Privacy Policy
Last updated: 8 November 2026
1. Who we are
Way to Transfer G.P. provides private transfers and tours in Rhodes, Greece, through https://waytotransfer.com.
For the processing described in this policy, the data controller is:
Way to Transfer G.P.
Vasileos Pavlou 75
Rhodes, 85106, Greece
Email: waytotransferoe@gmail.com
2. Personal data we collect
Depending on how you interact with us, we collect:
- Your name, email address and telephone number.
- Booking information, including pickup and destination addresses, accommodation, travel dates and times, flight details, passenger numbers and service requirements.
- Billing details and payment or refund status.
- Information contained in your enquiries and communications with us.
- Technical information, such as IP address, browser and device information, website activity and referral information.
- Your cookie preferences and records of consent.
Please provide only information relevant to your request. Avoid including sensitive personal information in free-text fields unless it is necessary to discuss an appropriate arrangement with us.
Where you book for other passengers, please make them aware of this policy.
3. Where we obtain your data
We obtain information directly from you through our booking forms, contact forms, email, telephone and WhatsApp.
We may also receive relevant booking information from the person making a reservation on your behalf, a hotel, a travel agency or another booking partner.
Technical information is collected through the operation of our website and, where applicable, the cookies and tracking technologies you allow.
4. Why we use your data
We process personal data for the following purposes and on the following legal bases:
- Enquiries, quotations and bookings: to take steps at your request before entering into a contract and to perform our agreement with you.
- Transfer and tour arrangements: to organise your service, communicate pickup instructions and coordinate drivers and transport partners. This is necessary to perform the booking.
- Payments and refunds: to process transactions and administer your booking, based on contractual necessity.
- Accounting and legal obligations: to issue and retain required records and respond to lawful requests, based on our legal obligations.
- Security and legal claims: to protect our website and services, investigate misuse and establish or defend claims, based on our legitimate interests.
- Optional analytics and advertising technologies: based on your consent, where required.
Where someone else makes the booking, we use the passenger information they provide for our legitimate interest in organising and delivering the requested transport service.
Details needed to arrange your journey or process payment are necessary for the booking. Without them, we may be unable to provide the service.
5. Bookings and payments
Our website uses WooCommerce to support order and booking-related processes. Online payments are processed through Stripe.
Payment information required to complete a transaction is processed through the payment integration. We receive information needed to manage the transaction, such as its status, reference and limited payment-method details.
Stripe also processes personal data for its own purposes, including fraud prevention and legal compliance. See Stripe’s privacy policy: https://stripe.com/privacy.
6. Who receives your data
We share relevant information with:
- Assigned drivers and transport partners, including your name, telephone number, pickup and destination details, service time and relevant flight information.
- Providers supporting our website, hosting, email, booking systems, IT maintenance and communications.
- Stripe and other parties involved in processing your payment.
- Google, where its analytics or advertising services are used in accordance with your consent choices.
- Cookiebot by Usercentrics, which supports cookie preferences and consent records.
- Accountants, professional advisers and competent authorities where necessary.
- Papaki, which provides our website hosting and professional email services.
When you contact us through WhatsApp, information is also processed by WhatsApp under its applicable privacy terms.
We limit disclosures to information relevant to the service or purpose concerned.
7. Cookies, analytics and advertising
We use Cookiebot to manage cookie choices. Necessary technologies support website functions. Optional statistics and marketing technologies are controlled through your consent choices.
Our website uses Google Analytics to understand website usage and Google Ads tracking to measure advertising interactions and conversions, subject to the applicable consent settings.
You can accept, reject or customise optional cookies and subsequently change or withdraw your choices using the cookie settings button.
For the current list of detected cookies, purposes, providers and storage durations, visit:
https://waytotransfer.com/cookie-policy/
8. International processing
We use service providers that may process personal data within and outside the European Economic Area (EEA), including in the United States. The locations and safeguards depend on the service and provider involved.
Google, Stripe and WhatsApp describe their international processing arrangements in their privacy notices and data transfer terms. Depending on the recipient and destination, these arrangements include European Commission adequacy decisions, including the EU–US Data Privacy Framework for participating organisations, or European Commission Standard Contractual Clauses, with supplementary safeguards where required.
Further information is available at:
- Google: https://business.safety.google/adsdatatransfers/
- Stripe: https://stripe.com/legal/dta
- WhatsApp: https://www.whatsapp.com/legal/privacy-policy-eea
Our hosting, email and consent-management providers also operate under their applicable data processing terms.
You may contact us at waytotransferoe@gmail.com to request information about the safeguards relevant to your personal data and, where applicable, a copy of those safeguards, subject to appropriate redactions.
9. How long we retain information
Retention depends on the purpose and type of record:
- Enquiries are retained as needed to handle the request and relevant follow-up.
- Booking and service records are retained to fulfil the booking, manage related issues and meet applicable legal requirements.
- Accounting and transaction records are retained for the periods required by applicable law.
- Information relevant to a dispute may be retained until the matter and applicable limitation periods have ended.
- Cookie lifetimes are listed in our Cookie Policy. Consent records are retained as needed to demonstrate and manage consent.
- We review stored booking records and customer communications at least once a year. We delete or anonymise personal data that is no longer needed, unless continued retention is necessary to meet legal obligations or establish, exercise or defend legal claims.
Retention decisions take account of legal obligations, the nature of the information and whether it remains necessary for its original purpose.
10. Your rights
Subject to the conditions of applicable law, you may request access, correction, erasure, restriction of processing and data portability.
You may object to processing based on legitimate interests on grounds relating to your situation. You may object to direct marketing at any time.
Where processing relies on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out beforehand.
To exercise your rights, email waytotransferoe@gmail.com. We may request proportionate information to verify your identity. We normally respond within one month; where a lawful extension is necessary, we will explain it.
You may lodge a complaint with the Hellenic Data Protection Authority:
https://www.dpa.gr/
11. Marketing communications
We currently use email and telephone communications to handle enquiries, bookings and related service matters.
If we introduce newsletters or promotional email campaigns, we will provide the relevant information and obtain consent where required. Booking a transfer does not automatically subscribe you to a newsletter.
12. Changes to this policy
We may update this policy when our services, processing activities or applicable requirements change. The latest version will be published on this page with an updated revision date.