Privacy Policy
Last Updated: 19 April 2026
1. Introduction
TwoWheels.gr ("we," "us," "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Data Controller
TwoWheels.gr
- Address: Kavos, Corfu, Greece
- Email: contact@twowheels.gr
- Phone: +30 697 764 4053
3. Information We Collect
We collect the following types of information:
3.1 Personal Information
- Name, email address, phone number
- Driver's license information
- Passport or ID card details
- Payment information (processed securely by payment providers)
- Rental history and preferences
3.2 Technical Information
- IP address and browser type
- Device information
- Cookies and tracking data
- Usage data and website interactions
3.3 Communication Data
- Messages sent through our contact forms
- WhatsApp and email communications
- Customer service inquiries and feedback
4. How We Use Your Information
We use your data for the following purposes:
4.1 Service Provision
- Processing vehicle rental bookings
- Managing customer accounts and reservations
- Providing customer support
- Verifying identity and driver qualifications
4.2 Legal Obligations
- Compliance with Greek and EU laws
- Maintaining records for tax and accounting purposes
- Responding to legal requests and preventing fraud
4.3 Marketing and Advertising
- Sending promotional emails and offers (with consent)
- Running advertising campaigns on Meta platforms (Facebook, Instagram)
- Remarketing to previous website visitors
- Analyzing customer preferences and behavior
4.4 Website Improvement
- Analyzing website usage and performance
- Improving user experience and functionality
- Testing new features and services
5. Legal Basis for Processing (GDPR)
We process your personal data based on:
- Contract Performance: To fulfill our rental agreement with you
- Legal Obligation: To comply with tax, accounting, and safety regulations
- Legitimate Interest: To improve our services, prevent fraud, and protect our business
- Consent: For marketing communications and non-essential cookies (you can withdraw consent at any time)
6. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience:
- Essential Cookies: Required for website functionality
- Analytics Cookies: Help us understand how visitors use our site
- Advertising Cookies: Used by Meta (Facebook) and other platforms to show relevant ads
- Preference Cookies: Remember your settings and language choices
You can manage cookie preferences through your browser settings. Note that blocking some cookies may affect website functionality.
7. Meta (Facebook) Pixel and Advertising
We use Meta Pixel to measure the effectiveness of our advertising campaigns on Facebook and Instagram. This technology:
- Tracks conversions from Meta ads
- Builds audiences for ad targeting
- Enables remarketing to website visitors
- Optimizes ad delivery to people most likely to be interested
You can opt out of interest-based advertising by visiting Facebook Ad Preferences or Your Online Choices.
8. Sharing Your Information
We may share your data with:
- Service Providers: Payment processors, email services, hosting providers
- Advertising Partners: Meta (Facebook, Instagram), Google Ads
- Legal Authorities: When required by law or to protect our rights
- Business Transfers: In the event of a merger, sale, or acquisition
We do not sell your personal data to third parties for their marketing purposes.
9. International Data Transfers
Some of our service providers (e.g., cloud hosting, Meta) may be located outside the European Economic Area (EEA). We ensure that adequate safeguards are in place, such as:
- EU Standard Contractual Clauses
- EU-US Data Privacy Framework compliance
- Adequacy decisions by the European Commission
10. Data Retention
We retain your personal data:
- For as long as necessary to provide our services and fulfill rental agreements
- For 7 years for accounting and tax records (as required by Greek law)
- Until you withdraw consent for marketing communications
- As required by law for legal claims and regulatory compliance
11. Your Rights (GDPR)
Under GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Limit how we process your data
- Portability: Receive your data in a structured format
- Object: Oppose processing based on legitimate interest or for marketing
- Withdraw Consent: Revoke consent at any time (for consent-based processing)
- Lodge a Complaint: File a complaint with your local data protection authority
To exercise these rights, contact us at info@twowheels.gr.
12. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit (SSL/TLS)
- Secure storage on encrypted servers
- Access controls and authentication
- Regular security assessments
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
13. Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Significant changes will be communicated via email or prominent notice on our website.
15. Contact Us
For questions about this Privacy Policy or to exercise your data rights, contact us:
- Email: contact@twowheels.gr
- Phone: +30 697 764 4053
- Address: Kavos, Corfu, Greece
You can also contact the Greek Data Protection Authority (Hellenic Data Protection Authority - HDPA) if you have concerns:
- Website: www.dpa.gr