3. DATA RECIPIENTS (WHO ELSE HAS ACCESS TO THE DATA)

To carry out our operations, we share your data exclusively with trusted partners (data processors) under confidentiality agreements: The driver assigned to the trip: Receives your name, phone number, and pickup location to perform the trip. PayPal payment processor: If you choose to pay directly on the website, your card or account details are entered directly into the secure PayPal platform. Our website never collects, views, or stores your bank card details. In-vehicle payment service providers: Banks or mobile POS terminal providers (if paying by card in the vehicle). Accounting and Insurance: The external accounting firm (for invoicing) and the car insurance company (in the event of incidents). Google Analytics: For anonymous statistical analysis of website visits.

4. DATA RETENTION PERIOD

Tax and invoicing data: Retained for 10 years, in accordance with legal obligations imposed by the Romanian Fiscal Code. Booking form data: (Name, phone number, route) are deleted or anonymized from our database within [recommended: 30 or 90] days of the trip's completion, as they are no longer required thereafter.

5. YOUR RIGHTS Under GDPR:

As a visitor and customer, you have the following rights, which you can exercise by simply sending an email to [YOUR EMAIL ADDRESS]: Right of access: You may request a copy of the data we hold about you. Right to rectification: You may request the correction of incorrect data (e.g., an incorrect phone number in a reservation). Right to erasure ("right to be forgotten"): You may request the deletion of your data, except for data we are legally required to retain (such as issued invoices). Right to restrict processing or to object: You may object to data collection via Google Analytics by declining cookies when entering the site. Right to lodge a complaint: If you believe your rights have been violated, you may contact the National Supervisory Authority for Personal Data Processing (ANSPDCP) in Romania.