Privacy Policy
Last updated: October 11, 2026
1. Data Controller
The data controller responsible for processing personal data in connection with GastosConduccion is:
Dimitrios G. Papadimitriou E.E.
Papakiriazi 3
41223 Larissa, Greece
European Union
Email:
This policy applies to gastosconduccion.com, portal.gastosconduccion.com, api.gastosconduccion.com, and associated services operated by the company.
2. Personal Data We Process
Depending on the services used, we may process:
- Account information, including email addresses and user identifiers.
- Authentication, session, and login verification data.
- IP addresses, technical logs, request timestamps, and security-related information.
- Customer identifiers, API keys, usage quotas, and consumption statistics.
- Addresses, coordinates, origins, destinations, and other parameters submitted to the API.
- Information provided through inquiries and customer support requests.
Addresses and coordinates may constitute personal data when they directly or indirectly identify an individual. Customers should avoid submitting unnecessary personal data.
3. Purposes and Legal Bases
We process personal data for the following purposes:
- Service delivery: registration, authentication, portal access, and API functionality. Legal basis: performance of a contract or pre-contractual measures.
- Security: abuse prevention, account protection, and request monitoring. Legal basis: legitimate interests.
- Support: responding to inquiries and customer requests. Legal basis: contractual necessity or legitimate interests, as applicable.
- Legal obligations: retention of tax and accounting documentation. Legal basis: compliance with legal obligations.
Where processing requires consent, we will obtain it in accordance with applicable law.
4. Authentication Through Clerk and Google
We use Clerk for user authentication and account management.
When Google Sign-In is used, we may receive basic account information such as a user identifier, name, email address, and basic profile information, according to the permissions authorized.
We do not request access to Gmail content, Google Drive files, or unrelated Google account data.
5. API Usage and Location Data
Our API processes geocoding parameters, routes, coordinates, distances, and toll information to provide requested results.
Customers integrating our API must have an appropriate legal basis for personal data submitted to the service and must inform their end users where required. Data protection responsibilities will be established contractually where necessary.
6. Technology Providers
We use third-party technology services, including:
- Clerk: authentication and user account management.
- Google: Google Sign-In and other services actually integrated into the website.
- Cloudflare: infrastructure, security, component hosting, and technical storage.
- Hosting providers: website operation, routing, geocoding, and databases.
We do not sell personal data to third parties.
If we introduce Stripe payments in the future, we will update this policy before activating that functionality.
7. Cookies and Local Storage
Our website and portal may use cookies and similar technologies necessary for navigation, authentication, security, and session management, including those used by Joomla and Clerk.
User preferences may also be stored locally in the browser without being linked to the user's identity or transmitted to our servers.
Where non-essential cookies require consent, we will provide the appropriate information and consent mechanisms.
Users can manage cookies through their browser settings. Disabling necessary cookies may affect service functionality.
8. Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy and applicable legal obligations.
Personal data that is no longer required will be deleted or anonymized within a maximum of 30 days after the need for processing ends or after validation of an eligible erasure request, unless a legal obligation or another valid legal basis requires retention.
Tax and accounting documents will be retained for the periods required by applicable law.
Retention periods applied by external providers and backup systems may be subject to their own technical cycles and legal obligations.
9. International Data Transfers
Our company is established in Greece, within the European Union. Some providers may process information outside the European Economic Area.
Where applicable, we will use transfer mechanisms recognized under the General Data Protection Regulation, including adequacy decisions and Standard Contractual Clauses, together with any necessary additional safeguards.
10. Security
We implement appropriate technical and organizational measures to protect personal data, including authentication controls, access restrictions, and infrastructure security mechanisms.
11. Data Protection Rights
Under the General Data Protection Regulation (GDPR), individuals may exercise, where applicable, their rights of access, rectification, erasure, restriction, objection, portability, and withdrawal of consent.
Requests may be submitted to
We may request reasonable identity verification. We normally respond within one month, subject to legally permitted extensions.
12. Account Deletion
Users may request account deletion manually
by sending an email to
Following any necessary verification, we will revoke associated access and delete or anonymize personal data that must be erased, in accordance with the retention periods stated in this policy.
Certain information may be retained where required by law or supported by another valid legal basis.
13. Complaints
Individuals may lodge a complaint with a competent data protection supervisory authority. In Greece, the supervisory authority is the Hellenic Data Protection Authority (HDPA) .
14. Changes to This Policy
We may update this policy to reflect legal, technical, or operational changes. We will publish the updated version and communicate significant changes where appropriate.
15. Contact
Dimitrios G. Papadimitriou E.E.
Papakiriazi 3, 41223 Larissa, Greece