Privacy Policy

This page is maintained by Miraz-Rentals and explains what personal data we handle when you book a car with us.

Last updated: July 2026

Who we are

Miraz-Rentals, Anaxos Skoutarou 811 09, Lesvos, Greece. Phone +30 2253 042153. We are the data controller for the information described below.

What we collect

Booking data: full name, email address, phone number, driving licence number, chosen vehicle, pickup and return locations and dates, selected extras and the total price.

Online check-in data: a photo of your driving licence and your confirmation of the rental terms.

Payment data: processed directly by Stripe. We receive only a payment status and a transaction reference — never your card number.

Why we use it

To create and manage your reservation, verify that you are entitled to drive the vehicle, send booking confirmations and service emails, comply with Greek rental and tax law, and handle damage or insurance claims.

Who processes data for us

Stripe (payment processing), Resend (transactional email delivery), and our cloud hosting and database provider, which stores booking records and licence photos in a private, access-restricted bucket. Each acts as a processor under contract with us.

How long we keep it

Booking records are retained for the period required by Greek tax and accounting rules. Driving licence photos uploaded at online check-in are deleted after the rental is completed and any claim period has passed.

Cookies

We use essential cookies and local storage to keep your language choice, your booking in progress and your cookie preference. Optional cookies are only set after you accept them in the banner, and you can change your mind by clearing your browser storage.

Your GDPR rights

You can request access to, correction of, deletion of, or a copy of your personal data, and object to or restrict its processing. Email us with your booking reference and we will respond within 30 days. You also have the right to complain to the Hellenic Data Protection Authority.

Security

Data is transmitted over encrypted connections, payments are handled by a PCI-compliant provider, and licence photos are stored in a private bucket that is not publicly accessible. No system is perfectly secure, so we also limit access to booking data to the people who need it to serve you.