top of page

Privacy Policy

Every time you use the website www.k1rentals.com, make a booking through it, or enter into a short-term or long-term vehicle rental agreement with K1 Rentals, you are bound by the then-current Privacy Policy. Therefore, you should read this text carefully each time you use this website and, in general, our services, and ensure that you accept it. If you do not agree with the terms, you may refrain from using our website and services.

We place particular importance on providing our services securely and we fully respect the privacy and confidentiality of your personal data. For this reason, we have invested time and resources to fully comply with the applicable national, European and international legal framework and, in particular, with the EU General Data Protection Regulation (GDPR) 679/2016, which entered into force in May 2018.

If you have any questions or concerns about the handling of your personal data, you may contact us at welcome@k1rentals.com or by phone at +30 6985066615.

Introduction

Privacy protection. This Privacy Policy explains how and why K1 Rentals collects, processes, discloses, and protects information obtained when you visit the website, make a booking through it, or enter into a short-term or long-term vehicle rental agreement.

Scope of the Privacy Policy. This Privacy Policy applies to all natural persons from whom, or for whose benefit, we receive information.

Website and services not directed to minors. Our website and services are not directed to children or minors. If personal data of individuals under the age of 18 are processed without valid consent from their parents or legal guardian, we reserve the right to delete the data obtained.

Controller. The controller of personal data is the private company limited by shares (IKE) under the name “K1 Rentals IKE – CAR RENTALS” (“K1 Rentals”), lawfully represented, having its registered office in Greece, Attica, Leof. Koropiou - Aerodromiou 0, 19400 Koropi, tel. +30 6985066615, email: welcome@k1rentals.com.

Personal Data

Definition. “Personal data” means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, address, identity number, credit card number, bank account information, social security number or driver’s licence number, location data, an online identifier such as an IP (Internet Protocol) address, or to one or more factors specific to that person’s physical, physiological, genetic, mental, economic, cultural or social identity.

Personal data do not include any information which, by itself, cannot identify you as a specific individual or entity (e.g., anonymised information), as well as data collected for statistical purposes.

Processing

  • Account registration. When you register on our website, we collect the information you submit, specifically: first name, last name, email address, telephone number, address, and your password.

  • Online booking. When you make a booking through our website, we collect the information you submit, including: first name, last name, email address, telephone number, Tax Identification Number (A.F.M.), country, address, city, and postal code.

  • Rental agreement. When you enter into a short-term or long-term vehicle rental agreement with us, we collect the information you provide, including: first name, last name, date of birth, telephone number, Tax Identification Number (A.F.M.), country, address, city, postal code, driver’s licence number, identity card or passport number, and your credit/debit card number.

Personal data that you submit anywhere on our website or when entering into a rental agreement are processed and stored in a file under the responsibility of K1 Rentals solely for purposes relating to:
(a) the development, execution and operation of the website or the fulfilment of obligations arising from your booking or your vehicle rental agreement, or other agreements concluded between you and the controller;
(b) handling your requests;
(c) providing you - with your consent - with information regarding the controller’s services, including sending commercial communications by email or other equivalent electronic means (e.g., SMS); and
(d) in general, improving the services provided by the controller. Your personal data may not be used by any third party, except in cases provided for by law and this Policy.

We collect and process information that is considered personal data and other information that is not. Information that cannot identify you as a specific person is used without restriction and may be provided to third parties at our discretion.

When you browse the website or enter into a rental agreement with us, we do not collect or process special categories of personal data (sensitive data), e.g., health data, genetic or biometric data, data revealing sexual life or sexual orientation, racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade-union membership.

When you send a message via the contact form, we collect the information you submit, including your full name and email address.

Your IP address is collected and deleted upon your exit from the website. An IP address is a number assigned to your computer when you use the Internet. Information regarding your actual location is also collected.

Unless required by law, we will not obtain your consent before collecting your personal data from third parties. Instead, it will be assumed that you have previously provided such consent to any third party from whom we obtain such information.

If you wish, we may use the personal data you provide when using our website or our services generally to inform you by email about offers/discounts and other announcements.

Only our authorised employees have access to your transaction information and only when necessary (e.g., to process your booking). Where we use third parties to support our systems, we ensure confidentiality is maintained.

We make reasonable efforts to process your personal data in accordance with this Privacy Policy and the Terms of Use.

Sharing

We do not share, disclose, or sell your personal data to others, except as described in this Privacy Policy and the Terms of Use.

