Buy
Contact Us
Currency : EUR

Privacy Policy

1. Who is responsible for your data

FlexThis IKE ("bFlex", "we"), Tax ID 802391110, Veikou 94-96, 11741 Athens, Greece, info@bflex.io, operates the bFlex platform at www.bflex.io. This policy applies to everyone who uses bFlex, wherever they are.

bFlex is a marketplace. Products, vehicles and guided tours are sold, rented, subscribed out or run by independent vendors ("Vendors"), whose details appear on the product page and in your order confirmation.

  • We are the controller for your account, orders, payments, deposits, reviews, support, fraud prevention, marketing and cookies.
  • The Vendor is a separate controller for performing your contract, including running guided tours: identity checks at handover, delivery, vehicle condition, tracking devices, maintenance, incidents, fines, invoices and warranty. Where we carry out such tasks for a Vendor, we act on its behalf.
  • When a Vendor uses bFlex tools to manage its own customers, for example walk-in bookings, we process that data only on the Vendor's behalf, and the Vendor's own privacy notice applies.

You can contact the Vendor directly about its use of your data, or contact us and we will forward your request.

2. What data we use, why, and on what legal basis

Most data comes from you; some comes from Vendors, payment providers and your use of the platform.

Account, orders, rentals, guided tours, subscriptions, buyouts and rent-to-buy

  • Data: Name, contact details, delivery address, order and contract details; for guided tours, the number and names of participants; for business customers, their contact persons' details.
  • Legal basis: Contract.

Payments, recurring charges, deposits and refunds

  • Data: Payment details (processed by our payment providers), IBAN, transaction records.
  • Legal basis: Contract.

Customer support

  • Data: Emails and messages.
  • Legal basis: Contract.

Documenting vehicle condition to settle deposits and disputes

  • Data: Photos, videos, inspection records.
  • Legal basis: Contract.

Identity and licence checks for rentals and subscriptions

  • Data: Name, date of birth, document number and expiry, licence number and category; a copy only where necessary, and you are told.
  • Legal basis: Contract; legitimate interests in preventing fraud and vehicle theft.

Incidents, theft, fines, claims and debt collection

  • Data: Police reports, witness and insurer details, fines, payment history.
  • Legal basis: Legitimate interests in establishing and defending legal claims; legal obligation.

Reviews

Verifying, publishing, moderating, and sharing negative reviews with the Vendor.

  • Data: Review, rating, photos, display name, proof of purchase.
  • Legal basis: Legitimate interests in a trustworthy marketplace.

Vendors and Affiliates

Onboarding, payouts, commissions, identity and anti-money-laundering checks.

  • Data: Identity, contact, tax ID, bank details.
  • Legal basis: Contract; legal obligation.

Invoicing, accounting, tax and requests from authorities

  • Data: Transaction and invoice data.
  • Legal basis: Legal obligation.

Security, fraud prevention and platform improvement

  • Data: Device and usage data.
  • Legal basis: Legitimate interests in keeping the platform secure and working well.

Marketing

  • Data: Email address, marketing preferences.
  • Legal basis: Consent; for existing customers, legitimate interests in promoting similar services (you can opt out).

You must be 18 or over to create an account or make a booking. If you book for other people, for example a guided tour that includes children, give us only the details needed and let them know about this policy.

We do not ask for health data. If a police or accident report contains details about offences or health, we use them only to handle the incident or claim, as the law allows.

Without the data needed for a contract, we cannot provide the service. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

3. Vehicle tracking

Some vehicles have a GPS or telematics device; the product page or the Vendor tells you if yours does. The Vendor controls this data and, under our terms, may use it only to recover the vehicle after theft, loss or non-return, to investigate incidents or serious breaches, and to locate it for maintenance or collection in agreement with you. Vendors may not use it to monitor your movements continuously and must deactivate tracking when you buy the vehicle.

4. Who receives your data

We share only what each recipient needs, and we never sell personal data. Recipients are:

  • the Vendor of your order;
  • payment providers;
  • IT, hosting, email and support providers working on our instructions;
  • delivery companies;
  • insurers, lawyers, accountants and debt collection agencies;
  • public authorities and courts where the law requires.

If data is transferred outside the EU/EEA, we use a European Commission adequacy decision or Standard Contractual Clauses. You can ask us for a copy of these safeguards.

5. How long we keep data

We keep data only as long as needed for its purpose, then delete or anonymise it.

  • Account data: until you close your account.
  • Identity document details and copies: until the contract has ended and the deposit and any open matters are settled.
  • Location data and condition photos: until the contract has ended and the deposit is settled, or longer only for an ongoing incident or claim.
  • Contract, order and communication records: until claims can no longer be brought under applicable law.
  • Invoices and payment records: for the period required by tax and accounting law.
  • Marketing data: until you withdraw consent or opt out.

Closing your account does not delete records we must keep for tax, accounting or open disputes.

6. Marketing and cookies

We send marketing only with your consent or, where the law allows, to existing customers about similar bFlex services. You can unsubscribe at any time through the link in each message. Accepting our terms is not consent to marketing.

We use strictly necessary cookies to run the platform. Analytics and advertising cookies are used only with your consent. The cookie banner lists the cookies we use and lets you accept or reject them, and you can change your choice at any time. Affiliate referrals are tracked only by referral link or QR code, not by cookies.

7. Your rights

You have the right to access, correct, delete, restrict and port your data, and to object to processing based on legitimate interests or used for direct marketing. You can withdraw consent at any time; this does not affect earlier processing.

To use your rights, email info@bflex.io. We reply within one month, which may be extended by two months for complex requests.

You can also complain to a data protection supervisory authority, in particular in the country where you live, work or where the issue occurred. Our lead authority is the Hellenic Data Protection Authority (www.dpa.gr).

8. Changes and contact

We may update this policy. We publish every new version here and inform registered users of material changes by email.

Questions: FlexThis IKE, Veikou 94-96, 11741 Athens, Greece, info@bflex.io.