This policy explains what personal data Elysium Transfer Milos collects when you book a transfer or contact us, why we collect it, and what rights you have over it. Last updated August 2026.
Who we are
Elysium Transfer Milos, Pera Triovasalos, Milos 848 00, Greece. We are the data controller for the information described below. You can reach us at elysiumtransfers@gmail.com or +30 698 348 5847.
What we collect
When you make a booking
- Your name, email address and telephone number
- Pickup and drop-off addresses, and the date and time of travel
- Flight or ferry number, where relevant
- Number of passengers, and the ages of children if you request a child seat
- Payment details, processed by our payment provider. We do not store full card numbers.
When you use the contact form
Your name, email address, telephone number and the content of your message, collected through the Metform plugin and stored in our website database.
When you message us on WhatsApp
Your WhatsApp phone number, profile name and the content of your messages. WhatsApp is operated by Meta and its own privacy policy applies to the message transport.
Automatically
Standard server logs including IP address, browser type and pages visited, plus cookies as described in our cookie policy.
Why we use it, and our legal basis
- To provide the transfer you booked — performance of a contract. Your name, phone number and pickup details are shared with the driver assigned to your journey.
- To take payment — performance of a contract.
- To answer your enquiry — legitimate interest in responding to people who contact us.
- To meet accounting and tax obligations — legal obligation under Greek law.
- To keep the website secure and working — legitimate interest.
We do not use your details for marketing unless you ask us to, and we never sell your data.
Who we share it with
- The driver carrying out your transfer, who receives only what is needed to collect you.
- Our payment provider, which processes card payments securely.
- Our web host, which stores the website database on our behalf.
- Our accountant and the Greek tax authorities, where required by law.
Embedded third party services
Some pages load content from Google, specifically Google Reviews and Google Maps address lookup in the booking form. These services may set their own cookies and receive your IP address. Google’s own privacy policy governs that processing.
How long we keep it
- Booking and payment records: as long as Greek tax law requires, currently five years.
- Contact form messages: up to two years, then deleted.
- Server logs: a short rolling period set by our host.
Your rights
Under the GDPR you have the right to ask for a copy of your data, to have inaccurate data corrected, to have your data deleted where we have no ongoing legal reason to keep it, to object to or restrict processing, and to receive your data in a portable format. Write to elysiumtransfers@gmail.com and we will respond within one month.
If you are not satisfied with our response you may complain to the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα) at www.dpa.gr.
Security
The website is served over HTTPS and access to booking records is limited to staff who need it. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information.
Children
Our services are booked by adults. We do not knowingly collect data directly from children, though a booking may include the ages of children travelling so we can provide the correct seat.
Changes
If we change this policy we will update the date at the top of this page.