have knowledge of and adhere to all applicable legislative and regulatory provisions for personal data protection.

Processors may engage other individuals, called Sub-processors, while performing their duties. In this case, the Controller authorizes them to handle the full or partial processing of the Data. Consequently, the Sub-processor has the same obligations and rights as the Processor, as outlined in this Policy, within the scope of their delegated responsibilities, and bears joint liability with the Processor.

8. Your Rights

You have the right to:

• Request access to your personal data (“data subject access request”). This allows you to receive a copy of the personal data we hold about you and verify that we are processing it lawfully.
• Request correction of the personal data we hold about you. This allows you to correct incomplete or inaccurate data or add data that we hold about you, although we reserve the right to ask you to validate the accuracy of the new data you provide.
• Object to the processing of your personal data when you believe that it violates your fundamental rights and freedoms. You also have the right to object when we process your personal data for direct promotional purposes.
• Withdraw your consent if you find and can substantiate that it is no longer lawful. However, this does not affect lawful processing conducted before you withdrew your consent. If you withdraw your consent, we may no longer be able to provide certain products or services to you.

If you wish to exercise any of the rights described above, contact us.

9. How to Exercise Your Rights

For any clarification regarding this privacy policy, including any request to exercise your legal rights, you can send an email to: info@vroumvroum.gr.

10. What We May Need From You

We reserve the right to request specific information from you to confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a protective measure to ensure that personal data is not disclosed to any person who has no right to receive it. We also reserve the right to contact you for more information regarding your request to expedite our response time.