Legal

Privacy Policy

What personal data PLT Transfers collects, why the Company collects it, who it reaches, and how you take control of it.

This Privacy Policy explains what personal data PLT Transfers collects from you, why the Company collects it, and which rights you hold over it. PLT Transfers acts as the data controller for every booking made on pltcrete.com and for every visit to this website. The Company processes your data under the General Data Protection Regulation (GDPR) and Greek data protection law.

Who controls your data

PLT Transfers, registered in Heraklion, Crete, controls the personal data described on this page. PLT Transfers decides why and how that data is processed, and the Company answers every request you send about it. You can reach the Company at the details below.

  • Address: Laseas 1A, Therissos, Heraklion, Crete 71305, Greece
  • Email address: info@pltcrete.com
  • Telephone number: +30 694 852 8893
  • VAT number (ΑΦΜ): 125494200, issued by the Heraklion Tax Office (ΔΟΥ Ηρακλείου)
  • Tourism Enterprises Registry (MHTE) number: 1039E60000336100
  • General Commercial Registry (GEMH) number: 183357427000
Section 1

Data we collect

The data PLT Transfers collects falls into 2 groups, which are described below: the booking details you type in yourself, and the technical data your browser sends automatically.

Booking data you give us

The booking form collects only what a driver needs to meet you and what an invoice needs to be valid. The booking form asks for these details when you reserve a transfer:

  • Full name of the lead passenger
  • Email address for the confirmation voucher
  • Telephone number with its country code
  • Pickup location, drop-off location and travel dates
  • Number of passengers and any child seats required
  • Flight, hotel or address details you add as pickup notes

PLT Transfers never asks for your card number, and the Company never stores one. Card details are typed on the payment page of the bank, which is described in the sharing section of this policy.

Technical data your browser sends

Your browser sends technical data to this website on every request, because the web server needs it to return a page at all. Your browser transmits an Internet Protocol (IP) address, a user-agent string naming the browser and operating system, and the address of the page you came from. The web server writes these to an access log, and the Company reads that log to investigate errors and abuse.

Section 2

Cookies we use

This website sets 2 kinds of cookie, and how each kind is triggered is described below.

1 · Strictly necessary cookies

Strictly necessary cookies keep the booking wizard and the consent banner working, so they are set without asking you. Strictly necessary cookies carry no advertising identifier and follow you to no other website. The consent banner stores your own choice in a cookie named cc_cookie, which expires 182 days after you make that choice.

2 · Analytics cookies

Analytics cookies are set only after you press Accept on the consent banner. Analytics cookies come from Google Analytics 4 (GA4), which counts visits and shows the Company which transfer routes people search for. GA4 receives your data with the analytics storage signal set to denied until you accept, so no analytics cookie is written to your device beforehand.

Google Analytics 4 sets the cookies named below on pltcrete.com:

  • _ga - distinguishes one visitor from another, and expires after 2 years
  • _ga_* - keeps the analytics session alive, and expires after 2 years

PLT Transfers runs no advertising or remarketing products on this website. The advertising signals that Google Consent Mode defines stay denied permanently, whichever button you press.

Section 3

How we use your data

PLT Transfers uses your data for 4 purposes, and the lawful basis behind each purpose is named below.

  1. Delivering the transfer you booked - the Company passes your name, phone number, route and timing to the assigned driver, on the basis of performing your contract.
  2. Confirming and invoicing the booking - the Company emails your voucher and keeps the accounting record, on the basis of performing your contract and meeting Greek tax law.
  3. Answering your questions - the Company replies to contact-form and custom-request messages, on the basis of its legitimate interest in responding to enquiries.
  4. Measuring how the website is used - the Company reads aggregated GA4 reports, on the basis of the consent you give through the banner.

PLT Transfers sends no marketing email unless you ask for it. The Company runs no automated decision-making and no profiling that produces a legal effect on you.

Section 4

Who we share data with

PLT Transfers shares your data with 4 categories of recipient, and what each recipient receives is described below.

  • The driver assigned to your transfer receives your name, telephone number, passenger count, pickup point and timing, because a driver cannot meet you without them.
  • Cardlink and Eurocommerce, the payment provider of the bank, receive your payment directly on their own hosted page. Your card number is entered on that page and reaches their servers, not this website - pltcrete.com is told only whether the payment was approved or refused.
  • Mailtrap, the email delivery provider, transmits your booking confirmation to your inbox and therefore processes your name and email address.
  • Google, through Google Analytics 4, receives website usage data after you accept analytics cookies.

PLT Transfers sells your personal data to nobody. The Company discloses data to a public authority only where Greek or European law compels the disclosure.

Section 5

How long we keep data

PLT Transfers keeps each type of record only as long as the purpose behind it lasts. PLT Transfers holds your booking record for as long as the transfer, any claim arising from it, and the retention period that Greek tax and accounting law sets for invoices remain live. Contact-form messages are deleted once the enquiry they concern is closed, and analytics data is held for the retention window configured in Google Analytics 4.

Section 6

Your rights

The GDPR gives you 7 rights over the data PLT Transfers holds, and what each right lets you demand is described below.

  1. Access - request a copy of the personal data the Company holds about you.
  2. Rectification - require the Company to correct data that is wrong or incomplete.
  3. Erasure - require deletion of data the Company no longer needs to keep.
  4. Restriction - require the Company to pause processing while a dispute is resolved.
  5. Portability - receive the data you supplied in a machine-readable file.
  6. Objection - object to processing the Company bases on its legitimate interest.
  7. Withdrawal of consent - withdraw analytics consent at any moment, without affecting processing that already took place.

Email info@pltcrete.com to use any of these rights, and the Company answers within the month that the GDPR allows. You may also complain to the Hellenic Data Protection Authority (HDPA), the supervisory authority for Greece, at dpa.gr.

Section 7

Changing your cookie choices

To change the cookies this website may set, there are 2 methods, which are outlined below.

  1. Open the cookie preferences panel with the button below, switch Analytics off or on, and press Save my choices. Your new choice applies immediately, and no page reload is needed.
  2. Delete the cookies for pltcrete.com in your browser settings. The consent banner reappears on your next visit, because deleting cc_cookie erases the record of your earlier answer.

Section 8

Contacting us

Write to info@pltcrete.com with any question about this Privacy Policy. PLT Transfers answers privacy questions from the same address that sends your booking voucher. You can also reach the Company through the contact page or on +30 694 852 8893.

The commercial agreement covering bookings, payments and cancellations is set out in the Terms and Conditions.