Privacy Policy
Last updated: 25 October 2026 · Ελληνικά
This policy explains how Unlock Travel (Rhodes, Greece) handles personal data when you use the website unlocktravel.eu, the customer app Unlock Travel and the partner/driver app Unlock Partner, together with the dashboard at app.unlocktravel.eu. We act as the data controller under the EU General Data Protection Regulation (GDPR).
1. What we collect and why
Customers (website and Unlock Travel app)
- Booking details: name, phone, email, pick-up and drop-off addresses, date and time, passengers, luggage, flight or ship number, notes. Used to carry out your transfer, tour or rental and to contact you about it.
- Location (optional): only if you allow it. Used to fill in “My location” as the pick-up point and, while a driver is assigned or on the way, to show your driver where you are. It is not tracked in the background and it is deleted from the booking as soon as you are picked up, or the booking is cancelled or completed.
- Notifications (app): a device token so we can send you updates about your bookings (confirmed, driver assigned, on the way, completed). You can turn notifications off in your phone settings.
- Payments: card payments are handled by Stripe. We never see or store your full card number.
- Trips on this device: a booking key is stored in your browser or app so “My trips” can show your bookings. It stays on your device.
- Ratings you choose to give after a trip.
Partners and drivers (Unlock Partner app and dashboard)
- Account: name, email, phone and password (stored only as a secure hash). For companies: company name, tax and licence details needed for transfer contracts, vehicles (plate, make, model), bank details for payouts.
- Location, including in the background: Unlock Partner collects location data so the office and the customer can see where the driver is during a ride, even when the app is closed or not in use. Location is sent only while the driver is on shift or on a ride and stops when the driver goes off shift. It is also recorded at pick-up and drop-off as proof of service.
- Ride records: jobs, statuses, payments collected, contracts. These are kept as legally required records.
- Device: a device identifier (one phone per driver account) and a notification token.
2. Legal basis
Performing the contract you request (bookings, partner work), our legal obligations (transport contracts, tax and accounting records), our legitimate interests (security, fraud and spam prevention, service quality) and your consent (location on the customer side, notifications), which you can withdraw at any time.
3. Who we share data with
Only what is needed for each job:
- The driver and partner company carrying out your booking receive the booking details, and your live location if you share it.
- Authorities where the law requires it (for example, the Greek transport contract register).
- Service providers who process data on our behalf:
Provider Purpose Supabase Database and user accounts Vercel, Netlify Hosting of the dashboard and the website Stripe Card payments Google (Maps Platform, Firebase Cloud Messaging) Maps, address search, routes, push notifications Cloudflare (Turnstile) Protection of booking forms against bots Resend Booking and account emails
We do not sell personal data and we do not use it for advertising. Some providers may process data outside the EU under the safeguards of the GDPR (such as Standard Contractual Clauses).
4. How long we keep data
- Customer live location: deleted at pick-up, cancellation or completion.
- Driver location history: kept only as long as needed to run and check rides.
- Booking, contract and payment records: as long as Greek tax and transport law requires.
- Accounts: until you delete them (see below).
5. Your rights
You can ask for access, correction, deletion, restriction, portability, or object to processing. You can also complain to the Hellenic Data Protection Authority (www.dpa.gr).
6. Deleting your account or data
Drivers and partners can delete their account in the app (Unlock Partner → bottom of the jobs screen → “Delete account”) or in the dashboard (Settings → Accounts & passwords). Anyone can also ask for deletion on unlocktravel.eu/delete-account. Ride and payment records that the law requires us to keep are retained for the legal period and then deleted.
7. Security
Data travels encrypted (HTTPS). Access is limited by role: each company sees only its own bookings and drivers. Passwords are never stored in plain text and owners can enable two-step verification.
8. Children
Our services are not directed to children under 16. Bookings for minors must be made by an adult.
9. Contact
Unlock Travel, Rhodes, Greece · WhatsApp / phone: +30 694 903 5603
We may update this policy. The date at the top shows the latest version.
Πολιτική Απορρήτου (σύνοψη στα ελληνικά)
- Πελάτες: στοιχεία κράτησης (όνομα, τηλέφωνο, email, διευθύνσεις, ώρα, πτήση), προαιρετικά η τοποθεσία σου για «My location» και για να σε βρει ο οδηγός όσο έρχεται. Η τοποθεσία σβήνεται μόλις γίνει η παραλαβή, η ακύρωση ή η ολοκλήρωση. Πληρωμές μέσω Stripe: δεν βλέπουμε την κάρτα σου.
- Οδηγοί/συνεργάτες: λογαριασμός (όνομα, email, τηλέφωνο), στοιχεία εταιρείας και οχημάτων. Το Unlock Partner συλλέγει την τοποθεσία, και όταν η εφαρμογή είναι κλειστή, μόνο όσο ο οδηγός είναι σε βάρδια ή σε διαδρομή, ώστε το γραφείο και ο πελάτης να βλέπουν πού βρίσκεται.
- Δίνουμε μόνο ό,τι χρειάζεται στον οδηγό/εταιρεία της κράτησης, στις αρχές όπου το απαιτεί ο νόμος και στους παρόχους του πίνακα. Δεν πουλάμε δεδομένα.
- Διαγραφή λογαριασμού: μέσα στο app ή στη σελίδα unlocktravel.eu/delete-account. Δικαιώματα GDPR και καταγγελία στην Αρχή Προστασίας Δεδομένων.
- Επικοινωνία: WhatsApp / τηλέφωνο +30 694 903 5603.