Privacy Notice — Hotels & Agencies

Business identity and contacts (company name, ΑΦΜ, address, contact persons, email/phone); account and integration data (login or API credentials, usage logs); the booking data you submit (ride details, your own reference, retail price, and the guest details needed to perform the transfer); and settlement and invoicing data via myDATA.

When you submit a guest’s personal data to arrange a ride, Aristevo processes it to fulfil that booking, governed by our Passenger privacy notice. You are responsible for having a lawful basis and for informing the guest before sharing their data with us.

To operate the partnership and receive and fulfil bookings (performance of a contract); for settlement, invoicing and tax/accounting (legal obligation and contract); and for account security, fraud prevention and support (legitimate interests).

The assigned driver/fleet, with the data needed to perform the guest’s ride; our payment, hosting and messaging providers, as processors; and the tax authority (ΑΑΔΕ/myDATA) and authorities where legally required.

We use these providers to run the service, each under a data‑processing agreement: Stripe (payment processing & settlement; EU/US, under the EU–US Data Privacy Framework & Standard Contractual Clauses); Google Maps (geocoding & routing; EU/US, DPF/SCC); Hostinger (hosting & email delivery; EU); Google Firebase Cloud Messaging (push notifications; EU/US, DPF/SCC); and a public ADS‑B flight‑status service (airport pickup timing — flight number only). We do not sell your data or use advertising trackers.

Partnership and booking records for the duration of the partnership and as needed for disputes; tax and accounting records for the period required by Greek law; accounts and credentials while active and for a limited period afterwards.

Access, rectification, erasure, restriction, portability, objection and withdrawal of consent — support@aristevo.com. Complaints: Greek Data Protection Authority (dpa.gr).