Privacy Policy

Effective Date: 01/02/2026

At Creta Machine Club (“we”, “our”, or “us”), accessible at https://www.cretamachine.com, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with the General Data Protection Regulation (EU) 2016/679 – GDPR.

The data controller responsible for processing your personal data is:

Creta Machine Club
📍 Agiou Ioannou 131, Stalis, Hersonissos, Crete, Greece
📧 Email: cretamachine@gmail.com
📞 Phone / WhatsApp: +30 697 674 1920
🌐 Website: www.cretamachine.com

We may collect and process the following categories of personal data:

• Identity & Contact Data: Name, surname, email address, phone number
   
• Booking & Rental Data: Rental dates, vehicle type, pick-up & drop-off location, booking notes
   
• Payment Data: Payments are processed securely via third-party providers. We do not store card details
   
• Communication Data: Messages, emails, WhatsApp or contact form inquiries
   
• Technical Data: IP address, browser type, device information, cookies, and website usage data
   

We process your personal data for the following purposes:

• To manage online bookings and vehicle rentals
   
• To communicate with you regarding your reservation
   
• To provide customer support and assistance
   
• To comply with legal and tax obligations
   
• To improve our website, services, and user experience
   
• To send promotional offers only if you have given consent
   

Your personal data is processed based on:

• Contractual necessity – to fulfill a rental or booking agreement
   
• Consent – for marketing communications or optional cookies
   
• Legal obligation – accounting, tax, and regulatory compliance
   
• Legitimate interest – fraud prevention, service improvement, and website security
   

We do not sell or rent your personal data.

Your data may be shared only with trusted third parties such as:

• Payment service providers
   
• Booking system & IT service providers
   
• Insurance partners (where required)
   
• Legal or public authorities when legally required
   

All third parties are contractually bound to protect your data.

Our website uses cookies to:

• Ensure proper website functionality
   
• Analyze traffic and performance
   
• Improve user experience
   

You can manage or disable cookies at any time through your browser settings.
For more details, please refer to our Cookie Policy.

We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access, loss, or misuse.

We retain personal data only for as long as necessary:

• For booking and rental purposes
   
• To meet legal, accounting, or tax obligations
   

After that, data is securely deleted or anonymized.

You have the right to:

• Access your personal data
   
• Request correction or update
   
• Request deletion (where legally possible)
   
• Restrict or object to processing
   
• Withdraw consent at any time
   
• Lodge a complaint with a supervisory authority
   

To exercise your rights, contact us at: cretamachine@gmail.com

If you believe your data protection rights have been violated, you may file a complaint with:

Hellenic Data Protection Authority (HDPA)
🌐 https://www.dpa.gr

Our services are not intended for individuals under the age of 18.
We do not knowingly collect personal data from minors.

We may update this Privacy Policy periodically.
Any changes will be posted on this page with a revised Effective Date.

For any questions regarding this Privacy Policy or your personal data:

📧 cretamachine@gmail.com
📍 Agiou Ioannou 131, Stalis, Crete, Greece
🌐 www.cretamachine.com