Personal Data Protection Policy of the website (website) www.instacar.gr
Introduction
This Personal Data Protection Policy (hereinafter the “Personal Data Protection Policy” or “PDPP”) concerns the website of “INSTACAR S.A.” (hereinafter “Instacar”). Instacar is the beneficiary of all rights to this website (hereinafter “the website”) with the domain name: www.instacar.gr as well as any sub-domain thereof.
Instacar attaches particular importance to the protection of personal data. For this reason, it has prepared this Personal Data Protection Policy, in order to inform visitors to the website about the way in which their personal data collected during the use of this website is processed.
Data Controller
The Société Anonyme with the name “INSTACAR S.A.” and the distinctive title “INSTACAR S.A., headquartered in Kifissia, Attica, on Palaia Tatoiou Street, number 165C, with Tax Identification Number 801141110 and Tax Registration Number 150045801000.
In particular, for the the sub-domain Instacar- Micromobility, Société Anonyme with the name "KINEO SINGLE MEMBER SOCIETE ANONYME" and the distinctive title "KINEO S.M.S.A.", which is headquartered in Kifissia, Attica, at Palaia Tatoiou Street, number 165C, with TIN number 801476118 and General Commercial Registry number 157623201000, with trading name "Micromobility" acts as Data Controller.
Collection of Personal Data
Instacar collects your personal data when you visit its website and if:
- you interact with it, or
- you complete standard contact pages (forms), or
- you create a user profile (customer card) for the purposes of concluding and executing rental and sales contracts with Instacar or Micromobility.
The characteristics of the processing carried out within the framework of the website's operation are the following:
Landing Page
Purpose of Processing Personal Data we collect Legal basis for processing Period of retention of personal data 1. Presentation and promotion of the Company's products, better service to users/visitors, improvement of the website's visibility. Internet protocol (IP) address, cookies, details about your browser and operating system, browser type, basic server connection information, information collected through software, such as html cookies, flash cookies, and other similar technologies. The processing is necessary for taking measures at the pre-contractual stage (art. 6 par. 1 lit. b GDPR). The data is kept during your visit to our website, except for your personal data which is stored in cookies in accordance with the provisions of the relevant Policy. 2. Creation of a user account (customer profile). Name, surname, email address, contact telephone number. Processing is necessary to take steps at the pre-contractual stage or to perform the sales contract (Article 6(1)(b) GDPR). Your personal data will be kept until you delete your account. In any case, they will be deleted 5 years after your last action in the context of managing your account. 3. Management of queries and requests submitted by website visitors via the standard contact page (form). Name, surname, email address, contact telephone number and any other personal data may be entered by the user in the message field contained in the contact form. The legal basis for processing depends on the nature of the respective question-request. If a question is submitted by a customer, the legal basis is the execution of the contract between us (Article 6, paragraph 1, subparagraph b, lit. a of the GDPR). If a question is submitted by a prospective customer, the legal basis is the taking of measures at the pre-contractual stage (Article 6, paragraph 1, subparagraph b, lit. b of the GDPR). In any other case, the legal basis for processing is the fulfillment of the legitimate interests pursued by the Company (Article 6(1)(f) of the GDPR): serving users and visitors. We retain your personal data until we have fully satisfied your request. If the request is by its nature linked to a legal claim, then the retention period for your personal data will be determined by the relevant legislation. 4. Newsletter subscription (newsletter). Email address. Subject's consent (Article 6, paragraph 1, lit a GDPR). We retain your personal data until you unsubscribe. Sub-domain page (Registered Account)
Purpose of Processing Personal Data we collect Legal basis for processing Period of retention of personal data 1. Creation and management of the user account in the context of applying for and managing a vehicle rental or sale request. 1) Date of Birth, Driver's License Number, License Issue Date, Copy of driver's license, copy of ID card, financial documents, details of any offers you have applied for.
2) In case you register third parties as drivers for your vehicle, we keep the following data: Name, Date of Birth, Driving License Number, Date of License Issue.The processing is necessary for taking measures at the pre-contractual stage or for the execution of the sales contract (art. 6 par. 1 point b GDPR), as well as the fulfillment of the legitimate interests pursuant to the Company (art. 6 par. 1 point f GDPR). We keep your personal data for a period of 5 years, from the date of your contractual relationship with the company.
