Last updated: October 2026
At Prime Rent a Car Chania, we respect your privacy and are committed to protecting the personal information you share with us through our website, booking forms, and direct communication channels.
This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have under applicable data protection laws, including the General Data Protection Regulation (GDPR).
1. Who We Are
This website is operated by Prime Rent a Car Chania, a local car rental business based in Chania, Crete.
For privacy-related questions, you can contact us at: [email protected]
2. Personal Data We Collect
When you use our website or submit a booking request, we may collect the following information:
- Full name
- Email address
- Telephone number
- Pickup and return details
- Flight number, when provided
- Selected vehicle and rental dates
- Messages or requests you send to us
- Technical information such as IP address, browser type, and basic website usage data
3. How We Use Your Data
We use your personal data only when necessary to provide our services, communicate with you, and manage your rental request.
- To respond to questions and booking requests
- To prepare and manage car rental reservations
- To arrange vehicle pickup and return
- To send booking confirmations or important rental information
- To improve the reliability and security of our website
- To comply with legal or tax obligations when required
4. Legal Basis for Processing
We process personal data based on one or more of the following legal grounds:
- Your request before entering into a rental agreement
- The performance of a rental agreement
- Our legitimate interest in operating and improving our services
- Compliance with legal obligations
- Your consent, where required
5. Sharing Data with Third Parties
We do not sell your personal data. We may share limited information only when necessary to provide our services or comply with legal obligations.
- Website hosting and technical service providers
- Email or communication service providers
- Payment, accounting, legal, or tax service providers, where applicable
- Public authorities, only when legally required
6. Data Retention
We keep personal data only for as long as necessary to manage your booking, provide customer support, comply with legal obligations, and maintain accurate business records.
7. Your Rights
Under applicable data protection laws, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data, where legally possible
- Object to or restrict certain processing activities
- Request a copy of your data
- Withdraw consent, where processing is based on consent
- Lodge a complaint with the Hellenic Data Protection Authority
8. Cookies and Website Analytics
Our website may use essential cookies or basic technical tools needed for website functionality, security, and performance. If optional analytics or marketing cookies are added in the future, visitors should be informed and, where required, asked for consent.
We use Cloudflare Web Analytics to count visits and measure how fast our pages load. It does not use cookies, does not store anything on your device and does not follow you across other websites. The statistics are anonymous: Cloudflare processes basic technical information on our behalf, such as the page visited, the referring page, the browser type and the country, and in its reports we only see totals.
We also keep our own anonymous visit statistics, without cookies and without storing your IP address: which pages are viewed, which links and buttons are used, the rental dates searched, the referring page, the language, the type of device, browser and operating system, and the country and city of the connection. To tell visits on the same day apart, your address and browser are turned into a code with a key that changes every day; the key is then deleted, so the code cannot be traced back to you or linked across days. Booking details are never part of these statistics.
9. Data Security
We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, misuse, or alteration.
To protect online bookings and our contact form from automated abuse, the final "Confirm Booking" step and the contact form use Cloudflare Turnstile, a security check provided by Cloudflare. To tell people apart from automated programs, Turnstile processes technical information about your browser, device and connection, including your IP address.
When a booking is confirmed, we store a coded fingerprint of your connection (not your IP address itself) and the country of the connection, so that repeated bookings can be spotted. If a new booking shares its email address or connection with another recent booking, our team receives an internal email, including the IP address, so that a person can check that both bookings are genuine. No booking is refused because of this check. We do this based on our legitimate interest in keeping our booking system secure.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, website functionality, or legal requirements. The latest version will always be available on this page.
11. Contact
For any privacy-related request or question, please contact us at: [email protected]