Legal

Privacy Policy

Last updated: 5 October 2026

1. INTRODUCTION

Athens Six Star Tours respects the privacy of its customers, passengers, Website visitors and other individuals with whom it interacts and is committed to processing personal data lawfully, fairly, transparently and securely.

This Privacy Policy explains how personal data is collected, used, stored, disclosed and otherwise processed in connection with the website athenssixstartours.com (the “Website”) and the transportation, transfer, private tour and related services provided by Athens Six Star Tours.

Personal data is processed in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), applicable Greek data protection legislation and other applicable privacy and electronic communications requirements.

2. DATA CONTROLLER

The controller responsible for the processing of personal data covered by this Privacy Policy is:

KATSANTONIS ARGYRIS & CO. E.E.Trade name: Athens Six Star ToursRegistered office: 15 Kiprou Street, Alimos, GreeceVAT No.: 800943876Competent Tax Authority: Palaio Faliro Tax OfficeTourism Business Registry (MHTE): 0261E60000800201Telephone: +30 211 411 7676Email: info@athenssixstartours.com

For the purposes of this Privacy Policy, the above entity is referred to as “Athens Six Star Tours”, the “Company”, “we”, “us” or “our”.

3. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to personal data processed in connection with:

visits to and use of the Website;
online bookings;
booking enquiries and quotation requests;
airport and port transfers;
private transfers;
private tours and excursions;
hourly vehicle and driver disposal services;
corporate and business transportation;
VIP transportation;
event and special-occasion transportation;
customer service and operational communications;
payment and refund administration;
marketing communications, where applicable;
analytics, advertising and Website performance measurement, where applicable.

4. CATEGORIES OF PERSONAL DATA

The personal data processed depends on the nature of the interaction with Athens Six Star Tours and the service requested.

4.1 Identification and Contact Data

We may process information such as:

first and last name;
telephone number;
email address;
country or other contact information where required;
company or organisation details where a booking is made in a professional capacity.

4.2 Booking and Journey Data

When a transportation service is requested or booked, we may process information such as:

pickup location;
destination;
booking date;
pickup date and time;
number of passengers;
selected service;
selected vehicle category;
luggage information;
special service requirements;
booking reference;
booking status;
additional instructions supplied by the Customer;
information necessary to coordinate the transportation service.

4.3 Flight and Vessel Information

For airport or port transfers, we may process information such as:

flight number;
airline;
scheduled arrival or departure information;
actual arrival or departure information where available;
vessel or ferry information;
terminal or port information.

This information may be used to coordinate pickup and, where applicable, monitor changes affecting the scheduled arrival.

4.4 Passenger Information

A booking may contain information relating to passengers other than the person making the booking.

Depending on the service, this may include:

passenger name;
passenger telephone number;
number of adults and children;
information necessary for child-seat arrangements;
accessibility or other service requirements voluntarily communicated for the purpose of arranging the transportation.

The person making the booking should provide only information that is reasonably necessary for the relevant service.

4.5 Payment and Transaction Data

Where online payment is required, payment transactions may be processed through a third-party payment service provider or financial institution.

Athens Six Star Tours may process transaction-related information such as:

amount paid;
payment status;
transaction reference;
date and time of payment;
refund status;
limited payment-related information supplied by the payment provider.

Full payment-card credentials are not intended to be stored directly by Athens Six Star Tours where payment is processed through an external payment service provider.

The relevant payment provider may process payment information independently in accordance with its own legal obligations and privacy terms.

4.6 Billing and Accounting Data

Where required for invoicing, accounting or tax purposes, we may process information such as:

full name or company name;
billing details;
business address;
VAT or tax identification information;
transaction details;
invoice or receipt information.

4.7 Communications

Where a Customer or other individual contacts us, we may process:

contact details;
the content of the enquiry;
correspondence relating to a booking;
cancellation or amendment requests;
complaints;
customer service communications;
other information voluntarily provided during the communication.

4.8 Corporate Customer Data

For corporate and business relationships, we may process professional information concerning representatives, employees or authorised contacts, including:

name;
professional email address;
professional telephone number;
employer or organisation;
position or role;
booking and billing information;
relevant business correspondence.

4.9 Technical and Website Usage Data

When the Website is used, certain technical information may be processed, such as:

IP address;
device type;
browser type and version;
operating system;
date and time of access;
pages visited;
referral information;
technical logs;
security information;
Website interaction and performance data.

