Privacy Policy

1. Data controller

LocalRentals
Zakynthos, Greece · Ζάκυνθος, Ελλάδα
Email: infolocalrentals@gmail.com

2. Nature of the platform

LocalRentals.gr (LocalRentals) is a price comparison and advertising platform. We are not a rental provider, we do not handle rental payments, and we do not create visitor profiles or store personal identifiable information (PII) for bookings.

3. Visitor data (tourists) — GDPR by design

We do not collect names, emails, phone numbers, addresses, or identity documents for search or “Check Availability”. Contact happens off-platform — through instant messaging channels, including but not limited to WhatsApp and Viber — with the vendor you choose; their privacy policy applies there and the rental contract is formed directly between you and the vendor.

Minimal technical data

• Essential cookies for language and search functionality.
• Anonymous cookies to prevent duplicate contact requests — no visitor profile.
• Anonymous note of how you reached us (e.g. from an ad), only to improve the service — not for advertising profiles.
• Cookie consent preference (see Cookie Policy).
• After you accept cookies in the banner: anonymous visit statistics and performance metrics (Vercel Web Analytics / Speed Insights) — no advertising profiling.

Legal basis (GDPR): legitimate interest & service necessity (Art. 6(1)(f) / 6(1)(b)); for post-consent statistics, consent (Art. 6(1)(a)). We do not sell visitor data to third parties for marketing.

4. Vendor data (B2B)

• Business name, contact phone, preferred channel.
• Fleet, pricing, blocked dates, lead token balance.
• Ghost lead reports, token pack purchase requests.
• Anonymous contact events (vendor + vehicle + timestamp + channel) — no visitor identity.

Legal basis: B2B contract performance (GDPR Art. 6(1)(b)).

5. Sub-processors

We use trusted hosting (Vercel), database (Supabase), and B2B payment providers (not for tourist rentals), with data processing agreements where required by GDPR. Vercel also processes anonymous visit statistics when you have accepted cookies.

6. Retention

• Vendors: duration of partnership + statutory limitation periods.
• Short-term operational records: up to 24 hours.
• Server logs: per hosting policy (typically 30–90 days).
• Visitors: no permanent profile.

7. Your rights (GDPR)

If we process your data (e.g. as a vendor), you may request access, rectification, erasure, restriction, portability, object, and withdraw consent where applicable.

8. Security

We apply technical and organisational security measures (encryption, restricted access, data minimisation). We update our practices when needed.

9. Policy changes

We update this page when practices change. The “last updated” date appears at the top.