1. Who we are
CBR Travel operates travel and destination services in Kefalonia and Ithaca. For privacy questions or requests, contact us using the details below.
2. Information we collect
- Contact details such as name, email address, telephone number and WhatsApp number when supplied.
- Enquiry and booking details such as dates, number of guests, accommodation preferences, transfer or excursion information, flight details and special requests.
- Excursion booking and payment-status information where online booking is available. Payment card details are handled by the payment provider and are not stored by CBR Travel as full card numbers.
- Technical information needed to operate and secure the website, such as basic server logs and request information.
3. Why we use your information
- To answer enquiries and take steps requested by you before entering into a booking or service arrangement.
- To organise and provide booked travel services and communicate changes or operational information.
- To meet legal, tax, accounting and regulatory obligations.
- To protect the website, prevent abuse and maintain service reliability based on our legitimate interests.
- Where consent is specifically requested, for the purpose described at the point of consent.
4. Who may receive your information
We share personal information only where reasonably necessary for your request or booking. This may include accommodation providers, transport providers, excursion or activity suppliers, tour operators and other service partners involved in delivering the requested service. Our website and forms are hosted using Netlify services. Excursion booking records may be stored in Netlify storage. Where online payment is offered, payment is processed through Stripe Checkout. These providers process information under their own contractual and privacy obligations.
5. CBR Rent a Car and other external websites
Car-rental bookings opened from CBR Travel are completed on the separate cbr-rentacar.com website. Information entered there is handled under that website’s own privacy and cookie terms. Other external links may also have separate privacy practices.
6. How long we keep information
We keep personal information only for as long as reasonably necessary to handle your enquiry or booking, provide the service, maintain appropriate business records, comply with legal or accounting requirements, and resolve disputes. Retention can vary depending on the type of request and any applicable legal obligation.
7. Security
We use reasonable technical and organisational measures to protect personal information. No internet service can guarantee absolute security, so please avoid sending unnecessary sensitive information through general enquiry forms.
8. Your data-protection rights
Subject to applicable law, you may have rights to access, correct or delete your personal information, restrict or object to certain processing, request portability of information you provided, and withdraw consent where processing is based on consent. You may also complain to the Hellenic Data Protection Authority or another competent supervisory authority.
9. Children
Our services are intended to be arranged by adults. If information about a child is required for a booking, it should be supplied by a parent, guardian or authorised adult only to the extent necessary for the service.
10. Changes to this policy
We may update this policy when our services, providers or legal requirements change. The latest version will always be published on this page with the update date.
11. Contact
Privacy requests: infocbrtravel@cbr.gr · +30 26710 27175 · Leof. Ioannou Metaxa 60, Argostoli 28100, Kefalonia, Greece. Business Registration No. 016096534000 · VAT 094291382.