Privacy Policy

1. Who We Are

MARETRANSFERS is operated by MILOJEVIC MARKO, a sole proprietor based in Kato Gouves, Heraklion, Crete, Greece.

Marko Milojevic is the data controller responsible for the processing of personal data described in this policy.

For privacy-related enquiries, contact info@maretransfers.com.

2. Information We Collect

When you request a quotation or arrange a transfer, we collect the information needed to assess and manage your request.

This includes your name, email address, telephone number, journey date and time, passenger numbers, pickup and destination details.

Depending on the requested service, we may also collect return journey information, addresses or map links, luggage requirements, flight or ferry details, child-seat requirements and additional instructions.

Please avoid including unnecessary sensitive information in free-text fields.

We also maintain enquiry references, timestamps, booking and operational status, relevant communication dates and administrative records.

For website security and abuse prevention, technical information may be processed, including IP-related information, verification tokens and security signals. The application uses an IP-derived hash for request rate limiting rather than deliberately storing raw visitor IP addresses in its enquiry database.

3. How and Why We Use Your Information

We process personal information to:

• Respond to enquiries and prepare quotations.
• Confirm, arrange and provide agreed services.
• Communicate relevant journey and reservation information.
• Protect our website and systems against misuse.
• Maintain records required by applicable law.
• Manage complaints, disputes and justified legal claims.

Enquiry handling and the performance of agreed services generally rely on Article 6(1)(b) GDPR.

Security and certain operational activities may rely on legitimate interests under Article 6(1)(f), subject to the applicable assessment.

Where processing is required to comply with a legal obligation, Article 6(1)(c) may apply.

Acknowledging this Privacy Policy does not constitute consent to unrelated marketing.

4. Who Receives Your Information

Customer information is accessible to authorized persons responsible for managing MARETRANSFERS enquiries and services.

We use the following external services:

• Cloudflare: Website infrastructure, database services and security verification.
• Resend: Operational email notifications.
• Telegram: Operational notifications to the designated operator.
• Zoho Mail: Business email correspondence.

Operational email notifications sent through Resend may contain customer contact information, journey details and additional requirements submitted with an enquiry.

Under the v68 notification design, new Telegram notifications contain the enquiry reference, notification type and an instruction to review the enquiry through the authenticated operator interface. Customer contact and journey details are excluded from these new Telegram notifications. Earlier messages are not affected by this change.

Information may also be shared where necessary to provide an agreed service or comply with a legal obligation.

5. International Data Transfers

Some of our service providers may process personal information outside the European Economic Area.

In particular, Resend's published documentation identifies the United States as a location where customer data is stored.

Cloudflare, Zoho and Telegram may also involve processing in different jurisdictions, depending on the service and applicable arrangements.

Where required by data protection law, international transfers must be supported by an appropriate legal mechanism and relevant safeguards.

For information about the safeguards applicable to your personal data, please contact info@maretransfers.com.

6. Cookies and Website Security

The website uses security measures, including Cloudflare Turnstile, to protect the enquiry process against automated submissions and misuse.

Hosting, authentication and security services may process technical connection data and use cookies or similar technologies.

The reviewed application source does not include active advertising or third-party analytics scripts.

The specific cookies and browser-storage technologies used in the operating website depend on its deployed configuration.

7. Data Retention

We retain personal information according to the purpose of processing, the status of the enquiry or reservation and applicable legal requirements.

For certain enquiries expressly closed without a booking, our internal system calculates eligibility for retention review after 90 calendar days from the later of the recorded closure date and the last substantive communication date.

This is a review threshold, not an automatic deletion deadline.

Records may be retained where necessary for ongoing arrangements, legal obligations, unresolved matters or justified claims.

Information held in business correspondence, notification services and backups may be subject to separate retention arrangements.

Requests for erasure are assessed individually in accordance with applicable data protection law.

8. Your Rights

Subject to applicable conditions and exceptions, you may request access to, correction or erasure of your personal data, restriction of processing or data portability.

You may object to processing based on legitimate interests and withdraw consent where consent is the applicable legal basis.

To exercise your rights, contact info@maretransfers.com. We will respond within the periods required by applicable law.

You may also lodge a complaint with a competent supervisory authority, including the Hellenic Data Protection Authority where applicable.

9. External Websites

Our website may contain links to third-party services, including WhatsApp, Facebook, Instagram and Google Maps.

When you access those services, their own privacy practices may apply.

10. Policy Updates

We may update this Privacy Policy to reflect changes in our services, processing activities or legal requirements.

The published version will display its effective date.