LOKALWAY ("we", "our", "us") is committed to protecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019 on personal data protection.
We collect personal data necessary for service provision: name, email, phone number, payment information, and location data (only when using the app). Under GDPR Article 6, processing is based on contract performance and legitimate interests.
Your data is used to: process bookings, provide customer support, send service notifications, improve our services, and comply with legal obligations under Greek and EU law. We do not sell your data to third parties.
We implement appropriate technical and organizational measures as required by GDPR Article 32. Data is encrypted in transit (TLS/SSL) and at rest. Payment data is processed through PCI-DSS compliant providers. Access to personal data is restricted to authorized personnel only.
You have the right to: access your data (Article 15), rectify inaccurate data (Article 16), request deletion (Article 17 - 'right to be forgotten'), restrict processing (Article 18), data portability (Article 20), and object to processing (Article 21). To exercise these rights, contact us at info@lokalway.com. You may also lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
We use essential cookies for site functionality and analytics cookies (with consent) to improve user experience. You can manage cookie preferences in your browser. Our cookie use complies with ePrivacy Directive 2002/58/EC and Greek Law 3471/2006.
We retain personal data for as long as necessary to provide services and comply with legal obligations. Booking data is retained for 7 years as required by Greek tax law. Inactive accounts are deleted after 3 years of inactivity, following notification.
We use third-party services for payments (Stripe), analytics (limited), and hosting. These providers are GDPR-compliant and process data under Data Processing Agreements. Data transfers outside the EU comply with GDPR Chapter V (adequacy decisions or appropriate safeguards).
Our services are not intended for users under 18. We do not knowingly collect data from minors without parental consent, as required by GDPR Article 8 and Greek Law 4624/2019.
We may update this policy to reflect changes in our practices or legal requirements. Significant changes will be notified via email. The current version is always available on our website.
For privacy-related inquiries or to exercise your GDPR rights:
We value your privacy
We use necessary cookies for site functionality. We and our partners also use analytics and advertising cookies to understand how you use our services. Choose which categories you allow.