This Privacy Policy explains how Italy Taxi Service ("we", "us", "our") collects, uses, stores, and protects personal data in accordance with the EU General Data Protection Regulation (GDPR), Italian Legislative Decree 196/2003 (as amended by D.Lgs. 101/2018), and all applicable Italian privacy law. Please read this policy carefully before using our services.
1. Introduction
Italy Taxi Service operates private ground transportation services across Italy, including airport transfers, city-to-city transfers, hourly chauffeur hire, private sightseeing tours, and wedding and event transportation.
In order to provide these services, we necessarily process personal data belonging to our customers, including contact details, travel information, and payment references. We take this responsibility seriously and are committed to handling your data with care, transparency, and in full compliance with applicable law.
This policy applies to all data collected through our website at www.italytaxiservice.com, through our email correspondence, through WhatsApp, and through any other channel through which you contact or book with us.
2. Data Controller
The data controller responsible for your personal data is:
If you have any questions or concerns about how your personal data is processed, you may contact us at the address above at any time.
3. Data We Collect
We collect only the personal data that is necessary to provide our services and fulfil our legal obligations. The categories of data we collect include:
3.1 Data You Provide to Us
- Identity data: First name, last name
- Contact data: Email address, phone number, WhatsApp number
- Booking data: Pickup and drop-off addresses, travel date and time, flight number, number of passengers, luggage count, special requirements (child seats, accessibility needs)
- Payment data: Card type and last four digits (full card numbers are processed by our payment provider and never stored by us), billing address where applicable
- Communications: Content of emails, WhatsApp messages, and other correspondence you send to us
3.2 Data Collected Automatically
- Usage data: Pages visited, time spent on pages, browser type, device type, and IP address
- Cookie data: Session identifiers and preference cookies (see Section 9 below)
3.3 Data We Do Not Collect
We do not knowingly collect sensitive personal data (special category data under GDPR), including racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data. We do not knowingly collect data from children under 16 years of age.
4. How We Use Your Data
We use your personal data for the following purposes:
- Booking fulfilment: Processing, confirming, and managing your transfer reservation
- Driver dispatch: Sharing your name, pickup location, and contact number with the assigned driver
- Flight tracking: Using your flight number to monitor arrival times and adjust pickup scheduling
- Communication: Sending booking confirmations, driver details, and journey reminders
- Payment processing: Facilitating and recording payment for services rendered
- Customer support: Responding to enquiries, complaints, and service feedback
- Legal compliance: Meeting obligations under Italian tax law, accounting standards, and applicable transport regulations
- Service improvement: Analysing anonymised usage data to improve our website and booking process
- Marketing (with consent): Sending promotional emails or newsletters only where you have explicitly opted in
We will never sell your personal data to third parties. We will never use your data for purposes incompatible with those listed above without seeking your prior consent.
5. Legal Basis for Processing
Under GDPR, we must have a lawful basis for each type of data processing. Our legal bases are:
| Processing Activity | Legal Basis |
|---|---|
| Booking and delivering your transfer | Performance of a contract (Art. 6(1)(b) GDPR) |
| Processing payment | Performance of a contract (Art. 6(1)(b) GDPR) |
| Sending booking confirmations | Performance of a contract (Art. 6(1)(b) GDPR) |
| Maintaining accounting records | Legal obligation (Art. 6(1)(c) GDPR) |
| Improving our services | Legitimate interests (Art. 6(1)(f) GDPR) |
| Sending marketing communications | Consent (Art. 6(1)(a) GDPR) |
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention periods are:
- Booking records: 7 years from the date of service (required for Italian tax and accounting compliance)
- Customer communications: 2 years from the last interaction
- Payment records: 7 years (required for financial record-keeping under Italian law)
- Marketing consent records: Until consent is withdrawn or 3 years from last engagement, whichever is earlier
- Website usage logs: 12 months
After the applicable retention period, data is securely deleted or anonymised so that it can no longer be attributed to any individual.
8. Your Rights Under GDPR
As a data subject under GDPR, you have the following rights regarding your personal data. You may exercise these rights at any time by contacting us at info@italytaxiservice.com.
Right of Access
Request a copy of the personal data we hold about you (a Subject Access Request).
Right to Rectification
Request correction of inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your personal data ('right to be forgotten') where there is no legal basis to retain it.
Right to Restrict Processing
Request that we limit how we use your data while a dispute is resolved.
Right to Data Portability
Receive your data in a structured, machine-readable format for transfer to another provider.
Right to Object
Object to processing based on legitimate interests, including direct marketing.
Right to Withdraw Consent
Withdraw consent for marketing communications at any time without affecting prior processing.
Right to Lodge a Complaint
File a complaint with the Italian Data Protection Authority (Garante).
We will respond to all rights requests within 30 days. In complex cases, we may extend this by a further two months and will notify you accordingly. We will never charge a fee for legitimate data subject requests.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include:
- SSL/TLS encryption for all data transmitted between your browser and our website
- Access controls restricting data access to authorised personnel only
- Regular security reviews and software updates
- PCI-DSS compliant payment processing
- Contractual obligations imposed on all data processors (drivers, IT providers) to maintain equivalent standards
In the unlikely event of a personal data breach that poses a high risk to your rights and freedoms, we will notify you and the Italian Data Protection Authority (Garante) without undue delay and in accordance with GDPR Article 33 and 34 requirements.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email.
We encourage you to review this policy periodically. Continued use of our services after an update constitutes acceptance of the revised policy.
12. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us:
Italy Taxi Service — Data Enquiries
If you are not satisfied with our response, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).