We may provide personal data to other persons where:
(a) you have given your explicit consent by clicking the relevant “I Accept” box;
(b) disclosure is necessary to complete a requested service/transaction;
(c) we have received information from third parties (provided that you previously gave such consent to any third party from whom the controller obtains such information);
(d) required by law, by court order, or upon request of any other competent governmental, judicial, police, administrative or regulatory authority, pursuant to a lawful request and in accordance with the relevant laws;
(e) necessary for the protection of our rights;
(f) the website is used in a manner that violates the Terms of Use or for purposes other than those specifically intended; or
(g) such disclosure is permitted and/or provided for by this Privacy Policy and/or the Terms of Use.

Third-party services. In order to provide, improve, promote, and protect our services, we may need to use third-party services. These third parties may access, process, or store information solely to perform tasks for the purpose we have authorised, and we require them to provide at least the same level of data security as described in this Policy. Personal data may be disclosed to financial institutions or third-party service providers that assist in our business operations, always under conditions ensuring that your personal information is not subject to any unlawful processing. Indicatively, we share data with:

Purposes

Personal data we process will be used solely for the specified, explicit, particular, and lawful purposes explained above and not in a manner incompatible with those purposes. Data collection is further limited to what is appropriate, relevant, and necessary for these purposes.

Retention Period

We retain your personal data and other information for five (5) years from each transaction made through our website. By exception, personal data necessary for billing our services are retained for ten (10) years due to applicable tax legislation.

When we no longer need your personal data, we will destroy, delete, or anonymise the information without prior notice to you.

Security

We take the protection of your anonymity and personal information very seriously. Your personal data - and, in general, the information we receive about you - are protected with appropriate, commercially reasonable safeguards and security measures, in line with modern and advanced technological methods. These measures include commercially reasonable technical and procedural steps to protect your data from misuse, unauthorised access or disclosure, loss, alteration, or destruction.

To prevent unauthorised access, promote data security, and encourage appropriate information use, we and our providers employ various tools (e.g., encryption technologies, passwords, physical and electronic security). However, “absolute security” does not exist on the Internet or in data transmissions; therefore, we provide no guarantees. Third parties may unlawfully monitor or access transmissions or private communications, and you should not expect your personal information to remain entirely private.

Access to our website is controlled by a firewall, which permits the use of certain services by customers/users while preventing third-party access to systems and databases containing confidential data and information.

The website uses the HTTPS (SSL) protocol.

Your personal data are stored on an encrypted, SSL-protected server and are accessible only by the controller, and only when necessary (e.g., to manage your requests).

For security reasons, we do not disclose all our security measures. Rest assured we use commercially reasonable industry standards to protect your information.

For your own security, you should treat all information you provide to us as confidential and personal and not disclose it to third parties. In addition, it is your sole responsibility to limit or block access to your computer and browser.

Access to Personal Data

You have the right to obtain confirmation as to whether or not your personal data are being processed and, where that is the case, the right to access your personal data and to obtain:
(a) the purposes of processing;
(b) the relevant categories of personal data; the recipients or categories of recipients to whom the personal data have been or will be disclosed;
(c) where possible, the envisaged period for which the personal data will be stored or, if not possible, the criteria used to determine that period; (d) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing, or to object to such processing;
(e) the right to lodge a complaint with a supervisory authority;
(f) where the personal data are not collected from you, any available information as to their source;
(g) the existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for you.

