Privacy Policy

1. Data controller

Ant malatestas monoprosopi ike, trading as Paros Rent a Boat, established at Port of Pounta — Foinikes, Paroikia, Livadia, Paros 84400, Greece.
VAT (ΑΦΜ): 800640380 · GEMI: 133555638000
Contact for privacy requests: info@parosrentaboat.gr.

2. What data we collect

• Contact data you provide via our form, WhatsApp, email or phone: name, email address, phone number, message content.
• Booking data: dates, boat selected, number of guests, ID document number where required by Greek port authority regulations.
• Technical data: minimal — we do not use analytics or advertising cookies. The site stores only your chosen language and a cookie-banner acknowledgement in your browser's local storage.

3. Why we use your data (legal bases)

• To reply to your enquiry and arrange a booking — performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR).
• To comply with Greek maritime, tax and port-authority obligations — legal obligation (Art. 6(1)(c) GDPR).
• To handle safety incidents or legal claims — legitimate interest (Art. 6(1)(f) GDPR).

4. Retention

We keep enquiry messages for up to 24 months after last contact. Booking records and invoices are kept for the period required by Greek tax law (currently 5 years from the end of the fiscal year).

5. Sharing & international transfers

• WhatsApp / Meta Platforms Ireland Ltd. — when you contact us via WhatsApp, your messages and phone number are processed by Meta. Data may be transferred outside the EEA under Meta's Standard Contractual Clauses. See WhatsApp's EEA privacy policy.
• Google Maps (Google Ireland Ltd.) — our location page embeds a map; loading the map sets cookies controlled by Google. See Google's privacy policy.
• Hosting provider — the site is hosted on Cloudflare's EU edge infrastructure.
• We do not sell your data and we do not use it for advertising.

6. Your rights

You can request access, rectification, deletion, restriction or portability of your data, and object to processing based on legitimate interests. Contact info@parosrentaboat.gr. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

7. Security

The site is served over HTTPS with HSTS. We apply strict security headers (Content-Security-Policy, X-Frame-Options, Referrer-Policy) and store no payment data on our website. Manual security review and dependency audits are performed on every release.

8. Changes

We may update this policy occasionally. The "last updated" date at the top reflects the latest revision.