Skip to content

Privacy statement

Protection of personal data and privacy

Protecting your personal data matters to us. This statement explains what data we collect through rentacrate.gr, the purposes we process it for, and the rights you have, under Regulation (EU) 2016/679 (GDPR) and Greek law 4624/2019. Last updated: 23 August 2026.

1. Data controller

Controller details
Company, TNS Commerce M. I.K.E., operating under the trade name Rent A Crate
Registered office, 6 Kondyli St, Pylaia, 555 35 Thessaloniki
Offices and depot, 43 Epidavrou St, Toumba, 54301 Thessaloniki
GEMI, 00014264580600
VAT No., 800839460, Tax Office Z’ Thessalonikis
Contact, info@rentacrate.gr, +30 2310 912 100

For anything to do with personal data write to info@rentacrate.gr with “Personal data” in the subject.

2. Scope

This statement covers rentacrate.gr and all of its pages, in Greek and in English, and the correspondence that follows from them. It does not cover third-party sites a link may take you to.

3. What data we collect

For the booking and the delivery. Name, email, telephone, delivery address and collection address with area and postcode, delivery date, and the package, duration and extra items you chose.

For the invoice. Billing details and, if you ask for a business invoice, your VAT number and tax office. Both are optional and we ask for them only to issue a correct document.

For the payment. Your card details are entered directly into the payment provider’s environment and never reach our servers. We receive only the result of the transaction and a reference for it.

From the forms. Contact: name, email and your message. Franchise enquiry: name, telephone, email, region of interest and, optionally, company name and website.

For the newsletter. Your email address and the record of your consent.

Technical. IP address, browser type, time of request and referring page, in the server logs.

We collect no special categories of data, we take no automated decisions with legal effects for you, and we do no profiling.

4. Purposes and legal bases

Performance of the contract, Article 6(1)(b) GDPR. To route the delivery, deliver and collect the crates, take payment and support you.

Legal obligation, Article 6(1)(c). Issuing and keeping invoices, and our tax and accounting duties.

Consent, Article 6(1)(a). The newsletter and the optional analytics and marketing cookies. You can withdraw at any time, without affecting what was lawfully done before.

Legitimate interest, Article 6(1)(f). Site security, preventing fraud, and being able to show that a delivery took place. Weighed against your rights and kept to the minimum needed.

5. Cookies and consent

Non-essential cookies do not load before you consent. The categories, the storage mechanism and the way to withdraw are in the Cookie Policy.

6. Data recipients

We do not sell personal data and we do not trade it. We share it only with those who need it for the service to work:

  • The partner who fulfils your order, where your area is served by a franchise partner. They receive your name, telephone, both addresses and the booking details. They do not receive payment details and are contractually bound to use it only for the delivery and the collection.
  • Viva Wallet, to process the payment.
  • Brevo, to send the newsletter, if you have subscribed.
  • Google, for analytics and for the map on the contact page, and only if you have consented.
  • Our hosting provider, as a processor.
  • Our accountant and the competent authorities, where the law requires it.

7. Transfers outside the EEA

Google may process data on servers outside the European Economic Area. Viva Wallet processes payment data within the European Economic Area. Those transfers rest on an adequacy decision of the European Commission or on Standard Contractual Clauses. A copy of the safeguards is available on request.

8. Retention period

How long we keep each thing
Orders and invoices, as long as tax and accounting law requires
Booking details and addresses, up to two years after the crates are collected
Contact messages, up to two years from the last exchange
Franchise enquiries, up to two years, unless a partnership follows
Newsletter, until you unsubscribe
Server logs, up to twelve months

9. Your rights

You have the right of access to your data, and rights to rectification, erasure, restriction of processing, portability, objection to processing based on legitimate interest, and withdrawal of consent.

Send your request to info@rentacrate.gr. We answer within one month. If the request is complex the deadline can be extended by two months and we will tell you why. Exercising your rights is free of charge.

An erasure request cannot undo invoices the law obliges us to keep. In that case we restrict processing rather than delete.

10. Complaint to the supervisory authority

If you believe the processing breaches the GDPR you can complain to the Hellenic Data Protection Authority, 1-3 Kifissias Ave, 115 23 Athens, tel. +30 210 6475600, www.dpa.gr. We would be glad of the chance to put it right first.

11. Data security

The site runs only over an encrypted connection. Access to order data is limited to the people who need it for their work. Card details are not stored by us in any form.

12. Third-party links and content

The site contains links to third parties. We do not control and are not responsible for their practices. The only embedded third-party content is the map on the contact page, which loads only after you press it.

13. Minors

The service is for adults. We do not knowingly collect data from minors. If we find that we have, we delete it.

14. Changes to this statement

We update this page when the way we process data changes, and the date at the top changes with it. Material changes are announced clearly on the site.

See also the Terms of use and the Cookie Policy.