Basic data processing information

1. Data controller

Lucrum Faciunt

2. What data we process

When users contact Premium Taxi Zagreb to request a booking, they may provide basic data needed to organize the ride:

full name
phone number or e-mail
pickup and destination address
ride date and time

3. Purpose and legal basis

Data is used for user communication, inquiry handling, transport service preparation and delivery, and legal compliance.

Service performance / pre-contractual steps: handling inquiries and organizing rides.
Legitimate interest: security, abuse prevention, and basic website functionality.
Consent: anonymous usage counters, Google measurement, and marketing technologies are used only with your permission.

4. Cookies and local storage

We use the following cookie/local-storage categories:

Required: necessary for website security and operation (cannot be disabled).
Analytics (optional): anonymous aggregate visit and click counters and Google measurement.
Marketing (optional): ad performance and remarketing (Google Ads).

Your choice is stored in browser local storage under ptz_cookie_consent_v2 for up to 6 months. You can change or withdraw consent at any time via “Cookie settings” in the footer.

5. Anonymous website statistics

After analytics consent, we record only aggregate daily counts: page opening, page language and path, and clicks on call, WhatsApp, Viber, e-mail, booking, language switching, and starting or completing the fare calculator.

We do not store names, contact details, IP addresses, message contents, entered addresses, coordinates, fare amounts, unique device identifiers, or individual browsing histories in the Cloudflare D1 statistics database. Paths are stored without query parameters and aggregated by day, event, and language.

Aggregate counters are retained for up to 24 months and are available only in the protected admin panel. Cloudflare, as hosting and security provider, may separately process network data including IP addresses under its own security-log policies and retention periods.

6. Google Ads and third-party services

If analytics or marketing consent is granted, Google tag may be loaded with the relevant Consent Mode settings. Advertising storage, ad personalization, and advertising measurement remain disabled until marketing consent is granted.

When users click WhatsApp or Viber, further communication follows those service providers' own policies. Calls and SMS operate over BonBon mobile network, and e-mail communication uses the relevant e-mail provider. We do not control the internal processing of those external providers (for example transport metadata or security logs).

When a user chooses an external contact channel, information they send, such as phone number, address, coordinates, or location, is transferred to that provider for communication and service delivery. We recommend reviewing the provider's privacy policy before use.

Prices and tariff details are displayed according to the current price list.

7. Recipients, retention, and user rights

Recipients may include Cloudflare as hosting and D1 provider, Google when measurement or marketing has been approved, and the communication provider selected by the user. Data is processed only where required for service delivery, technical maintenance, or legal obligations.

Booking-related communication (WhatsApp, Viber, SMS, e-mail, and call logs) is stored until deletion request, unless regulation requires a longer retention period.

Users may request access, correction, deletion, processing restriction, and data portability, object to processing, and withdraw consent for optional technologies at any time. For requests, contact us using the e-mail above. Users may also lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).

8. Privacy policy updates

This policy may be updated periodically to reflect legal or technical changes. The current version is always available on this page.