1. Privacy policy & cookies
At Travaela - Online Bookings & Web Systems Ltd. (hereinafter "we", "us", "our", "goferry", or the “company”) we respect the personal data of each visitor of our website. This privacy policy has been created in accordance with the European Regulation (EU) 2016/679 (GDPR), Cypriot Law 125(I)/2018, and, together with the terms of use & booking policy of the company, in all the websites it manages, mobile applications and other services, such as newsletters and notifications, it describes how it processes the personal data which it collects from you or which you provide to it.
This privacy policy applies only to information collected through the company websites and not to the websites of third parties or organizations with which we may be connected.
For any questions regarding this privacy policy or any questions regarding the processing of your data and the exercise of your rights, you can contact the email address info@travaela.com
The company collects and maintains data provided voluntarily by its internet visitors and which you disclose by entering the required personal information in the respective fields or by providing your answers within specific actions for the proper operation of the website, the services it provides and the fulfilment of your requests. Also, the company undertakes to protect and use in an appropriate manner the information (hereinafter "personal data") collected either online from this website or through communication/collaboration in a natural way. Finally, by using the company's websites, the visitor declares that he is over 18 years old.
2. Collection & purposes of use of personal data
At the company we collect and manage exclusively the personal data that you voluntarily provide, when we ask you to fill in your personal data in the respective fields in order to make a reservation and which are necessary to satisfy your respective requests (gender, full name, date of birth, telephone number, email, ID/passport number, nationality, home address and credit card details, where required). Where additional, optional information is requested, you will be notified at the time of their collection.
Specifically, personal data is collected:
When you sign up on the company's websites (username, password, email address and other information you choose to provide, such as name, contact phone number, home address, civil status, etc.).
When executing the order (gender, full name, date of birth, telephone number, email, ID/passport number, nationality, credit card details, invoice or receipt address). Credit card details are kept only for the duration of the order execution and processing of the payment and are not stored by the company.
When you contact the company by email, telephone or mail.
In addition to the information you provide to us voluntarily, certain information is automatically collected when you visit the company websites through the data tracking technologies we use (such as cookies, which collect information from your computer, including technical information such as IP address, your operating system, type and version of your browser). Essential cookies run automatically, while non-essential analytics and marketing cookies are activated strictly upon your explicit consent via our cookie banner. More information about the cookies policy can be found below.
By registering for the services provided by the company you also consent to the storage and use of your personal data in accordance with this privacy policy.
According to the current legislation (Article 6 of Regulation (EU) 2016/679), the processing of personal data for the provision of services to you and fulfillment of our obligations is allowed.
Your personal data is not used for purposes other than those listed herein, unless we obtain your prior permission, or unless otherwise required or permitted by law.
The purpose of the collection, use and processing of your personal data is (a) the provision of services and products, which you request through the website for the receipt of which the use and/or processing of them is required, e.g. online booking, (b) the consequent implementation of the contractual obligations in the most efficient way, (c) the execution of requests or answers to your questions to facilitate the ordering process and its execution and (d) the compliance with the obligations of the current legislation.
3. Transmission of personal data
The company transmits the personal data you provide, to (a) cooperating providers of tourist products and services, (b) ferry companies, in order to fulfill your request and complete the process of organizing your trip, (c) reservation systems and distribution systems of ferry companies, (d) companies that offer automation services for the purpose of sending electronic messages (SMS, email, etc.), (e) providers and commercial payment services. It is emphasized that the data disclosed by these service providers may be used and retained by them for the purpose of fulfilling your requests and checking your booking.
We recommend that you review the privacy practices of any third party providers (service providers such as ferry companies and other travel services providers) whose products you purchase on the company websites. In addition, providers may contact you when necessary to obtain additional information regarding your booking.
The company may transfer certain personal data across geographical borders to other companies that work with it and/or store personal data in a jurisdiction outside the European Economic Area (EEA). Any international transfers are made in full compliance with Chapter V GDPR, relying on EU Standard Contractual Clauses (SCCs) or adequacy decisions to ensure an adequate level of data protection. It may also store your personal data in a cloud environment.
4. Access to personal data & rights
At any time you have the right to be informed about your personal data, the purpose of keeping and processing them, as well as to correct, update or modify them, or to request their deletion by submitting a respective request to the email address info@travaela.com from the email address you provided for contact. Some data will only be deleted after a specified period, for example once the purpose of the processing has been completed, or the retention provided by law or contract or in order to protect our legitimate interests.
At any time you have the right to object to the processing of your personal data and in general to exercise any right provided by law for the protection of personal data. You also have the right to lodge a formal complaint with the competent supervisory authority, the Commissioner for Personal Data Protection in Cyprus (commissioner@dataprotection.gov.cy).
In addition, where the processing of personal data is based on your consent to the use of the website, you have the right to revoke it freely, without prejudice to the legality of the processing based on your consent, prior to revocation. To revoke your consent you can contact info@travaela.com or contact the data controller, Mr. Dimitrios Kehagias. You can also use the unsubscribe options by following the corresponding link in our online communications.
5. Duration of data retention
Your personal data is stored for so long as - in accordance with applicable law - is necessary for the execution of the contract and for the establishment, exercise and/or support of legal claims.
