Privacy Policy
Last updated: July 2026. This Privacy Policy explains how Exit Travel handles your personal data when you visit exitbus.gr, request a quote or make a booking for coach/minibus hire with driver, transfers and excursions. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Greek law.
Data Controller
The data controller responsible for your personal data is:
- Exit Travel E.E.
- Tourist office, EOT/MITE licence No. 0933E60000241101
- Address: Pontou 104, Thessaloniki, Greece
- Phone: +30 2311 110 929
- Email: info@exitbus.gr
What Data We Collect and Why
Through our online booking engine and contact channels we collect only the data needed to provide our services:
- Identity and contact details: your name, email address and telephone number.
- Trip details: route, pick-up and drop-off points, dates, number of passengers and related requests.
- Payment data: payments are processed through Viva. We do not store your full card details on our systems.
- Technical and usage data: collected via cookies and similar technologies (see Cookies below).
Lawful Basis for Processing
- Performance of a contract (Art. 6(1)(b)): to prepare quotes, manage your booking, arrange the service and process payment.
- Consent (Art. 6(1)(a)): for non-essential cookies (analytics and advertising) and any optional marketing communications. You may withdraw consent at any time.
- Legitimate interest (Art. 6(1)(f)): to secure our website, prevent fraud and improve our services, where this does not override your rights.
- Legal obligation (Art. 6(1)(c)): to meet accounting, tax and tourism-law requirements.
Retention
We keep personal data only as long as necessary for the purposes above. Booking and communication records are retained for the duration of our relationship; invoicing and accounting data are kept for the statutory period required by Greek tax law (generally up to 10 years). Cookie-based data is retained for the periods set out in our Cookie Policy.
Recipients of Your Data
We do not sell your data. We share it only with trusted parties who process it on our behalf or as independent controllers:
- Viva — secure payment processing.
- Google — Google Maps, Google Analytics and Google Ads services.
- Our hosting/IT providers — for the operation and security of the website.
- Public authorities — where required by law.
International Transfers
Some recipients, such as Google, may process data outside the European Economic Area. Where this occurs, transfers are protected by appropriate safeguards under the GDPR, such as the European Commission's Standard Contractual Clauses or an adequacy decision.
Your Rights
Subject to the conditions of the GDPR, you have the right to:
- Access your personal data and obtain a copy;
- Rectify inaccurate or incomplete data;
- Erasure of your data ("right to be forgotten");
- Restrict or object to certain processing;
- Data portability — receive your data in a structured, machine-readable format;
- Withdraw consent at any time, without affecting prior lawful processing.
To exercise any right, contact us at info@exitbus.gr. We respond within one month.
Supervisory Authority
If you believe your data has been processed unlawfully, you may lodge a complaint with the Hellenic Data Protection Authority (HDPA / ΑΠΔΠΧ), Kifisias 1-3, 115 23 Athens, Greece — www.dpa.gr.
Cookies
Our website uses cookies from Google Maps, Google Analytics and Google Ads. For full details on the cookies we use and how to manage your preferences, please see our Cookie Policy.
Contact for Privacy
For any question about this Policy or your personal data, contact Exit Travel E.E. at info@exitbus.gr or +30 2311 110 929, Pontou 104, Thessaloniki, Greece.