Privacy Notice — Drivers

Identity & contact (name, photo, date of birth, phone, email); compliance and professional data (driving and EIX/EDX licences, ΚΤΕΟ, medical certificate, and — where required by transport law — a criminal‑record certificate); your assigned vehicle and the rides you receive and perform; live GPS during active rides (pickup to drop‑off); ratings and reputation; payout data (bank/IBAN, earnings, invoices via myDATA); and ride‑chat and support messages.

Health (medical certificate) and criminal‑record data are special categories under Articles 9–10 GDPR. We process them only for the suitability check required by transport law, with appropriate safeguards, and we do not use them for any other purpose.

To provide the platform, present offers and enable assignment and dispatch (performance of a contract); to verify licences and eligibility, maintain the EIX registry and meet transport‑law and tax obligations (legal obligation); to use live GPS for dispatch, safety and dispute resolution, and for service quality and fraud prevention (legitimate interests); and to make payouts and keep tax records (legal obligation and contract).

Passengers — limited identity (name, photo, vehicle, live location) from the moment you set off; your fleet, for dispatch and management; our payment, hosting, maps and messaging providers, as processors; and the Ministry registry and the tax authority (ΑΑΔΕ/myDATA) as legally required.

The GPS trip trail is retained for 7 days; compliance documents while you are active and as the law requires; payout and tax records for the period required by Greek law; account data while active and for a limited period afterwards.

Access, rectification, erasure, restriction, portability, objection and withdrawal of consent — privacy@aristevo.com. Some data we are legally required to keep (for example tax and transport records).

You may lodge a complaint with the Greek Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα, dpa.gr).

Offers are matched and ranked by region, vehicle class, proximity and rating. This does not produce legal effects within the meaning of Article 22 GDPR; contact us for human review.