Privacy Notice — Passengers

Identity & contact (name, email, phone); booking data (pickup, drop‑off, stops, date/time, passenger & luggage count, vehicle class, flight number, notes you leave the driver); payment references — card details are handled by our processor and we never store full card numbers; communications (ride chat, support, ratings); optional invoice details if you request a τιμολόγιο (company, ΑΦΜ, ΔΟΥ, address); and basic technical/usage data with essential cookies.

To create your account, fulfil your bookings and match you with a driver (performance of a contract); to take payment, issue receipts/invoices and keep tax records via myDATA, and to issue the EIX transport voucher (legal obligation); for safety, fraud prevention and handling complaints and disputes (legitimate interests); and for marketing and non‑essential cookies (your consent, which you can withdraw anytime).

The assigned driver/fleet — only what is needed to perform your ride (name, pickup/drop‑off, flight, notes); our payment processor, hosting, maps and messaging providers, acting as processors under contract; and the tax authority (ΑΑΔΕ/myDATA) and the Ministry transport registry where legally required.

Where a provider processes data outside the EEA (for example our payment processor), transfers are protected by EU Standard Contractual Clauses or an adequacy decision.

Booking and ride records for as long as needed to provide the service and handle disputes; accounting, tax and invoice records for the period required by Greek law; account data while your account is active and for a limited period afterwards.

You may request access, rectification, erasure, restriction and portability, object to processing based on legitimate interests, and withdraw consent — email privacy@aristevo.com.

You may lodge a complaint with the Greek Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα, dpa.gr).

We use automated matching (driver selection by region, vehicle class, proximity and rating) and automated pricing. These do not produce legal effects on you within the meaning of Article 22 GDPR; contact us for human review of any decision.