Privacy Policy

Last updated: April 2026

Introduction

Flori Europa Travel ("we", "us", or "our") is committed to protecting the privacy of all visitors to our website. This Privacy Policy explains how we collect, use, store, and protect your personal information when you interact with our website and services. By using our website, you agree to the practices described in this policy.

Information We Collect

We may collect the following types of information:

Personal Data: When you make a booking, submit a contact form, or send us an email, we may collect your name, email address, phone number, postal address, travel dates, and any other information you voluntarily provide.

Cookies: We use cookies and similar technologies to enhance your browsing experience. Please refer to our Cookie Policy for detailed information.

Analytics Data: We collect anonymised usage data through analytics tools to understand how visitors interact with our website. This may include your IP address, browser type, device type, pages visited, and time spent on our site.

How We Use Your Data

We use the information we collect for the following purposes:

• To process and manage your tour bookings, transfers, and excursion reservations
• To respond to your enquiries and provide customer support
• To send you booking confirmations and travel-related communications
• To improve our website, services, and user experience
• To comply with legal obligations

Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Contract: Processing is necessary for the performance of a contract, such as when you book a tour or transfer service.
• Consent: Where you have given clear consent for us to process your data for a specific purpose, such as subscribing to communications.
• Legitimate Interest: Processing is necessary for our legitimate business interests, such as improving our services, provided it does not override your rights.
• Legal Obligation: Processing is necessary to comply with applicable laws and regulations.

Data Sharing

We do not sell your personal data to third parties. We may share your information with trusted partners only when necessary to fulfil our services, such as transfer providers, accommodation partners, or payment processors. All third-party partners are required to handle your data in accordance with applicable data protection laws.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Booking-related data is typically retained for up to five years after the date of travel. You may request earlier deletion at any time, subject to our legal obligations.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request that we correct any inaccurate or incomplete data.
• Right to Erasure: You may request that we delete your personal data, subject to legal obligations.
• Right to Data Portability: You may request your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data in certain circumstances.

To exercise any of these rights, please contact us using the details provided below.

Cookies

Our website uses cookies to improve functionality and analyse traffic. You can control cookie preferences through your browser settings. For full details on the cookies we use and how to manage them, please see our Cookie Policy.

Third-Party Services

We may use third-party services to help us operate our website and analyse usage. These services may collect information sent by your browser as part of a web page request. Currently, we use or plan to use Google Analytics (GA4) to collect anonymised usage statistics. Where such services are active, their use is governed by their own privacy policies.

Children's Privacy

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal information, please contact us immediately and we will take steps to remove that data.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Any updates will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Flori Europa Travel
Heraklion, Crete, Greece
Email: info@florieuropatravel.com