...

Privacy Policy

This policy explains what personal data Elysium Transfer Milos collects when you book a transfer or contact us, why we collect it, and what rights you have over it. Last updated August 2026.

Who we are

Elysium Transfer Milos, Pera Triovasalos, Milos 848 00, Greece. We are the data controller for the information described below. You can reach us at elysiumtransfers@gmail.com or +30 698 348 5847.

What we collect

When you make a booking

  • Your name, email address and telephone number
  • Pickup and drop-off addresses, and the date and time of travel
  • Flight or ferry number, where relevant
  • Number of passengers, and the ages of children if you request a child seat
  • Payment details, processed by our payment provider. We do not store full card numbers.

When you use the contact form

Your name, email address, telephone number and the content of your message, collected through the Metform plugin and stored in our website database.

When you message us on WhatsApp

Your WhatsApp phone number, profile name and the content of your messages. WhatsApp is operated by Meta and its own privacy policy applies to the message transport.

Automatically

Standard server logs including IP address, browser type and pages visited, plus cookies as described in our cookie policy.

Why we use it, and our legal basis

  • To provide the transfer you booked — performance of a contract. Your name, phone number and pickup details are shared with the driver assigned to your journey.
  • To take payment — performance of a contract.
  • To answer your enquiry — legitimate interest in responding to people who contact us.
  • To meet accounting and tax obligations — legal obligation under Greek law.
  • To keep the website secure and working — legitimate interest.

We do not use your details for marketing unless you ask us to, and we never sell your data.

Who we share it with

  • The driver carrying out your transfer, who receives only what is needed to collect you.
  • Our payment provider, which processes card payments securely.
  • Our web host, which stores the website database on our behalf.
  • Our accountant and the Greek tax authorities, where required by law.

Embedded third party services

Some pages load content from Google, specifically Google Reviews and Google Maps address lookup in the booking form. These services may set their own cookies and receive your IP address. Google’s own privacy policy governs that processing.

How long we keep it

  • Booking and payment records: as long as Greek tax law requires, currently five years.
  • Contact form messages: up to two years, then deleted.
  • Server logs: a short rolling period set by our host.

Your rights

Under the GDPR you have the right to ask for a copy of your data, to have inaccurate data corrected, to have your data deleted where we have no ongoing legal reason to keep it, to object to or restrict processing, and to receive your data in a portable format. Write to elysiumtransfers@gmail.com and we will respond within one month.

If you are not satisfied with our response you may complain to the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα) at www.dpa.gr.

Security

The website is served over HTTPS and access to booking records is limited to staff who need it. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information.

Children

Our services are booked by adults. We do not knowingly collect data directly from children, though a booking may include the ages of children travelling so we can provide the correct seat.

Changes

If we change this policy we will update the date at the top of this page.