Legal

Privacy Policy

Last updated: May 2025

1. Who We Are

Drivo Travel is a licensed private transfer and transportation service operating on Kos Island, Greece. Our registered business address is Kos, 85300, Greece. You can reach us at info@drivotravel.gr or via WhatsApp at +30 697 161 6077.

2. What Data We Collect

When you make a booking through our website, we collect the following personal data:

  • Full name
  • Email address
  • Phone / WhatsApp number
  • Pickup and drop-off addresses
  • Travel date and time
  • Flight number (if provided)
  • Number of passengers and luggage
  • Special requests
  • Payment information (processed securely via Stripe — we do not store card details)

3. How We Use Your Data

We use your personal data to:

  • Process and confirm your booking
  • Send booking confirmation emails
  • Coordinate your transfer service
  • Respond to your inquiries or special requests
  • Comply with legal and tax obligations

We do not use your data for marketing purposes without your explicit consent, and we do not sell your data to third parties.

4. Legal Basis for Processing

We process your personal data based on:

  • Contract performance — to fulfil your booking
  • Legal obligation — to comply with Greek and EU tax/accounting laws
  • Legitimate interest — to improve our services and respond to queries

5. Data Sharing

Your data may be shared with:

  • Stripe — our payment processor (PCI-DSS compliant)
  • Google — for calendar scheduling (internal use only)
  • Resend — email delivery service for booking confirmations

All third-party providers are GDPR-compliant and process your data only as required to deliver our service.

6. Data Retention

We retain your booking data for up to 5 years to comply with Greek tax regulations. After this period, your data is permanently deleted.

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure ("right to be forgotten")
  • Restrict or object to processing
  • Data portability
  • Lodge a complaint with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr

To exercise any of these rights, contact us at info@drivotravel.gr.

8. Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. All data is transmitted over HTTPS.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. Your continued use of our services constitutes acceptance of the updated policy.