To whom do we disclose your personal data
Instacar may disclose your personal data to the following categories of recipients:
- To our competent and authorized employees,
- To entities assigned to perform specific tasks on behalf of our Company such as, but not limited to, providers of IT products and/or services and/or support of all types of information and electronic systems and networks, providers of website analysis products/services, administrative support companies, marketing companies, accountants, lawyers,
- To third parties who undertake to provide you with services on our behalf, such as, but not limited to, courier companies.
Confidentiality
Both Instacar's competent executives and third parties who process personal data on behalf of Instacar are committed to maintaining confidentiality and secrecy and, in general, to comply with the legal framework for the protection of personal data.
Rights of Data Subjects
You can exercise the following rights regarding your personal data:
Right of access
You have the right to be informed about whether we are processing your personal data and, if so, you can request to be informed about the purpose of the processing, the type of data that is processed, the recipients of these, the storage period, if automated decision-making is used.
Right to rectification
You have the right to request Instacar to correct inaccurate or complete incomplete personal data concerning you. Instacar undertakes to communicate any correction of personal data to each recipient to whom the personal data were disclosed, unless this proves impossible or involves a disproportionate effort.
Right to erasure
You have the right to request Instacar to delete personal data concerning you if they are no longer necessary for the above-mentioned processing purposes and under the conditions of art. 17 GDPR.
Right to restriction of processing
You have the right to request Instacar to restrict the processing of your personal data concerning you, under the conditions of art. 18 GDPR.
Right to data portability
You have the right, under the conditions of art. 20 GDPR, to receive the personal data concerning you which you have provided to Instacar in a structured, commonly used and machine-readable format.
Right to object
You have the right to object at any time and for reasons relating to your particular situation to the processing of your personal data, under the conditions of art. 21 GDPR. Instacar guarantees that, if you object to the processing of data concerning you, it will no longer process such data, unless it demonstrates compelling legitimate grounds for the processing which override your interests and rights.
Right to withdraw consent
In cases where the processing of your personal data is based on your consent, you may withdraw it at any time.
Automated individual decision-making, including profiling
Instacar does not carry out automated individual decision-making. However, in any case and if in the future it proceeds with automated individual decision-making, the Data Subject has the right to object to a decision based solely on automated processing, including profiling, where such decision produces legal effects concerning him or her or significantly affects him or her.
Overall, Instacar ensures that:
There are procedures in place that allow the easy exercise of the rights of the Data Subjects, so that all required actions are initiated immediately.
It will respond to a request submitted by you without undue delay and in any case not later than thirty (30) calendar days. The deadline may be extended by two months if Instacar considers the request to be complex or the number of requests is large.
In the event that it cannot satisfy a right exercised by you, Instacar ensures that specific, adequate and complete justification is provided.
Except in cases of manifestly unfounded or excessive requests, all actions concerning issues of satisfaction of the rights of the Data Subjects will be carried out free of charge (free of charge) for the Subjects.
To exercise the above rights, you can submit a written request to the following email address: [email protected].
Where do we collect your data from
We collect your data from you as customers-consumers or from third parties, in case the recipient of the product is a different person from the customer-user of the website. In this case, the user responsibly declares to Instacar that he has the express consent of this third party, for the submission and registration of the necessary personal data that will allow the execution of the order, especially the invoicing in favor of a third party, and / or the delivery of the order to his name and address (with registration and contact telephone number).
Right to submit a complaint to a Supervisory Authority
In case you consider that the processing of your personal data violates the applicable regulatory framework for the protection of personal data, you have the right to file a complaint with the Personal Data Protection Authority (postal address 1-3 Kifissias Avenue, P.C. 115 23, Athens, tel. 210. 6475600, e-mail address (e-mail) [email protected].
Amendment of this policy
Instacar reserves the right, when it deems it appropriate, to amend this Policy, either in whole or in part, and to post such amendment on this website. Any amendment to this Policy will be effective immediately upon posting on its website. Users are advised to consult this document periodically to ensure that they are aware of the most recent version.
September 2025