Privacy Policy

Who we are

Hermes Elite Transfers provides private airport, chauffeur and transfer services in Greece. We are the data controller for the personal data described in this policy. You can reach us at any time at info@hermeselite.gr. We are based in Athens, Greece.

What data we collect

We only collect the information you choose to send us through the enquiry and booking forms on this website:

• Your name
• Your email address
• Your telephone number (optional)
• Journey details you provide: pickup location, drop-off location, date, number of passengers
• Your subject line, message or any additional notes

For security purposes only, our form handler also processes your IP address in an irreversibly hashed form to prevent automated abuse and repeated spam submissions. These security records are automatically deleted after three minutes and are never used to identify or profile you.

We do not collect special category data, and we never ask for payment card details through this website.

Why we use it, and our lawful basis

• To respond to your enquiry and arrange your transfer. Lawful basis: performance of a contract, or steps taken at your request prior to entering into a contract (GDPR Article 6(1)(b)).
• To send you one confirmation email acknowledging that we received your message, sent to the address you entered on the form. Lawful basis: Article 6(1)(b).
• To protect the website from spam and automated abuse. Lawful basis: our legitimate interest in keeping the service available and secure (GDPR Article 6(1)(f)).

We do not send marketing emails, newsletters or promotional messages. We do not add you to any mailing list. Every email we send is a direct, one-to-one response to your own submission.

Who processes your data

We use Amazon Web Services (AWS) to host this website and to handle form submissions and email. Your submission is processed by AWS services located in the United States (Northern Virginia region), which means your data is transferred outside the European Economic Area. AWS provides these transfers under Standard Contractual Clauses approved by the European Commission.

Where you write to us in a language other than English, the text of your enquiry may be machine-translated by Amazon Translate so that our team can respond accurately.

This site also loads web fonts from Google Fonts and country flag images from flagcdn.com. When your browser requests those files, your IP address is visible to those providers. We do not share any of the information you type into our forms with them.

We do not sell, rent or trade your personal data, and we do not buy, rent or import recipient lists.

How long we keep it

Enquiry emails are retained in our business mailbox for as long as needed to handle your request and to keep proper records of the services we provide, after which they are deleted. Automated anti-spam security records expire after three minutes.

Cookies and tracking

This website does not use advertising cookies, analytics cookies or third-party tracking. Your browser may store your chosen language preference locally on your own device; this stays on your device and is not sent to us.

Your rights

Under the GDPR you have the right to request access to your personal data, to have it corrected or erased, to restrict or object to how we use it, and to receive a copy in a portable format. To exercise any of these rights, email info@hermeselite.gr and we will respond within one month.

If you believe we have handled your data improperly, you may lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

Children

This website is intended for adults arranging travel. We do not knowingly collect personal data from children.

Changes to this policy

If we change how we handle personal data, we will update this page and revise the date shown at the top.

Questions about this policy? Email info@hermeselite.gr.