The use of cookies and similar technologies is described separately in the Cookie Policy.

5. SOURCES OF PERSONAL DATA

We generally collect personal data:

directly from the individual;
through the Website and online booking system;
through booking and contact forms;
through telephone, email or other direct communications;
from a person making a booking on behalf of another passenger;
from corporate customers arranging transportation for employees, guests or other passengers;
from travel professionals, hotels or other parties lawfully arranging a service on behalf of a passenger;
from payment service providers in connection with payment status;
from publicly or lawfully available transport information sources where necessary to monitor a flight or other arrival;
automatically through Website infrastructure and permitted cookies or similar technologies.

6. PURPOSES AND LEGAL BASES OF PROCESSING

Athens Six Star Tours processes personal data only where an appropriate legal basis exists.

6.1 Booking and Pre-Contractual Requests

Personal data may be processed to:

respond to enquiries;
provide quotations;
check service availability;
process booking requests;
take steps requested by the Customer before entering into a contract.

The legal basis is generally the taking of steps at the request of the data subject prior to entering into a contract.

6.2 Performance of Transportation Services

Personal data is processed as necessary to:

manage confirmed bookings;
organise pickup;
provide the booked transportation or tour;
allocate appropriate operational resources;
coordinate drivers and vehicles;
communicate with passengers;
manage changes;
provide customer support;
administer cancellations and refunds.

The legal basis is generally the performance of the contract with the Customer.

6.3 Flight and Arrival Monitoring

Where flight information is provided in connection with an airport transfer, it may be used to monitor the relevant arrival or departure and coordinate the service.

This processing is carried out where necessary for the performance of the requested transportation service and, where applicable, for our legitimate interest in providing reliable operational coordination.

6.4 Payments

Transaction information is processed to:

confirm successful payment;
associate payments with bookings;
manage refunds;
investigate payment discrepancies;
maintain appropriate transaction records.

The legal basis may include performance of the contract and compliance with legal obligations.

6.5 Accounting, Tax and Legal Compliance

Personal data may be processed where necessary to comply with:

accounting requirements;
tax obligations;
statutory record-keeping requirements;
lawful requests from competent authorities;
other legal or regulatory obligations.

The legal basis is compliance with a legal obligation.

6.6 Customer Service

Personal data may be processed to respond to questions, complaints, requests, lost-property enquiries and other customer service matters.

Depending on the circumstances, processing may be necessary for performance of the contract or based on the legitimate interests of Athens Six Star Tours in managing customer relations and addressing service-related issues.

6.7 Establishment, Exercise or Defence of Legal Claims

Information may be retained and processed where necessary to establish, exercise or defend legal claims, resolve disputes or protect the lawful rights and interests of Athens Six Star Tours, its customers or third parties.

Such processing is based on applicable legal obligations or legitimate interests, as appropriate.

6.8 Website and Information Security

Technical information may be processed for:

maintaining Website security;
preventing fraud or misuse;
detecting malicious activity;
protecting systems and infrastructure;
diagnosing technical problems;
maintaining appropriate technical logs.

This processing is based on the legitimate interest of Athens Six Star Tours in maintaining secure and reliable digital services.

7. BOOKINGS MADE FOR OTHER PASSENGERS

A person making a booking may provide personal data concerning one or more other passengers.

The person making the booking should ensure that they are authorised to provide the information required to arrange the service and that the relevant passenger is appropriately informed about the processing of their data.

Only information reasonably necessary for arranging and providing the requested service should be provided.

8. SPECIAL REQUESTS AND SENSITIVE INFORMATION

Customers should avoid providing sensitive personal information unless it is genuinely necessary for the requested transportation service.

In certain circumstances, a Passenger may voluntarily communicate information relating to accessibility, mobility or another requirement that may reveal information concerning health.

Where such information constitutes special-category personal data, it will be processed only where an appropriate legal basis and applicable condition for processing exist, including where the individual has explicitly requested arrangements requiring the use of that information.

Such information should be limited to what is necessary to provide the requested assistance.

9. DRIVERS AND OPERATIONAL PERSONNEL

Information necessary to perform a booking may be made available to the driver or other authorised operational personnel responsible for providing or coordinating the service.

This may include, depending on the booking:

Passenger name;
telephone number;
pickup and destination information;
date and time;
flight or vessel information;
number of passengers;
relevant service instructions.

