George For Hire

Privacy Policy

Effective Date: 13 April 2026
Last Updated: 13 April 2026

GEORGIOS IOANNOU MATTHEOU LTD ("we", "us", "our" or "George For Hire") respects your privacy and is committed to protecting your personal data. This Privacy Policy ("Policy") describes how we collect, use, store, share and protect personal data that you provide to us in connection with our vehicle rental services and our website (the "Website"), in accordance with Regulation (EU) 2016/679 (the "GDPR") and the applicable data protection laws of the Republic of Cyprus.

1. Data Controller

The data controller responsible for the processing of your personal data is:

  • GEORGIOS IOANNOU MATTHEOU LTD
  • Registered office: Katalimata 6, Ayia Napa, Cyprus
  • Company registration number: 47334
  • VAT number: 12047334M
  • Represented by: Christodoulos Ioannou (Owner / Managing Director)
  • Telephone: +357 99 092 227
  • Email: Georgemotorbikes@outlook.com

2. Personal Data We Collect

We collect and process the following categories of personal data:

2.1 Data You Provide Directly

  • Identification data: first name, last name, date of birth (where required for vehicle hire eligibility);
  • Contact details: phone number, email address, postal address (where applicable);
  • Booking data: vehicle selected, dates and duration of the rental, pick-up and drop-off location, special requests, accompanying drivers (if any);
  • Identity / driving documents: copy of identity document (passport, ID card) and driving licence, presented at the time of vehicle collection for verification and insurance purposes;
  • Payment data: information necessary to process the payment of the deposit and remaining balance (note: full card details are processed directly by our payment service provider and are not stored on our servers);
  • Communication data: the content of emails, messages or other communications you exchange with us.

2.2 Data Collected Automatically

  • Technical data: IP address, browser type and version, operating system, device type, language preferences;
  • Usage data: pages visited, time spent on the Website, referring URL, date and time of access;
  • Cookies and similar technologies: see Section 9 below.

3. Purposes and Legal Bases of Processing

We process your personal data for the following purposes and on the following legal bases (Article 6 GDPR):

Purpose Legal Basis
Processing and managing your Booking, executing the rental contract, delivering the vehicle, collecting payment. Performance of a contract (Art. 6(1)(b) GDPR)
Contacting you regarding your reservation (confirmation, modification, cancellation, follow-up). Performance of a contract (Art. 6(1)(b) GDPR)
Verifying eligibility (driving licence, age, identity) and complying with insurance requirements. Legal obligation (Art. 6(1)(c) GDPR) and legitimate interest (Art. 6(1)(f) GDPR)
Issuing invoices, keeping accounting records and complying with tax/VAT obligations. Legal obligation (Art. 6(1)(c) GDPR)
Managing complaints, claims, damage, fines and disputes relating to the rental. Legitimate interest (Art. 6(1)(f) GDPR) and, where applicable, legal obligation
Improving the Website, security, fraud prevention and analytics. Legitimate interest (Art. 6(1)(f) GDPR)
Sending commercial or promotional communications (where applicable). Consent (Art. 6(1)(a) GDPR), withdrawable at any time

4. Recipients of Your Personal Data

We do not sell or rent your personal data. Your data may be shared only with the following categories of recipients, on a strict need-to-know basis:

  • Internal staff: authorised employees of GEORGIOS IOANNOU MATTHEOU LTD involved in the management of bookings and customer service;
  • Payment service providers: for the secure processing of online and in-person payments;
  • Insurance providers: where necessary to cover the rented vehicle and any incident occurring during the Rental Period;
  • IT and hosting service providers: who host the Website and our booking platform within the European Union;
  • Accountants, auditors and legal advisors: bound by professional confidentiality;
  • Public authorities: where required by law (e.g., police, tax authorities, insurers, courts).

All third-party processors are bound by a written data processing agreement compliant with Article 28 GDPR.

5. Data Storage and International Transfers

Your personal data is stored on secure servers located within the European Union, including in France (Paris). We do not transfer your personal data outside the European Economic Area (EEA), unless such transfer is necessary and made on the basis of appropriate safeguards under Articles 44 et seq. GDPR (e.g., Standard Contractual Clauses approved by the European Commission, adequacy decision).

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting or reporting obligations. Indicative retention periods are as follows:

  • Booking and rental data: for the duration of the contractual relationship and for up to six (6) years after the end of the rental, in accordance with Cypriot accounting and tax obligations;
  • Identity / driving licence copies: for the duration of the rental and the period required to address any post-rental claim, fine or dispute, then deleted;
  • Marketing data (where consent given): until you withdraw consent or for a maximum of three (3) years from the last interaction;
  • Website technical logs: generally up to twelve (12) months.

At the end of the applicable retention period, your personal data is securely deleted or anonymised.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, loss, destruction or misuse. These measures include, in particular:

  • encrypted (HTTPS/TLS) connection to the Website;
  • access controls and authentication for staff handling personal data;
  • secure storage on servers located within the European Union;
  • regular backups and updates of our systems;
  • contractual obligations imposed on third-party processors.

Despite our best efforts, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot therefore guarantee absolute security.

8. Your Rights

Under the GDPR and applicable Cypriot data protection law, you have the following rights:

  • Right of access (Art. 15): obtain confirmation of whether we process your personal data, and a copy thereof;
  • Right to rectification (Art. 16): request correction of inaccurate or incomplete data;
  • Right to erasure (Art. 17), also known as the "right to be forgotten", subject to applicable legal exceptions;
  • Right to restriction of processing (Art. 18);
  • Right to data portability (Art. 20), where processing is based on consent or contract and carried out by automated means;
  • Right to object (Art. 21), in particular to processing based on our legitimate interest or for direct marketing purposes;
  • Right to withdraw consent at any time, where processing is based on consent (without affecting the lawfulness of processing carried out before withdrawal);
  • Right to lodge a complaint with a supervisory authority, in particular the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus (www.dataprotection.gov.cy) or any other competent supervisory authority within the EU.

How to exercise your rights

To exercise any of your rights, please contact us in writing at Georgemotorbikes@outlook.com, attaching a copy of an identity document where necessary to verify your identity. We will respond to your request within the legal time limit of one (1) month, which may be extended by two (2) further months in case of complex or numerous requests.

9. Cookies and Similar Technologies

The Website may use cookies and similar technologies to ensure its proper functioning, to remember your preferences, to compile statistical information and, where applicable, to display targeted content.

  • Strictly necessary cookies: required for the operation of the Website (e.g., session cookies, security cookies). These do not require your consent.
  • Analytics cookies: used to measure audience and improve the Website. These are only deposited with your prior consent.
  • Marketing / third-party cookies: only deposited with your prior consent.

You may at any time accept, refuse or withdraw your consent to the use of non-essential cookies through the cookie banner displayed on the Website or via your browser settings.

10. Children's Data

The Website and our rental services are not intended for persons under the age of eighteen (18). We do not knowingly collect personal data from minors. If you become aware that a minor has provided us with personal data without parental consent, please contact us so that we can delete such data.

11. Automated Decision-Making

We do not carry out any automated decision-making, including profiling, producing legal effects or significantly affecting you within the meaning of Article 22 GDPR.

12. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements or other factors. The version applicable to you is the version in force at the time of your interaction with us. Any material change will be brought to your attention through the Website or by email where appropriate.

13. Contact

For any question, request or claim concerning this Privacy Policy or the processing of your personal data, please contact us at:

You may also lodge a complaint with the Cypriot supervisory authority: Office of the Commissioner for Personal Data Protection – www.dataprotection.gov.cy.