Privacy Policy – Paphos Car Rental (EU/GDPR Compliant)

1. Introduction

Paphos Car Rental (“we”, “us”, “our”), operated by CH Car Rental Ltd, respects your privacy and handles your personal data in accordance with the UK Data Protection Act and EU General Data Protection Regulation (GDPR). This policy covers personal data relating to individuals—not organizations—and may be updated from time to time.

2. Personal Data We Collect

We may collect personal data directly from you or from lawful third parties:

• Directly: When you make a booking or inquiry via our website, contact us by email or phone, or interact on our social media. Data may include your name, email, phone number, driver’s license details, booking preferences, and any additional information you choose to give.

• Indirectly: From third-party services (e.g., payment providers, fraud prevention agencies), social media platforms, or publicly available sources—always in line with legal regulations.

3. Purposes & Legal Basis for Processing

Under GDPR, we process your personal data based on:

• Contractual necessity: To fulfil bookings, provide car rental services, respond to inquiries, and follow up on your requests.

• Legitimate interests: To manage our services, enhance customer experience, analyze trends, carry out profiling for service improvement, and protect against fraud.

• Consent: When you explicitly opt-in to receive marketing communications via email or electronic means. You may withdraw consent at any time.

4. Data Sharing & International Transfers

We do not sell or lease your personal information. We may share data only in the following cases: 

• Legal obligations: To comply with legal or regulatory processes.

• Service fulfilment: When you request third-party services (e.g., airport transfers, equipment hires).

• Fraud prevention: To monitor and prevent fraudulent activity.

• International transfers: If data is shared outside the EEA, we ensure recipients provide equivalent data protection safeguards (e.g., standard contractual clauses, adequacy decisions).

5. Marketing Communications

With your prior consent, we may send offers and service updates via email or electronic messaging. You can withdraw consent or opt out at any time via the unsubscribe link or by contacting us directly. 

6. Cookies & Website Security

• Cookies: We use cookies to enhance website functionality, remember your preferences, and understand site usage. You can manage cookie settings through your browser.

• Security Notice: Although we use industry-standard safeguards, we cannot guarantee the absolute security of information transmitted over the internet or stored electronically.

• External links: Our policy applies only to our domain. We are not responsible for privacy practices of external websites we link to.

7. Your Rights Under GDPR

You have several rights regarding your personal data:

• Access: You may request a copy of the data we hold about you.

• Rectification: Ask to update inaccurate data.

• Erasure (“Right to be Forgotten”): Request deletion of your data when no longer needed.

• Restriction of processing: Ask us to limit how we use your data.

• Data portability: Receive your data in a structured, machine-readable format.

• Objection: Object to processing based on public interest or legitimate interests.

• Withdraw consent: Change your marketing preferences at any time.

To exercise these rights, contact us using the details below. If dissatisfied, you also have the right to lodge a complaint with your national Data Protection Authority.

8. Children’s Privacy

Persons under 16 must have the permission of a parent or guardian before submitting personal details to us. 

9. Contact Information

If you want to exercise your rights, update preferences, or have questions about this policy, please contact:

Paphos Car Rental
Nikiforou Vrettakou 40
Geroskipou, Paphos 8035, Cyprus
Phone: +357 99411670
Email: via our website contact page