Only information reasonably necessary for the performance and coordination of the service should be provided.

10. RECIPIENTS OF PERSONAL DATA

Depending on the circumstances, personal data may be accessible or disclosed to:

authorised employees and personnel of Athens Six Star Tours;
drivers and operational personnel involved in providing the service;
IT, hosting and technical support providers;
booking-system providers;
payment service providers and financial institutions;
email and communications service providers;
accounting and tax advisers;
legal advisers and other professional advisers;
analytics and advertising providers where the relevant technologies are lawfully enabled;
competent administrative, tax, judicial, police or other public authorities where disclosure is legally required;
other service providers where necessary for the performance of the requested service.

Where a service provider acts as a processor on behalf of Athens Six Star Tours, appropriate contractual and organisational safeguards are applied in accordance with applicable data protection law.

11. PAYMENT PROCESSING

Online payment services may be provided through independent payment service providers.

Payment-card information entered into a secure payment environment may be transmitted directly to the relevant payment provider rather than stored by Athens Six Star Tours.

Athens Six Star Tours may receive limited transaction information necessary to determine whether payment was successful and to administer the booking, accounting records or refund.

Where a payment provider acts as an independent controller for certain processing activities, its processing is governed by its own privacy information and applicable regulatory obligations.

12. MARKETING COMMUNICATIONS

Athens Six Star Tours may send news, offers or other marketing communications where this is permitted by applicable law.

Where prior consent is required, marketing communications are sent only after the individual has provided valid consent.

Marketing consent is separate from acceptance of the Terms & Conditions and is not a condition for completing a transportation booking.

Consent may be withdrawn at any time.

Where marketing emails include an unsubscribe function, the recipient may use it to stop future marketing communications through that channel.

Withdrawal of marketing consent does not affect operational communications necessary to manage an existing booking or customer relationship.

13. ANALYTICS AND ADVERTISING

The Website may use analytics, conversion measurement, advertising or similar technologies provided by third parties.

These technologies may be used to:

measure Website traffic;
understand Website usage;
evaluate Website performance;
measure booking conversions;
measure advertising campaign effectiveness;
improve digital marketing;
provide or measure personalised advertising where applicable.

Where the relevant technologies require prior consent, they are activated only after the user has provided the required consent through the Website’s cookie consent mechanism.

Further information is provided in the Cookie Policy.

14. INTERNATIONAL DATA TRANSFERS

Certain technology, cloud, communications, analytics, advertising or other service providers may operate outside the European Economic Area or use group companies, infrastructure or subprocessors located outside the European Economic Area.

Where personal data is transferred outside the European Economic Area, Athens Six Star Tours takes appropriate steps to ensure that the transfer complies with applicable data protection law.

Depending on the circumstances, this may include reliance on:

an applicable adequacy decision;
approved Standard Contractual Clauses;
supplementary technical or organisational safeguards;
another legally recognised transfer mechanism.

15. DATA RETENTION

Personal data is retained only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.

Retention periods are determined by taking into account:

the nature of the information;
the purpose for which it was collected;
whether a booking was completed;
the duration of the customer or contractual relationship;
tax and accounting requirements;
statutory record-keeping obligations;
applicable limitation periods;
potential legal claims or disputes;
security requirements;
marketing consent status, where applicable.

Booking, transaction, invoice and other records subject to statutory retention obligations may therefore be retained after completion of the transportation service.

Where information is no longer required, it is deleted, anonymised or otherwise removed from active use in accordance with applicable retention procedures.

16. DATA SECURITY

Athens Six Star Tours implements appropriate technical and organisational measures designed to protect personal data against:

accidental or unlawful destruction;
loss;
alteration;
unauthorised disclosure;
unauthorised access;
other unlawful processing.

Measures are selected taking into account the nature and context of the processing, the available technology and the risks associated with the relevant data.

Access to personal data is limited according to operational necessity and appropriate access controls.

No internet transmission or information system can, however, be guaranteed to be completely free from security risk.

17. DATA ACCURACY

Customers are responsible for providing accurate and up-to-date information, particularly where the information is required to perform a transportation service.

Customers should inform Athens Six Star Tours promptly if important booking or contact information changes.

Athens Six Star Tours may take reasonable steps to correct information that is found to be inaccurate.

