Privacy Policy

Last updated: September 2026

CM Cars ("we", "us", "our") is committed to fully protecting the privacy and personal data of its visitors and customers. This Privacy Policy clearly outlines what data we collect, how we manage it, and how we safeguard it when you visit our website https://cm-cars.eu or make a vehicle reservation.

1. Data We Collect

In the context of providing vehicle rental services, we collect and process only the necessary personal data:

• Identity & Driving Details: Full name, Greek ID card or passport number, driving license details (number, date of issue, issuing country, International Driving Permit where required), and driver's age.
• Contact Information: Email address, phone number, and country/residential address.
• Transaction & Payment Details: Credit card details (exclusively for rental guarantee purposes and the processing/clearing of payments or deposits through a secure banking gateway).
• Technical Data: IP address, browsing data, access dates and times, and cookies essential for the operation of the booking system.

2. How We Collect Your Data

Personal data is collected:

• Directly from you when submitting an online booking or contact form on our website.
• Upon vehicle delivery/collection and the signing of the physical rental agreement.
• Through automated technologies (cookies) while browsing the website.
• Via telephone or email communication with us.

3. Purposes of Data Processing

We use your data exclusively for the following purposes:

• Processing, confirming, and executing vehicle reservations and rental contracts.
• Communicating regarding vehicle delivery, return, or any modifications to the booking.
• Issuing statutory tax documents (receipts, invoices).
• Managing traffic violations, administrative fines, or road traffic accidents.
• Providing roadside assistance services during the rental period.

4. Legal Basis for Processing

The processing of your personal data is based on the following legal grounds pursuant to the General Data Protection Regulation (GDPR):

• Performance of a Contract: Processing is necessary for concluding and executing the vehicle rental agreement.
• Legal Obligation: Compliance with statutory requirements under Greek tax legislation and Ministry of Transport regulations.
• Legitimate Interests: Protecting company property (vehicles) and managing civil liability claims in cases of accidents or damages.
• Consent: Where explicitly required (e.g., acceptance of non-essential cookies).

5. Data Sharing with Third Parties

CM Cars does not sell, lease, or trade your personal data to third parties for commercial purposes. Data disclosure occurs solely to:

• Partner insurance companies and claims adjusters in the event of an accident or damage.
• Banking institutions for the secure processing and settlement of transactions.
• Competent Public Authorities (Traffic Police, Police Authorities, Tax Authorities, Judicial Authorities) when strictly required by law (e.g., assignment of traffic fines).
• Technical service providers (web hosting, IT support) who are fully bound by confidentiality agreements and the GDPR.

6. Data Retention Period

Your personal data is retained only for as long as strictly necessary to fulfill the rental service, as well as for the period required by applicable tax and commercial law for maintaining accounting records and contract archives.

7. Your Rights (GDPR)

As a data subject, you hold the following statutory rights:

• Right of Access: To know what personal data we hold about you and how it is processed.
• Right to Rectification: To request the correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): To request the deletion of your personal data, provided there is no conflicting legal obligation requiring its retention (e.g., tax records).
• Right to Restriction & Object: To restrict or object to the processing of your personal data.
• Right to Data Portability: To receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: You have the right to file a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

8. Data Controller Contact Details

For any inquiries, clarifications, or to exercise your data protection rights, you can contact us directly:

CM Cars
Address: 25 Salaminomachon St., Paloukia, P.C. 189 00, Greece
G.E.MI. (Commercial Registry) No.: 186350508000
Mobile Phone: 6909459689
Email: info@cm-cars.eu
Website: https://cm-cars.eu