Privacy Policy
Last updated: 27 July 2026
Niotis Travel respects your privacy and processes personal data transparently, securely and only for specified lawful purposes. This Policy explains what data may be collected through the website, why it is used and what rights you have.
1. Data controller
The data controller is Niotis Travel. Full company and contact details will be shown on the Contact page and may be updated through the website administration area.
2. Data we collect
- Identity and contact details, such as name, email address and telephone number.
- Booking information, such as date, time, pickup and destination points, passenger numbers, luggage, flight or ferry details and special requests.
- The content of messages and requests you send us.
- Technical information, such as IP address, device and browser type, logs and cookie preferences, where necessary or permitted.
- Transaction information where a payment provider is used. The website does not necessarily store full card details, which are handled by the relevant provider.
3. Purposes and legal bases
Data is used to answer enquiries, prepare quotations, perform and manage bookings, communicate changes, issue required documents, comply with legal obligations, protect website security and establish or defend legal claims. Depending on the situation, processing is based on contract or pre-contractual steps, legal obligation, legitimate interests or your consent.
4. Recipients and service providers
Data may be shared only where necessary with drivers or partners performing the service, hosting and technical providers, email, mapping, analytics or payment providers, accountants, legal advisers and competent authorities. Service providers are required to use data only for the agreed purpose and with appropriate safeguards.
5. Transfers outside the EEA
Some technology providers may process information outside the European Economic Area. Where this occurs, the legally required safeguards are used, such as adequacy decisions or approved standard contractual clauses, where applicable.
6. Retention
Data is kept only for as long as required for the purpose of collection, service performance, enquiry handling, tax and accounting duties, security and legal claims. It is then securely deleted or anonymised.
7. Your rights
Depending on the circumstances, you may request access, correction, erasure, restriction, data portability or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing. You also have the right to lodge a complaint with the Hellenic Data Protection Authority.
8. Security
Appropriate technical and organisational measures are used, including access controls, system updates, backups and communication protection, according to the relevant risk. No internet transmission can be guaranteed completely secure, but incidents are handled in accordance with applicable obligations.
9. Children
The services are not intended for independent booking by minors. Where information about children is necessary for safe transport, it is supplied by a parent or legal guardian and limited to what is necessary.
10. Contact and updates
To exercise a right or ask a privacy question, contact Niotis Travel through the Contact page. This Policy may be amended when services, technology or legal requirements change.