18. MANDATORY AND OPTIONAL INFORMATION

Certain information is required in order to process a booking and provide the requested service.

Where mandatory information is not provided, Athens Six Star Tours may be unable to:

process the booking;
arrange the requested pickup;
contact the Passenger;
process payment;
issue required transaction documents;
provide the requested transportation service.

Optional information does not need to be provided unless the Customer wishes to use the related functionality or service.

19. AUTOMATED DECISION-MAKING

Athens Six Star Tours does not use the Website booking process to make decisions based solely on automated processing that produce legal effects concerning an individual or similarly significantly affect that individual, unless specifically disclosed and lawfully implemented.

Automated technical processes may nevertheless be used for ordinary functions such as booking calculations, availability handling, payment processing, security checks, analytics or Website operation.

20. RIGHTS OF DATA SUBJECTS

Subject to the requirements and limitations of applicable data protection law, individuals have the following rights in relation to their personal data.

Right of access: You may request confirmation as to whether personal data concerning you is being processed and obtain access to the relevant information.

Right to rectification: You may request correction of inaccurate personal data or completion of incomplete information.

Right to erasure: You may request deletion of personal data where the applicable legal conditions are satisfied.

Right to restriction: You may request restriction of processing in circumstances provided by law.

Right to data portability: Where the relevant legal requirements are met, you may request personal data in a structured, commonly used and machine-readable format and, where technically feasible, request its transmission to another controller.

Right to object: Where processing is based on legitimate interests, you may object on grounds relating to your particular situation, subject to the conditions provided by law.

Where personal data is processed for direct marketing purposes, you may object to such processing at any time.

Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

These rights are not absolute and may be subject to exceptions or limitations provided by applicable law.

21. EXERCISING YOUR RIGHTS

Requests relating to personal data or the exercise of data protection rights may be submitted to:

info@athenssixstartours.com

The request should provide sufficient information to identify the relevant processing and the right the individual wishes to exercise.

Where there are reasonable doubts concerning the identity of the person making a request, Athens Six Star Tours may request additional information reasonably necessary to verify identity and protect personal data against unauthorised disclosure.

Requests are handled within the time limits provided by applicable data protection law.

The exercise of data protection rights is generally free of charge. Where a request is manifestly unfounded or excessive, the measures permitted by applicable law may be applied.

22. RIGHT TO LODGE A COMPLAINT

Individuals have the right to lodge a complaint with the competent data protection supervisory authority if they believe that the processing of their personal data infringes applicable data protection law.

In Greece, the competent supervisory authority is the Hellenic Data Protection Authority.

The right to lodge a complaint is without prejudice to any other administrative or judicial remedy available under applicable law.

23. CHILDREN’S DATA

The Website and transportation booking services are intended to be used by adults capable of entering into the relevant booking arrangement.

Information concerning children may nevertheless be processed where they are passengers included in a booking, for example where the number and age category of children is necessary for lawful and safe transportation or for arranging an appropriate child seat.

Only information reasonably necessary for the transportation service should be provided.

Athens Six Star Tours does not use information concerning child passengers for independent marketing purposes merely because the child is included in a transportation booking.

24. COOKIES AND SIMILAR TECHNOLOGIES

The Website uses or may use cookies and similar technologies for purposes such as:

essential Website functionality;
security;
storage of user preferences;
analytics;
performance measurement;
conversion tracking;
advertising.

Strictly necessary technologies may be used where required for the Website or a service requested by the user.

Non-essential analytics, advertising and similar tracking technologies that require consent are activated only after the user has provided the relevant consent.

Further information is provided in the Cookie Policy.

25. THIRD-PARTY WEBSITES AND SERVICES

The Website may contain links to independent third-party websites or services.

This Privacy Policy applies to processing for which Athens Six Star Tours acts as controller and does not govern independent processing carried out by third parties.

Users should review the privacy information of the relevant third party before providing personal data directly to that party.

26. CHANGES TO THIS PRIVACY POLICY

Athens Six Star Tours may update this Privacy Policy to reflect changes in:

applicable legislation;
its services;
the Website;
booking functionality;
technology providers;
processing activities.

The current version will be made available through the Website and will indicate the date of the latest update.

Where a change materially affects the processing of personal data, appropriate additional notice will be provided where required by law.

27. CONTACT

For questions concerning this Privacy Policy, the processing of personal data or the exercise of data protection rights, please contact: