Introduction
Autotour rhodes is committed to protecting your personal data and ensuring its confidentiality. This Privacy Policy outlines how we collect, use, process, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable legal frameworks.

Information We Collect
To provide our services, we collect personal data such as:

• Name
• Address
• Phone number
• Email address
• Payment details (e.g., credit card number)
• Identity verification information
• Reservation or rental details
• Sensitive data (such as health information) when required, with your explicit consent.

Purposes of Data Processing
Your personal data is processed for the following purposes:

• Provision and management of motorcycle rental services
• Processing reservations and payments
• Communicating with you for customer service purposes
• Ensuring the security of the service and the business
• Compliance with legal obligations (e.g., tax, accounting)
• Improving our services through data analysis.

Legal Bases for Processing
The processing of your personal data is based on one or more of the following legal grounds:

• The performance of a contract (e.g., for providing rental services)
• Compliance with legal obligations
• Your consent (e.g., for processing sensitive data)
• Our legitimate interests (e.g., for security purposes, improving services).

Consent
When processing your personal data is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Rights of Data Subjects
You have the right to:

• Request access to your personal data.
• Request correction or updating of your data.
• Request the deletion of your data (“right to be forgotten”), provided there are no legal grounds requiring us to retain it.
• Request restriction of the processing of your data.
• Object to the processing of your data on grounds of legitimate interests.
• Request the portability of your data.

To exercise your rights, please contact us at nikkri@gmail.com or via the contact form on our website. We will respond to your request within 30 days.

Sharing Data with Third Parties
We may share your personal data with third-party service providers (e.g., payment processors, data analysis services) who may have access to personal data solely for the purpose of providing their services. These third parties are required to comply with GDPR provisions. Additionally, personal data may be shared with relevant authorities when required by law.

Data Transfers Outside the EU
In the event that personal data is transferred to countries outside the EU, we ensure that adequate safeguards are in place to protect the data, such as the use of standard contractual clauses approved by the EU, to ensure that the data remains protected in compliance with data protection laws.

Data Retention
We will retain your personal data for as long as necessary to fulfill the purposes of processing and to meet legal obligations. The retention period depends on the nature of the service and legal requirements (e.g., tax obligations, invoice retention).

Cookies
Our website uses cookies to improve your experience and collect anonymous data about your browsing activities. You can manage or reject the use of cookies through your browser settings. For more information, please refer to our Cookie Policy.

Changes to the Privacy Policy
We reserve the right to modify this Privacy Policy at any time. In case of significant changes, we will inform you via email or by posting an update on our website. We recommend regularly reviewing this Policy for any changes.

Contact Information
If you have any questions or clarifications regarding this Privacy Policy or the processing of your personal data, please contact us at
nikkri@gmail.com .