This Privacy Policy outlines how AUTOLINK collects, uses, and protects your personal data. We act as the Data Controller under the General Data Protection Regulation (GDPR).

We collect data necessary to provide our 24/7 roadside assistance dispatch and coordination services:

We collect your data directly from you when you contact us via phone calls, our website web-call button (operated by our automated AI voice intake system), WhatsApp, Viber, email, or online forms to request assistance (including the phone number entered prior to initiating a free web-call). We also receive operational status updates (such as arrival time and completion confirmation) from the independent local operator assigned to your case.

We process your personal data strictly under the following lawful bases in accordance with Article 6(1) of the GDPR:

Your data is used specifically to locate you, transcribe and verify your breakdown details via our AI voice system, select and dispatch the nearest appropriate independent tow truck or roadside operator, process your payment securely, communicate real-time updates during the service, prevent system abuse, defend against unjustified payment disputes (chargebacks), and maintain mandatory accounting records under Greek and EU law.

Independent Local Operators: We share your GPS location, vehicle details, name, and phone number exclusively with the independent local towing/roadside operator assigned to assist you. These operators act as independent controllers/contractors with respect to the physical execution of the transport.

Payment Processors: We share transaction and billing data with regulated payment providers (such as Revolut, Stripe, Visa/Mastercard networks) to process payments and prevent fraud. All processors operate under GDPR-compliant frameworks and Data Processing Agreements (Art. 28 GDPR).

Messaging Platforms: When you choose to contact us via WhatsApp (Meta Platforms Ireland Ltd. / Meta Platforms, Inc.), Viber (Viber Media S.à r.l.), your communication is additionally subject to their respective privacy policies.

Accounting, e-Invoicing Software & Tax Authorities: For billing and statutory tax compliance, invoice data is processed via certified cloud invoicing/accounting software and transmitted to the Greek Independent Authority for Public Revenue (AADE / myDATA platform) in accordance with Art. 6(1)(c) GDPR.

Our headquarters are located in Greece, and we coordinate services across the European Union / EEA as well as non-EEA European transit countries (such as Serbia).

Transfers to Non-EEA Operators: If your breakdown occurs in a non-EEA country (e.g., Serbia), transferring your location and contact details to the local towing operator is strictly necessary for the performance of the contract with you pursuant to Article 49(1)(b) of the GDPR.

US & Third-Country Tech Providers: Where sub-processors (such as Google LLC, Microsoft Corporation, Meta Platforms Inc., or Retell AI) process data in the United States, transfers are safeguarded via certification under the EU-US Data Privacy Framework (DPF) and/or the European Commission's Standard Contractual Clauses (SCCs) pursuant to Article 46(2)(c) GDPR.

We retain your personal data only as long as necessary for the purposes collected:

We implement strict technical and organizational measures (TOMs) to prevent unauthorized access, alteration, or loss of your data, including TLS/SSL encryption, strict access controls, and secure cloud infrastructure.

Under the GDPR (Articles 15–22), you have the right to request access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and to object to processing based on legitimate interests. Where processing is based on your consent (including call recording), you may withdraw your consent at any time with future effect.

To exercise your rights, please contact us via the email address displayed in Section 1 of this Policy. We respond to all legitimate requests within 30 days.

Supervisory Authority: You have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA – www.dpa.gr, email: contact@dpa.gr) or with the data protection supervisory authority of your EU Member State of habitual residence.

Our website utilizes cookies and similar technologies. Non-essential cookies (analytical and marketing) are only set after you grant explicit consent via our Cookie Consent Banner (pursuant to Art. 6(1)(a) GDPR). We implement Google Consent Mode v2 to ensure your privacy preferences are respected across all Google services.

• Google Analytics 4 (GA4): Provided by Google Ireland Limited. Uses cookies to analyze website usage with IP anonymization enabled.
• Google Ads Conversion Tracking: We use Google Ads to measure the effectiveness of our advertising campaigns across Europe. If you reach our website via a Google ad and have consented to marketing cookies, a conversion cookie records whether you contacted dispatch.
• You can revoke or adjust your consent at any time via the "Cookie Settings" link in the footer or block Google Analytics via https://tools.google.com/dlpage/gaoptout.

We may update this policy periodically to reflect operational, technical, or legal changes. The version number and date at the top indicate the latest revision.

For all privacy-related inquiries or to exercise your GDPR rights, please use the official contact details (Email, Phone, and Postal Address) displayed in the Company Information section (Section 1) at the top of this page.

Our operations involve the following categories of third-party service providers:

To protect our 24/7 emergency dispatch lines against automated spam, bot attacks, and fraudulent calls, and to ensure rapid intake of breakdown details, our website utilizes the following mechanisms:

• IP Address & Browser Storage (localStorage): Used strictly to enforce call rate limits (maximum two web-calls per 60 minutes and a 60-second cooldown) based on our legitimate interest in maintaining emergency system availability (Art. 6(1)(f) GDPR and § 25(2) No. 2 TDDDG).
• Google reCAPTCHA: Protects web forms and call buttons against automated abuse. Where required, it is loaded in accordance with your consent settings or upon direct interaction to initiate a service request.
• AI Voice Recording & Transcription (Retell AI): When you initiate a free web-call on our website or call our automated dispatch line, your voice conversation is recorded and transcribed in real time by our AI voice assistant (Retell AI). This processing is based on your explicit consent (Art. 6(1)(a) GDPR) and pre-contractual necessity (Art. 6(1)(b) GDPR) to immediately capture your GPS location, vehicle issue, and phone number so a human dispatcher or WhatsApp agent can coordinate your roadside assistance without delay. If you do not wish your voice call to be recorded, you may terminate the call immediately and contact us via text on WhatsApp or email instead. Providing your phone number prior to starting a free web-call is required for anti-spam verification and emergency callback if the browser connection drops.

With your explicit consent (Art. 6(1)(a) GDPR), we use Microsoft Clarity to understand how users interact with our website through behavioral metrics and heatmaps to optimize our emergency request interface. All sensitive input fields are masked by default. For details, visit: https://privacy.microsoft.com/en-us/privacystatement