Privacy Policy

Last updated: March 2026 · GDPR compliant

Minoa Routes is a licensed tourism business. MHTE: 0261K91000XXXXXX · AFM: 802730553 · Heraklion, Crete, Greece

1. Data Controller

The data controller responsible for your personal data is Minoa Routes, located at Heraklion, Crete, Greece. For any privacy-related enquiry, contact us at info@minoaroutes.gr.

Business nameMinoa Routes
VAT (AFM)802730553
AddressHeraklion, Crete, Greece
Emailinfo@minoaroutes.gr

2. What We Collect and Why

We process your personal data in accordance with the EU General Data Protection Regulation (GDPR) 2016/679 and applicable Greek data protection legislation.

Data
Purpose
Legal basis
Name, phone, email
Booking management and communication
Contract performance (Art. 6(1)(b))
Flight / vessel details
Coordinating pick-up times
Contract performance (Art. 6(1)(b))
Payment data
Processing transactions (via Viva.com)
Contract performance (Art. 6(1)(b))
Booking history
Invoicing, tax records (myDATA)
Legal obligation (Art. 6(1)(c))
Enquiry content
Responding to contact form messages
Legitimate interest (Art. 6(1)(f))

We do not sell, rent, or share your personal data with third parties for marketing purposes. Data may be shared with payment processors (Viva.com), messaging providers (WhatsApp Business API), and email providers (Resend) strictly as needed to fulfil your booking.

3. Third-Party Passengers

If you provide personal data on behalf of other passengers, additional drivers, or companions, you confirm that you have informed them and obtained their authorisation to share their details with us for the purpose of the booking.

4. Data Retention

We retain your data only for as long as necessary:

Booking & invoice records

Greek tax law (myDATA)

5 years

Contact enquiries

Legitimate interest

12 months

Marketing consent

Consent

Until you unsubscribe

Analytics data

Legitimate interest

Up to 14 months

5. Your Rights

Under GDPR you have the following rights. To exercise any of them, email us at info@minoaroutes.gr with your request and booking reference. We will respond within 30 days.

Right of Access

Art. 15

Obtain a copy of the data we hold about you.

Right to Rectification

Art. 16

Correct inaccurate or incomplete data.

Right to Erasure

Art. 17

Request deletion of your data where no legal basis remains.

Right to Restriction

Art. 18

Limit processing in certain circumstances.

Right to Portability

Art. 20

Receive your data in a machine-readable format.

Right to Object

Art. 21

Object to processing based on legitimate interest.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr.

6. Cookies

This website uses a minimal set of cookies:

Essential cookies

Required for the website to function (session management, booking flow). Cannot be disabled.

Required

Analytics cookies

Anonymous usage statistics to improve the site. You may opt out at any time.

Opt-in

You can manage cookie preferences at any time via your browser settings or our cookie consent banner.

7. Contact & Complaints

For any privacy concern contact info@minoaroutes.gr. If you are not satisfied with our response you may escalate to the Hellenic Data Protection Authority.