Privacy policy

We respect your privacy. This policy explains what personal data we process when you use ferryfast.gr, for what purpose and what rights you have, under the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Greek Law 4624/2019.

1. Data controller

Ferryfast.gr, 265 Kifisias Avenue, 145 61 Kifisia, Greece, VAT number (ΑΦΜ) 118864446, tax office Kifisia.
Email: [email protected] · Phone: +30 2106206362

2. What data we process

• Contact data: when you email or call us, your name, email or phone number and the content of your message.
• Technical data: IP address, device and browser type, pages visited and date/time, through server logs and, if you allow it, analytics tools (e.g. Google Analytics).
• Affiliate data: when you go to the booking partner, a referral identifier so that the booking can be attributed to Ferryfast.

We do not collect booking or payment data. Passenger, vehicle and card details are given directly to the booking partner, which processes them as an independent controller under its own privacy policy.

3. Purposes and legal basis

• Replying to your messages: performance of your request and legitimate interest (Art. 6(1)(b) and (f) GDPR).
• Operating, securing and protecting the website from abuse: legitimate interest (Art. 6(1)(f)).
• Visitor statistics and improving the website: your consent (Art. 6(1)(a)), which you can withdraw at any time.
• Attribution of bookings by partners: your consent to the related cookies (Art. 6(1)(a)) and legitimate interest.
• Tax and accounting obligations: legal obligation (Art. 6(1)(c)).

4. Recipients

Data may be shared, only as far as necessary, with our hosting provider, analytics providers (e.g. Google), affiliate networks and booking partners, and with public authorities where required by law. We do not sell personal data.

5. Transfers outside the EEA

Some providers (e.g. Google) may process data outside the European Economic Area. In those cases the transfer is covered by appropriate GDPR safeguards, such as standard contractual clauses or an adequacy decision.

6. How long we keep data

• Contact messages: as long as needed to handle your request and up to 24 months afterwards.
• Server logs: up to 12 months.
• Analytics data: according to the tool's retention setting and up to 14 months.
• Tax records: as required by law.

7. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal. To exercise your rights, email [email protected]. We will reply within one month.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (1–3 Kifisias Ave, 115 23 Athens, Greece, www.dpa.gr).

8. Cookies

For the cookies we use, see our Cookie policy.

9. Children

The website is not aimed at children under 15 and we do not knowingly collect their data.

10. Security

We use an encrypted connection (HTTPS) and reasonable technical and organisational measures to protect data.

11. Changes

We may update this policy. The version in force is always the one published on this page.