Privacy Policy

This Privacy Policy explains how VeriTrip, operated by Conte Travelers IKE ("Company", "we", "our", or "us"), collects, uses, processes, stores, and protects personal data when users access or use the VeriTrip platform, website, mobile applications, and related services.

The Company is committed to protecting personal data in accordance with Regulation (EU) 2016/679 (GDPR), Greek Law 4624/2019, applicable ePrivacy legislation, and other relevant European Union and Greek legal frameworks relating to privacy and digital services.

VeriTrip is a travel organization and trip management platform that allows users to manage itineraries, upload travel-related documents, organize travelers, monitor payments, receive notifications, and use AI-assisted travel tools and recommendations.

The Company may collect personal information including names, email addresses, phone numbers, nationality information, passport details, visa information, insurance information, emergency contacts, traveler-related notes, payment-related information, booking confirmations, uploaded screenshots, PDFs, travel itineraries, travel schedules, and communications submitted through the Platform.

Where users upload information relating to third parties or other travelers, users represent and warrant that they have obtained all necessary permissions and legal authority to share and process such information through the Platform.

Certain uploaded information may include sensitive or highly confidential travel-related data. Users are encouraged to upload only information necessary for the intended travel-related functionality of the Platform.

Personal data is processed for purposes including account management, trip organization, traveler coordination, itinerary generation, booking verification, payment monitoring, AI-powered document analysis, fraud prevention, customer support, service improvement, technical maintenance, security monitoring, legal compliance, and communication with users.

The Platform may use artificial intelligence systems, OCR technologies, automated document parsing systems, and third-party AI providers to analyze uploaded travel documents, screenshots, booking confirmations, PDFs, or traveler-related data in order to generate structured outputs, travel summaries, alerts, reminders, or recommendations.

AI-generated outputs may contain inaccuracies or incomplete information. Users remain responsible for independently verifying all travel-related information and automated outputs.

The Company processes personal data based on one or more lawful grounds under Article 6 of the GDPR, including user consent, contractual necessity, legitimate interests, legal obligations, and security-related operational requirements.

Personal data may be stored or processed using third-party infrastructure providers, hosting systems, cloud storage providers, authentication providers, analytics providers, communication providers, payment processors, AI providers, mapping providers, and external APIs.

Some providers may process data outside the European Economic Area. Where international data transfers occur, the Company implements commercially reasonable safeguards and contractual protections intended to comply with applicable GDPR requirements.

The Company implements commercially reasonable technical and organizational measures intended to protect personal data against unauthorized access, accidental loss, misuse, disclosure, alteration, or destruction. However, no online platform, cloud infrastructure, API integration, or internet transmission method can guarantee absolute security.

Users are responsible for maintaining secure passwords, protecting account access, safeguarding exported or downloaded files, and protecting the devices used to access the Platform.

Users are strongly encouraged to avoid publicly sharing combinations of booking references, travel credentials, passport information, reservation codes, or traveler data that could permit unauthorized access to reservations or travel accounts through third-party systems.

Personal data is retained only for as long as reasonably necessary for the operation of the Platform, legal compliance, dispute resolution, fraud prevention, security purposes, and legitimate business operations.

Users may request access, rectification, deletion, restriction of processing, objection to processing, withdrawal of consent, or portability of personal data in accordance with applicable data protection laws.

Users may also lodge complaints with the competent supervisory authority, including the Hellenic Data Protection Authority.

The Platform may contain links, integrations, or connections to third-party services, websites, booking systems, maps, or providers. The Company is not responsible for the privacy practices, content, or policies of third-party services.

The Company may modify this Privacy Policy from time to time. Updated versions become effective upon publication on the Platform. Continued use of the Platform after publication of updated versions constitutes acknowledgment of the revised Privacy Policy.