Privacy Policy

Horizon Travel & Tours, trading as Horizon Car Hire (“we”, “us”, “our”), respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit our website paphoscarhirecyprus.com, make a booking, or otherwise interact with our services.

This Policy is issued in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679 — “GDPR”) and the Cyprus Law Providing for the Protection of Natural Persons with Regard to the Processing of Personal Data (Law 125(I)/2018).

Please read this Policy carefully. By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

The data controller responsible for your personal data is:

Horizon Travel & Tours (Horizon Car Hire)

Paphos, Cyprus

Email: horizon@primehome.com

Telephone / WhatsApp / Viber: +357 95 164 697 (24 hours)

We are members of the Pancyprian Association of Car Rental Owners (P.A.C.R.O.) and part of the Horizon Group.

2. Information We Collect

We collect personal data that you provide to us directly when making a booking, contacting us, or using our website. The categories of data we may collect include:

Identification data: full name, date of birth, nationality, passport or national ID details, and a copy of your driving licence.
Contact data: email address, telephone number, postal address, and holiday accommodation address in Cyprus.
Booking data: flight details, arrival and departure dates, pick-up and drop-off locations, vehicle preferences, and any additional driver information.
Payment data: information necessary to process your payment. Card details are entered directly on the secure environment of our payment service provider (see Section 6) and are not stored on our servers.
Correspondence data: any information you share with us by email, contact form, telephone, WhatsApp, Viber or other messaging channels.
Technical data: IP address, browser type and version, operating system, referring URLs, pages viewed, and usage information collected through cookies and similar technologies.

3. How We Use Your Data and Legal Basis

We process your personal data only where we have a lawful basis to do so. The purposes and corresponding legal bases are:

To process and manage your car rental booking (performance of a contract): confirming reservations, preparing rental agreements, delivering and collecting vehicles, and providing roadside assistance.
To process payments (performance of a contract): securely transmitting your payment information through the JCC Payment Gateway.
To comply with legal obligations (legal obligation): including tax, accounting, insurance, traffic-violation reporting, and verification of driving licence requirements.
To respond to enquiries and provide customer support (legitimate interests): handling questions, complaints, refunds, and after-rental matters.
To improve our website and services (legitimate interests): analysing usage patterns and ensuring the technical security of our website.
To send service-related communications (legitimate interests / consent where required): such as booking confirmations, reminders and post-rental follow-ups.

4. Cookies

Our website uses cookies and similar technologies to ensure that the site functions properly, to remember your preferences, and to analyse traffic. You may disable cookies through your browser settings; however, parts of the website may not function correctly if cookies are disabled.

5. Sharing Your Personal Data

We do not sell your personal data. We share your data only with trusted third parties who help us operate our business and deliver our services to you, including:

JCC Payment Systems Ltd (JCC Payment Gateway), our payment service provider — see Section 6 below.
Insurance providers, in connection with the comprehensive insurance included with your rental and any claims arising from accidents.
Government, police, traffic and tax authorities, where required by law (for example, in the event of traffic violations, fines, or accidents).
Our IT, hosting, email and communication service providers, who process data on our behalf under appropriate confidentiality and data protection terms.
Our professional advisors (accountants, lawyers, auditors), where necessary.

All third-party processors are required to keep your data secure and to process it only in accordance with our instructions and applicable law.

6. Payment Processing — JCC Payment Gateway

All online card payments made through our website are processed securely via the JCC Payment Gateway, operated by JCC Payment Systems Ltd, a leading payment service provider regulated in Cyprus.

When you proceed to payment, you are redirected to the secure environment of the JCC Payment Gateway, where your card details (card number, expiry date, CVV) are entered directly into JCC’s encrypted system. We do not see, collect, or store your full card details on our servers.

The JCC Payment Gateway employs industry-standard security measures, including:

PCI DSS (Payment Card Industry Data Security Standard) compliance;
TLS/SSL encryption of all data in transit;
3-D Secure authentication (Visa Secure, Mastercard Identity Check) where supported by your card issuer.

Once a payment is processed, JCC Payment Systems Ltd provides us only with the information needed to confirm the transaction (such as the authorisation result, transaction reference, amount and a masked card number). For information on how JCC processes your data, please refer to the JCC privacy notice available at www.jcc.com.cy.

7. International Transfers

Your personal data is primarily processed within the European Economic Area (EEA). Where any transfer outside the EEA is necessary (for example, in connection with certain IT or communication providers), we ensure that appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

8. Data Retention

We keep your personal data only for as long as necessary for the purposes set out in this Policy, including to satisfy any legal, accounting, tax, or reporting requirements. Booking records and supporting documents are typically retained for a minimum of six (6) years after the end of the rental, in line with Cyprus tax and accounting law. Where we no longer need your data, it is securely deleted or anonymised.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. These measures include access controls, secure storage, encrypted data transmission for online payments, and staff confidentiality obligations. However, no transmission over the internet can be guaranteed to be 100% secure, and you provide your information at your own risk.

10. Your Rights

Under the GDPR and applicable Cyprus law, you have the following rights in relation to your personal data:

Right of access — to request a copy of the data we hold about you.
Right to rectification — to correct inaccurate or incomplete data.
Right to erasure — to request deletion of your data, subject to legal retention obligations.
Right to restriction of processing — in certain circumstances.
Right to data portability — to receive your data in a structured, commonly used format.
Right to object — to processing based on legitimate interests or for direct marketing.
Right to withdraw consent — where processing is based on your consent.

To exercise any of these rights, please contact us at horizon@primehome.com. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus (www.dataprotection.gov.cy) if you believe your data protection rights have been infringed.

11. Children

Our services are not directed at children under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational or regulatory reasons. The updated version will be posted on this page with a revised “Last updated” date. We encourage you to review this Policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

Horizon Travel & Tours (Horizon Car Hire)

Paphos, Cyprus

Email: horizon@primehome.com

Telephone / WhatsApp / Viber: +357 95 164 697 (24 hours)

Website: https://paphoscarhirecyprus.com