Privacy Policy | On My Way Santorini
Privacy Policy
This Privacy Policy explains how On My Way Santorini (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit onmywaysantorini.com (the “Site”) or book our private transfer and private tour services (the “Services”).
We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR) and applicable Greek data protection law.
1. Who We Are
On My Way Santorini
Legal name: ΖΑΝΤΙΩΤΗΣ ΣΤΥΛΙΑΝΟΣ ΣΠΥΡΙΔΩΝ (Zantiotis Stilianos Spiridon)
Registered address: Imerovigli, 847 00, Santorini, Greece
VAT number (ΑΦΜ): 156620985
Registered Ministry of Tourism Number (MHTE): 1167E70001152401
Email: onmyway.santo@gmail.com
Phone: +30 698 009 5282
We are the data controller responsible for your personal data collected through the Site and our booking process.
2. What Personal Data We Collect
We collect data you provide directly, and some data automatically when you use the Site.
2.1 Information you provide
| Category | Examples |
|---|---|
| Booking details | Full name, email address, phone number/WhatsApp, number of passengers, flight or ferry number, pickup date/time, pickup and drop-off locations |
| Communication | Messages sent via our contact form, email, or WhatsApp, including special requests (e.g. child seats, luggage, accessibility needs) |
| Payment information | Billing name and payment details processed via Stripe — we do not store your full card number |
| Accommodation details | Hotel or villa name and address, if provided for pickup purposes |
2.2 Information collected automatically
| Category | Examples |
|---|---|
| Technical data | IP address, browser type, device type, operating system |
| Usage data | Pages visited, time spent on Site, referring website, general location (country/region) |
| Cookies | See Section 5 (Cookies) |
Note: We do not knowingly collect any special category data (e.g. health data). If you disclose a medical or accessibility need relevant to your transfer (such as a wheelchair requirement), we process this only to the extent necessary to provide the service safely, and only because you chose to submit that information to us.
3. How We Use Your Data
- Process and confirm your booking for transfers or tours
- Communicate with you about your reservation (confirmations, driver details, changes, delays)
- Process payments via Stripe and issue invoices/receipts
- Respond to inquiries and customer support requests
- Improve our Site and Services
- Comply with legal and tax obligations under Greek law
- Send you marketing communications, but only if you have opted in (see Section 8)
4. Legal Basis for Processing
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Booking and delivering transfer/tour services | Performance of a contract |
| Invoicing, tax records | Legal obligation |
| Responding to inquiries | Legitimate interest |
| Marketing emails/newsletters, Google Ads remarketing | Consent |
| Google Analytics cookies | Consent |
5. Cookies
- Essential cookies — required for the Site and booking form to function
- Analytics cookies — Google Analytics, to understand how visitors use the Site
- Marketing cookies — Google Ads, to measure and improve our advertising
You can manage cookie preferences through the cookie settings on our Site or through your browser settings. Disabling non-essential cookies will not affect your ability to book a transfer.
6. Sharing Your Data
We do not sell your personal data. We share it only with trusted third parties where necessary to provide our Services:
| Recipient | Purpose |
|---|---|
| Drivers / transfer partners | To carry out your pickup and transfer |
| Stripe | To process your payment securely |
| Google (Analytics & Ads) | Website analytics and advertising measurement |
| Email service provider | To send booking confirmations and (if opted in) newsletters |
| Accountant / tax authorities | To meet Greek legal and tax obligations |
Some of these providers may process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.
7. Data Retention
We retain all personal data described in this policy — including booking records, communications, invoices, and marketing consent data — for a maximum of 2 years from the date of collection or your last interaction with us, after which it is securely deleted, unless a longer period is required by Greek law (e.g. tax obligations).
8. Marketing Communications
We will only send you marketing emails or show you remarketing ads if you have opted in (e.g. by ticking a consent box or accepting marketing cookies). You can withdraw consent at any time by clicking “unsubscribe” in any email, adjusting your cookie preferences, or contacting us at onmyway.santo@gmail.com.
9. Your Rights (GDPR)
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data (“right to be forgotten”), subject to legal retention requirements
- Restriction — request that we limit how we use your data
- Data portability — request your data in a portable format
- Object — object to processing based on legitimate interest or for marketing purposes
- Withdraw consent — where processing is based on consent
To exercise any of these rights, contact us at onmyway.santo@gmail.com or +30 698 009 5282. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
10. Data Security
We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse, including secure hosting, restricted access to booking data, and encrypted payment processing via Stripe.
11. Children’s Privacy
Our Services are not directed at children. Children’s personal data (e.g. name, age for a child seat request) is collected only from and with the consent of a parent or guardian making the booking.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this page will indicate when changes were made.
13. Contact Us
If you have questions about this Privacy Policy or how we handle your data, contact us at:
Email: onmyway.santo@gmail.com
Phone/WhatsApp: +30 698 009 5282
Address: Imerovigli, 847 00, Santorini, Greece
This document reflects the details provided for On My Way Santorini and does not constitute legal advice. We recommend a final review by a lawyer familiar with Greek and EU data protection law before publishing.
