Privacy notice
This notice explains how we process the personal data of visitors to blacklimo.app and of people who book a chauffeur service, under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003.
1. Data controller
Black Limo Società Cooperativa (“Blacklimo”), Piazza della Libertà 11, 00065 Fiano Romano (RM), Italy, VAT IT17103381004. For any privacy request: support@blacklimo.app.
2. What data we process
- Booking data: pick-up and drop-off addresses, date and time, return trip if any, number of passengers and bags, chosen vehicle, flight or train number and notes for the chauffeur (if you enter them).
- Contact data: the passenger’s first name, last name, email and phone number.
- Invoice data (only if you request an invoice): company or personal name, VAT number or tax code, SDI code or PEC, address.
- Payment data: card details are entered directly in Stripe’s forms and never pass through our servers. We only receive the outcome, the amount and a payment reference.
- Browsing data: IP address and technical device data logged by the server for security and, only with your consent, statistics and advertising data collected with Google cookies (see section 8).
3. Why we process it and on what legal basis
- Handling your booking and providing the service (quote, confirmation, trip communications, chauffeur contact): performance of a contract, Art. 6(1)(b) GDPR.
- Collecting payment and preventing fraud: performance of a contract and legitimate interest, Art. 6(1)(b) and 6(1)(f).
- Invoicing and tax/accounting obligations: legal obligation, Art. 6(1)(c).
- Website security and defending our rights: legitimate interest, Art. 6(1)(f).
- Usage statistics and advertising measurement (Google Analytics, Google Ads): only with your consent, Art. 6(1)(a), which you can withdraw at any time.
Booking and contact data are required to book: without them we cannot provide the service. Consent to analytics and marketing cookies is optional and the website works even if you refuse.
4. Who receives the data
We do not sell your data. Only the providers needed for the service process it on our behalf, as data processors:
- Hostinger International Ltd: website and database hosting, on servers in France (EU), and sending of confirmation emails.
- Stripe Payments Europe Ltd (Ireland): online payments. If you choose Klarna, Klarna processes the data needed for the payment as an independent controller, under its own privacy notice.
- Google Ireland Ltd: company mailbox (Google Workspace); address suggestions (Google Maps Platform), which receives the text typed in the address field; with your consent, Google Analytics and Google Ads.
- OpenStreetMap-based services: route distance and time (OSRM router) and, only if Google is unavailable, address search (Nominatim). Requests are sent from our server and contain coordinates or the address text, not your contact details.
- OpenFreeMap: tiles of the route mini map, loaded by your browser.
- Chauffeurs and NCC partners assigned to your ride, who receive the data needed for the trip (name, phone, times, addresses, flight and notes).
- Tax advisers and authorities, where required by law.
5. Transfers outside the European Union
Some providers (Google, Stripe) belong to groups based in the United States and may process data outside the EU. Such transfers rely on the EU-U.S. Data Privacy Framework and/or the Standard Contractual Clauses approved by the European Commission.
6. How long we keep data
- Paid bookings and invoice data: 10 years, as required by Italian civil and tax law (Art. 2220 Civil Code).
- Incomplete bookings (payment never completed): automatically deleted after 30 days.
- Emails exchanged with us: as long as needed to handle the request, and no longer than the retention period of the related booking.
- Your cookie choice: 12 months, then we ask for consent again.
- Google Analytics data: for the period set in the service, at most 14 months.
- Technical caches of routes and addresses (coordinates and searched text only, no contact data): 24 hours to 7 days.
7. Security
The website only uses encrypted connections (HTTPS). Booking data is stored outside the public area of the server and the back office is password-protected. We do not record personal data in application logs.
8. Cookies and similar technologies
On your first visit a banner asks for your consent. You can change your mind at any time from the “Cookie preferences” link at the bottom of every page.
- Technical (always on): they store your cookie choice and make booking and payment work (including Stripe’s anti-fraud tools). No consent is required.
- Analytics (with consent): Google Analytics 4, for statistics on visits and website use.
- Marketing (with consent): Google Ads, to measure bookings generated by our campaigns. With this consent, at payment time your email and phone are sent to Google in hashed form to attribute conversions correctly (“enhanced conversions”).
If you refuse, Google only receives anonymous technical signals without cookies (Google Consent Mode). The website also loads fonts from Google Fonts, which receives your device’s IP address.
9. Your rights
You may at any time request access to your data, rectification, erasure, restriction of processing, data portability, and object to processing based on legitimate interest (Arts. 15–22 GDPR), by writing to support@blacklimo.app. You can withdraw your cookie consent at any time, without affecting processing already carried out. We reply within 30 days.
You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or the authority of your country of residence.
10. Minors
Bookings must be made by adults. We do not knowingly collect data about minors, except passenger information provided by the person booking for them.
11. Changes
We may update this notice to reflect changes to the service or the law. The date of the last update is shown at the top of the page.