Privacy and cookies

Last updated: 20 September 2026.

Who is responsible

Vega S.A. operates vega.com.gr and is responsible for personal data processed for its website and car-rental services. Contact: 39 Syngrou Avenue, 117 43 Athens, Greece; info@vega.com.gr; +30 210 923 0003.

Data, purposes and legal bases

We process the contact details and messages you provide, rental dates and locations, vehicle and extra selections, booking and payment information, and the identification, driving-licence and billing details required for your rental. We use these to answer requests, arrange and perform your rental contract and handle changes or claims. The legal basis is taking steps at your request before a contract and performing that contract. Required fields are identified in the relevant forms; without necessary information we cannot complete the requested service.

We process invoicing and other legally required records to comply with legal obligations. Technical data, including IP address, browser information and security logs, is used to operate the website, prevent fraud and protect the service on the basis of legitimate interests. Optional marketing or tracking would require a separate choice; booking a car is not consent to marketing.

Who receives data

Access is limited to staff and service providers who need it to deliver the requested service, including website hosting and maintenance, email delivery, booking administration, and payment providers when a payment method is selected. Information relevant to an incident may be shared with insurers, professional advisers or competent authorities where necessary for a claim or required by law. Google reCAPTCHA processes technical information for spam and abuse prevention. We do not publish your booking details.

Retention and international processing

We retain data for the period needed to answer your request, fulfil the rental, meet applicable accounting and legal retention obligations and establish or defend legal claims. The relevant contract, statutory period and any unresolved dispute determine the retention period; afterwards data should be deleted or anonymised. You can request details for your records using the contact above.

Some service providers, including Google, may process data outside the European Economic Area. Where this occurs, applicable data-protection safeguards, such as an adequacy decision or standard contractual clauses, are required. Contact us for information about the providers and safeguards relevant to your request.

Cookies and browser storage

The website currently uses necessary storage for booking, language preferences and security. Advertising and analytics cookies are not enabled. Necessary cookies do not require optional-cookie consent; the notice’s “Understood” button only remembers that you have read it.

• PHPSESSID: maintains the booking session; a session cookie normally removed when the browser session ends, depending on browser settings.
• Booking and language preferences: preserve choices while using the service. Their duration depends on the feature and can be checked or cleared in browser settings.
• reCAPTCHA (_GRECAPTCHA): security and abuse prevention. Google controls this security cookie’s expiry.
• vega_cookie_notice_v1: first-party local storage remembers dismissal of this notice for 180 days. It does not identify you for advertising.

You can reopen the notice with “Cookies” in the footer or clear storage in your browser. Blocking necessary cookies may prevent booking or security checks from working. Fonts and interface icons are served from this website. External links open services with their own privacy information.

Your rights

Subject to the conditions in the GDPR, you may request access, correction, erasure, restriction or portability of your data and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing. Write to info@vega.com.gr; we may need to verify your identity. We normally respond within one month, with any permitted extension explained to you.

You may complain to the Hellenic Data Protection Authority or your local supervisory authority. This notice concerns personal data; rental conditions and website terms apply separately.