This policy explains how we handle your personal data when you visit airportsplittransfer.com, request a transfer or day trip, or contact us. We process personal data in line with the EU General Data Protection Regulation (GDPR) and the Croatian Act on the Implementation of the GDPR.
1. Who is responsible for your data
The data controller is:
Airport Split Transfer / Taxi De Niro Split
Put Vele Meje 12, 21212 Kaštel Sućurac, Croatia
OIB: 76407755281
Email: info@airportsplittransfer.com
Phone / WhatsApp: +385 91 785 6056
For any question about your data or to exercise your rights, write to us at the email address above.
2. What data we collect
When you request a transfer or day trip, we collect the details you enter in the booking form:
- full name, email address and phone number;
- pickup and drop-off address (including map coordinates when you pick an address suggestion), date and time;
- return date and time, flight number, number of passengers and suitcases, chosen vehicle and quoted price;
- any notes you add, for example child seats or special requests;
- the website language you booked in.
When you contact us by email, phone or WhatsApp, we receive your contact details and the content of your message.
When you browse the website, our hosting provider automatically records technical data such as IP address, browser type and time of access, which is needed to deliver the site securely. Analytics data is collected only if you consent to it (see section 7).
We do not ask for special categories of data. Please do not include health or other sensitive information in the notes field unless it is needed for your transfer (for example, a wheelchair).
3. Why we use your data and on what legal basis
- To arrange and carry out your transfer confirming the booking, planning the pickup, tracking your flight, contacting you on the day and sending the confirmation email. Legal basis: performance of a contract and steps before entering into it (Art. 6(1)(b) GDPR).
- To answer your questions sent by email, phone or WhatsApp. Legal basis: Art. 6(1)(b) GDPR, or our legitimate interest in replying to enquiries (Art. 6(1)(f) GDPR).
- To keep accounting and tax records of completed services. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
- To keep the website secure and working, and to prevent misuse of the booking form. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- To understand how the website is used through Google Analytics. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
We do not use your data for automated decision-making or profiling, and we do not sell it.
4. Who receives your data
Your data is seen only by the people who need it to deliver your transfer. Our team and the driver assigned to your booking. We also use these service providers, who process data on our behalf under data processing agreements:
- Netlify, Inc. website hosting and receipt of booking form submissions;
- Resend delivery of booking confirmation emails;
- Google Google Maps address suggestions and distance calculation when you type an address in the booking form and Google Analytics (only with your consent);
- WhatsApp (Meta) only if you choose to contact us on WhatsApp.
We may disclose data to public authorities where the law requires it.
5. Transfers outside the EU
Some of the providers above are based in the United States. Where data leaves the European Economic Area, it is protected by the EU–U.S. Data Privacy Framework or by the European Commission's Standard Contractual Clauses.
6. How long we keep your data
- Booking data is kept for as long as needed to carry out the transfer and handle any follow-up questions or complaints, and for no longer than 24 months after the transfer date.
- Where a booking is part of our accounting records, those records are kept for the period required by Croatian accounting and tax law.
- Messages sent to us are kept for as long as needed to deal with your enquiry.
- Analytics data is kept for no longer than 14 months.
7. Cookies
We use a small number of cookies:
- region a necessary cookie that records only whether you are visiting from the EU/EEA/UK, so we know whether to show the cookie banner (kept for 30 days);
- klaro-consent a necessary cookie that remembers your cookie choice (kept for 12 months);
- _ga, _ga_* Google Analytics cookies, set only if you accept analytics.
You can change your choice at any time with the “Cookie Preferences” link at the bottom of every page.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and receive a copy;
- have inaccurate data corrected;
- have your data erased where there is no legal reason for us to keep it;
- restrict or object to processing based on our legitimate interest;
- receive your data in a portable format;
- withdraw your consent at any time, without affecting processing carried out before the withdrawal.
To use any of these rights, email info@airportsplittransfer.com. We reply within one month.
You also have the right to lodge a complaint with the Croatian supervisory authority: Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.
9. Security
The website is served only over encrypted HTTPS connections, and access to booking data is limited to the people who need it to deliver your transfer.
10. Changes to this policy
We may update this policy when our services or the law change. The date at the top of the page shows when it was last updated.