Last updated: 29 October 2026
This Privacy Policy explains what personal data Ciao Transfer collects, why, how long we keep it and what rights you have. It applies to our website myciaotransfer.com, to bookings and quotes made by email, phone or WhatsApp, and to the transfers we provide. For cookies, please read our Cookie Policy.
At a glance
- We use your data only to organise and perform your transfer and to meet our legal duties.
- We never sell your data and we send no newsletters or advertising emails.
- Analytics and advertising cookies only with your consent.
- Bookings and invoices are kept 10 years (Italian tax law); other messages 2 years.
- Your rights: write to info@myciaotransfer.com — we reply within one month.
1. Who is responsible for your data
- Data controller: Ciao Transfer di Daniel Belea (sole proprietorship), VAT number IT18307151003
- Registered office: Via Vocabolo Giardino 54, 05020 Alviano (TR), Italy
- Operating base: Via Vigna del Piano 29, 00060 Riano (RM), Italy
- Contact for privacy questions: info@myciaotransfer.com — Phone/WhatsApp +39 388 791 3429
We are a small business and have not appointed a Data Protection Officer, as the law does not require one for our activity.
2. What data we collect
When you book or ask for a quote:
- name of the lead traveller, email address and phone number (often a WhatsApp number);
- pickup and drop-off addresses, date and time, flight, train or ship details;
- number of passengers and luggage, vehicle chosen, extras (such as child seats with the child's age) and any notes you write;
- the price, the payment method chosen and the payment status.
When you pay online: card and PayPal payments are handled by Stripe, PayPal or SumUp. We never see or store your full card number; we only receive a confirmation of the payment.
When you contact us: the messages you send by email, WhatsApp, phone or the contact form on our website.
Special needs: if you tell us about a passenger's reduced mobility or other needs, we use that information only to organise the ride, because you chose to give it to us.
When you visit our website: technical data such as your IP address, browser and pages visited (in our hosting and security logs), and, only if you accept cookies, analytics and advertising data. Details are in our Cookie Policy.
3. Why we use your data and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering your request and sending a quote | Steps you ask for before a contract (art. 6(1)(b)) |
| Organising and performing your transfer, including sharing your name, phone, pickup details and flight with the driver | Performance of the contract (art. 6(1)(b)) |
| Taking payments and issuing receipts and invoices; keeping accounting and NCC service records | Legal obligation (art. 6(1)(c)) |
| Asking you, after your ride, for a review on Google, TripAdvisor or Trustpilot | Legitimate interest (art. 6(1)(f)); you can say no at any time |
| Protecting the website and our business from fraud, spam and misuse | Legitimate interest (art. 6(1)(f)) |
| Website statistics and measuring our ads | Your consent through the cookie banner (art. 6(1)(a)) |
| Defending our rights in a dispute | Legitimate interest (art. 6(1)(f)) |
We do not send newsletters or advertising emails, and we never sell your personal data. We make no decisions about you by automated means.
If you do not give us the details needed for a booking (for example, a pickup address or a phone number), we cannot provide the transfer.
4. Who receives your data
We share your data only when needed, and only with:
- our drivers and partner NCC operators, when they perform your ride;
- service providers who work for us (data processors): Hostinger (website and email hosting), Cloudflare (website security), Google (email, Maps, reCAPTCHA, Analytics and Ads), Stripe, PayPal and SumUp (payments), OpenAI (ad measurement, only with your consent), CookieYes (cookie banner), Trustindex (review display), Meta/WhatsApp (messages you send us), and our invoicing software;
- our accountant, for tax and accounting duties;
- travel agencies or platforms, if you booked your transfer through them; they are responsible for the data they collect;
- public authorities, when the law requires it.
5. Transfers outside the European Union
Some of these providers store or process data in the United States (for example, our website is hosted in a US data centre, and Google, Cloudflare, Stripe, PayPal, OpenAI and Meta are US companies). These transfers are protected by the EU–US Data Privacy Framework, where the provider is certified, or by the European Commission's Standard Contractual Clauses.
6. How long we keep your data
| Data | How long |
|---|---|
| Bookings, receipts, invoices and payment records | 10 years, as required by Italian tax and accounting law |
| Quotes and messages that did not become a booking | 2 years from our last contact |
| Contact form messages | 2 years |
| Website security logs | a limited period, normally up to 12 months |
| Cookie choices and cookie data | as described in our Cookie Policy |
After these periods, we delete the data or make it anonymous.
7. Your rights
Under the GDPR you can, at any time and free of charge:
- access your data and get a copy;
- correct data that is wrong or incomplete;
- ask us to delete your data, unless we must keep it by law (for example, invoices);
- ask us to restrict how we use it;
- receive your data in a common format (portability);
- object to uses based on our legitimate interest, including review requests;
- withdraw your consent to cookies at any time with the Cookie Settings button.
To use your rights, write to info@myciaotransfer.com. We reply within one month, usually much sooner. If you think we have not handled your data correctly, you can complain to the Italian data protection authority, the Garante per la protezione dei dati personali, or to the authority in your country.
8. Visitors from the United States and other countries
We apply the same protection to every client, wherever you live. We do not sell or rent personal information, and we do not share it for money. You can switch off advertising cookies at any time with the Cookie Settings button, and you can ask us to access or delete your data by writing to info@myciaotransfer.com.
9. Children
Our services are booked by adults. We do not knowingly collect data directly from anyone under 18. If you travel with children, we only collect what you give us to organise the ride safely, such as the age of a child who needs a child seat.
10. Security
We protect your data with secure connections (HTTPS), access limited to the people who need it, and providers that meet European security standards. Card payments are handled only by certified payment providers.
11. Changes to this policy
We may update this policy when our services, our providers or the law change. The date at the top shows the latest version.
12. Contact
For any question about your data: info@myciaotransfer.com, or by post to Ciao Transfer, Via Vigna del Piano 29, 00060 Riano (RM), Italy.
Page Contents
Toggle