When processing is required by the provisions of the applicable legal framework, your personal data will be stored for as long as the relevant provisions require.
For the purposes of products’ and services’ promotion (marketing activities), your personal data is kept until your consent is revoked.
6. Personal data security & data protection officer
The company uses appropriate technical and organizational and security measures in order to protect personal data and information from loss, misuse, unauthorized access, disclosure or publication.
For the purposes of this privacy policy, you can contact the data controller, Mr. Dimitrios Kehagias, at the email address info@travaela.com for the exercise of your rights, in accordance with applicable legislation for the protection of personal data and the current privacy policy of the company.
7. Privacy policy revisions
The company reserves the right to modify or revise this privacy policy in order to comply with applicable legal or regulatory obligations, as in force from time to time. In case of amendments, the company will indicate the date of modification or revision of this privacy policy. However, you should review this privacy policy from time to time to see if there are any changes to the way you handle your personal data.
This privacy policy was last revised on 07/09/2026.
8. Cookies
We use data through cookies for the proper operation of the website, as well as information that help us provide the maximum of our services.
The types of cookies we use are:
8.1. Necessary cookies
The lack of cookies in this category affects the operation of the website. Without them, features such as logging in, searching for ferry offers, online booking and ticket purchases or online payments are not possible. Disabling such cookies means that you will not be able to use our website.
8.2. Performance & optimization cookies
These cookies store anonymous information about the behavior of users when browsing our website, usage statistics, performance, etc. The purpose is to improve the operation of the website and your experience.
8.3. Advertising cookies
Advertising cookies are used to select and display advertisements (only ours) tailored to the user's interests.
8.4. Third-party cookies
While you are browsing our site, we may link you to another company's website - such as our Facebook account, our Twitter account, etc. These websites may sometimes place cookies on your computer, which we do not control; therefore we suggest you visit their website in order to obtain relevant information.
8.5. Security cookies
We use security cookies to verify users, to prevent the illegal use of log-in credentials and to protect user data from unauthorized parties.
8.6. Managing cookies
You can grant, modify, or revoke your cookie consent preferences at any time by accessing our Cookie Settings preference tool in the footer of our website. You can also manage cookie controls via your web browser settings.
Keep in mind that disabling cookies will affect the functionality of this and many other websites you visit. Disabling cookies will result in disabling certain features of this website as well. Therefore, we recommend that you do not disable them.
For more information on cookies, please visit www.aboutcookies.org
9. AI search functionality & privacy
When you use the conversational AI search feature on our websites (the "service"), the company processes your data under specific transparency and security safeguards. This section outlines how your data is handled exclusively within this conversational AI environment.
9.1. Categories of data processed & purposes
When interacting with the AI interface, the company collects text queries, prompts, and travel preferences you enter into the interface. This may include identification data, travel routes, dates, passenger counts, and vehicle types.
We process this data for the following purposes and under the following legal bases:
Providing assistance & route planning: To interpret your requests in natural language and return accurate ferry route recommendations, schedules, and pricing options. The legal basis for this processing is the implementation of pre-contractual measures taken at your request.
Service optimization & analytics: To analyze conversation logs for statistical purposes, refine conversational flows, evaluate system accuracy, and ensure business continuity. The legal basis for this processing is the pursuit of the company's legitimate interest.
The AI search functionality operates strictly as a natural-language search interface to assist your itinerary planning. It does not involve automated decision-making, automated profiling, or any algorithmic processing that produces legal or similarly significant effects concerning the user.
9.2. Prohibiting sensitive personal information
The AI search interface is designed solely to understand general travel intent. Users are explicitly instructed not to type sensitive personal data, credit card numbers, passwords, health requirements, reduced mobility requests, or official identity document numbers (ID/passports) into the chat window. Information provided via the conversational AI interface is for informational purposes and the finalized booking contract, the secure, compliant collection of required passenger and payment details occurs exclusively within the structured forms during the final steps of the reservation process.
9.3. Third-party data & user responsibility
If you provide personal data relating to third parties (such as family members or travel companions) within the AI search interface, you act as an independent data controller and assume all legal obligations and responsibilities for that data. You must ensure such submission is based on an appropriate legal basis, and you agree to indemnify the company against any third-party claims arising from your voluntary submission of their information.
9.4. Infrastructure providers & data safeguards
To process natural language inputs efficiently, your search queries are transmitted securely to trusted third-party AI infrastructure providers acting as data processors. All data transmitted is encrypted in transit. Under strict data processing agreements, these service providers are legally prohibited from using your search data, text prompts, or travel choices to train their external or public machine learning models.
9.5. Data retention
Personal data and conversation logs collected via the AI interface are retained only for the period necessary to complete your search session, maintain operational security, and optimize system performance - up to a maximum period of 3 months (90 days). Following this period, the logs are permanently deleted or fully anonymized, without prejudice to any different limitation periods provided by law.
9.6. Exercising your rights
All user rights outlined in Section 4 apply fully to your AI search logs. You can request access to, rectification of, or deletion of your chat records at any time by contacting info@travaela.com. You also maintain the right to lodge a complaint with a competent supervisory authority.