You may request a copy of your personal data undergoing processing. For additional copies that may be requested, a fee of fifteen (15) euros applies.
Any access request should be addressed to welcome@k1rentals.com. We will respond within one (1) month.
Right to Rectification, Erasure, Restriction, Portability, Objection, and Complaint
We are committed to ensuring the confidentiality of your personal data and to securing your ability to exercise the rights of access, rectification, erasure, restriction, portability, and objection by sending an email to welcome@k1rentals.com. If deemed necessary, we will ask you to provide a copy of your identity card, passport, or other valid proof of identity.
Right to rectification. You have the right to obtain, without undue delay, the rectification of inaccurate personal data concerning you. In view of the purposes of processing, you have the right to have incomplete personal data completed, including by means of a supplementary statement.
Right to erasure. You have the right to obtain the erasure of personal data concerning you without undue delay where:
(a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
(b) you withdraw consent on which the processing is based and there is no other legal ground;
(c) you object to the processing and there are no overriding legitimate grounds;
(d) the personal data have been unlawfully processed;
(e) the personal data must be erased for compliance with a legal obligation under Union or Member State law to which the controller is subject;
(f) the personal data have been collected in relation to the offer of information society services. Requests for erasure are processed within one (1) month. In the event of published personal data, K1 Rentals, taking account of available technology and the cost of implementation, will take reasonable measures, including technical measures, to inform controllers processing the personal data that the data subject has requested the erasure of any links to, or copies or replications of, those personal data. Please note that deletion from servers and backups may be delayed, and personal data may be retained for K1 Rentals to comply with the law, protect its rights, or resolve disputes.
Right to restriction. You have the right to obtain restriction of processing where:
(a) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy;
(b) the processing is unlawful and the data subject opposes erasure and requests restriction instead;
(c) the controller no longer needs the personal data for the purposes of processing, but they are required by the data subject for the establishment, exercise, or defence of legal claims;
(d) the data subject has objected to processing pursuant to Article 21(1) GDPR pending the verification whether the controller’s legitimate grounds override those of the data subject. Where processing has been restricted, such data shall, with the exception of storage, be processed only with the data subject’s consent or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State. The data subject who has obtained restriction will be informed before the restriction is lifted.
Right to data portability. You have the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format, and the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided where:
(a) the processing is based on consent under Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, or on a contract under Article 6(1)
(b) GDPR; and
(b) the processing is carried out by automated means.
Right to object. You have the right to object, at any time and on grounds relating to your particular situation, to processing of personal data concerning you based on Article 6(1)(e) or
(f) GDPR, including profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defence of legal claims.

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes Regulation 679/2016 (GDPR). In Greece, the competent authority is the Hellenic Data Protection Authority (1-3 Kifissias Ave., 115 23 Athens, tel. +30 210 6475600, fax +30 210 6475628, email: complaints@dpa.gr).

Disclaimer for Third-Party Websites

Links to third-party websites. When you visit our website, you may be redirected to third-party websites not controlled by K1 Rentals. These links facilitate the use of the Internet. We bear no responsibility for the privacy policies and practices or the content of such websites and expressly disclaim any liability for any loss or damage that may arise from the use of these links. We encourage you to exercise caution when leaving our website and to read the privacy policies of any website that processes personal data.

Social media platforms and widgets. We also maintain a presence on social media platforms such as Facebook, Instagram, LinkedIn, and Google+. Any information, communications, or data you submit to us via a social media platform is at your own risk. We cannot control the actions of other users of these platforms or of the platforms themselves. Your interactions with these features and platforms are governed by the privacy policies of the companies providing them.

Please exercise caution when leaving this website and visiting another site that processes your personal data. Always read carefully the privacy policy of the other website.

User Obligations

By using the website and our services, you agree to use any information in a manner consistent with the Terms of Use, the Vehicle Rental Terms, and this Privacy Policy.

The website user warrants that the information provided is correct and accurate and undertakes to notify us of any change or modification. The user shall bear sole responsibility for any loss or damage caused to the website or to any third party responsible for the website due to the provision of incorrect, inaccurate, or incomplete information in the registration fields.

Communications

We may send you emails regarding your booking. Such communications are considered part of the services and you cannot opt out of them.

We may also send you promotional or marketing messages from time to time. These messages are sent only if you subscribe to them and for as long as you wish. You can opt out by clicking the unsubscribe link (or similarly worded link) included in such communications.

We use third-party service providers to help manage the communications and emails you send through the website. Any personal information disclosed via such communications will be governed by the third-party providers’ privacy policies.

Additional Information

When you post content on this website, it may include your personal data. You are solely responsible for information that: (a) you publish online; (b) you post via this website; and/or (c) you share with another website to which you link from this website.

Review / Modification of this Privacy Policy

We reserve the right to revise or modify this Privacy Policy, the Terms of Use, and other online policies and agreements at any time and in any manner.

We will inform you of such changes by posting the revised policies on our website.

It is your responsibility to read the Terms and the Privacy Policy at regular intervals, as the Terms and Policy in force at the time you use the website or enter into a vehicle rental agreement are the applicable ones.

Final Provisions

If you have any issues regarding our privacy practices, or if you wish to modify, delete, or correct your personal data under processing, you may contact us by email at welcome@k1rentals.com or by post at Leof. Koropiou - Aerodromiou 0, 19400 Koropi, Attica, Greece.
Last updated: 05-09-2025, 09:00

bottom of page