Privacy Policy

Scope

This policy applies to personal data processed in connection with royalcomfortride.com and related subpages (including city and language variants), our booking flows, email and WhatsApp communications, and the delivery of transport services we arrange or perform. It does not govern third-party websites linked from our site; their own privacy notices apply.

Data controller

The controller of your personal data is the business operating under the name ROYAL COMFORT RIDE, with contact address:

Mlini, Pod križem 18, Croatia

Email: info@royalcomfortride.com

Where we act as a processor on behalf of another organisation, that relationship will be governed by a separate agreement; this policy applies where we determine the purposes and means of processing as a controller.

Categories of personal data

Depending on how you interact with us, we may process:

• Identity and contact data: name, email address, telephone number, WhatsApp identifier, country of residence (if provided).
• Booking and trip data: pickup and drop-off addresses or places, dates and times, route preferences, flight or vessel numbers (if provided), number of passengers, luggage description, vehicle category, special assistance needs, child seat or booster requirements, notes you add to a booking or form.
• Payment-related data: payment status and limited transaction references as required to confirm payment; card data is typically processed directly by payment providers—we do not store full card numbers on our servers unless a specific integration explicitly requires it and is disclosed to you.
• Communication content: messages you send by email, WhatsApp, web forms or other channels.
• Technical and usage data: IP address, browser type, device type, approximate location derived from IP, pages viewed, referral source, date/time of access, and similar logs needed for security and operation of the site.
• Consent-based analytics and advertising data: if you consent, Google Analytics 4 and Google Ads may process page views, interactions, approximate location, device/browser information, campaign or referral information, conversion events and related cookie or device identifiers.
• Cookies and similar technologies: as described in our Cookie Policy.

We generally do not ask for special categories of data (e.g. health) unless you voluntarily provide information necessary for assistance (e.g. mobility needs). Please share only what is necessary.

Driver and transport partner applications

When you use our Drive for Us page, our Partner Network application or otherwise ask to join the ROYAL COMFORT RIDE partner network, we process the information you provide, such as your name, phone number, email address, company or operator details, base city or service area, fleet, vehicle classes, availability, languages, transfer experience and application notes. The public application is only the first-contact stage; we do not ask you to upload identity, driving or other official documents on that public form.

If the initial application matches our current needs and you choose to continue, we may give you access to a protected driver or company-scoped partner portal. At that stage we may request the documents reasonably needed to verify the company, operator licence, insurance, signed partner agreement, drivers, driving entitlement, vehicle registration and operational eligibility, plus payout details where needed. Please do not send these documents through the public application form.

We use application and verification data to review your request, contact you, decide whether to enter a partner relationship, create and secure portal access, verify legal and operational eligibility, maintain necessary records, and prevent fraud or misuse. Depending on the stage and purpose, processing may rely on steps taken at your request before entering a contract, our legitimate interests in operating a safe partner network, a legal obligation, or consent where we specifically request it. Applying does not guarantee approval, employment or paid ride assignments.

Access is limited to authorised operations or administrative staff and service providers that host or secure the application, authentication, storage and communication systems. We do not make an applicant's application or verification documents available to customers or other drivers, except where disclosure is required by law or to protect legal rights and service security.

Application and verification records are kept only for as long as reasonably needed to review the application, complete onboarding, manage an active partner relationship, meet applicable obligations, resolve claims and protect the service against fraud or misuse. If you withdraw or are not approved, you may ask us to delete your application data at info@royalcomfortride.com. We will assess the request under applicable data-protection law; limited records may need to remain where required by law or necessary for legal claims, fraud prevention or security.

Purposes of processing and legal bases

We process personal data only where we have a valid legal basis under GDPR. In summary:

• Performance of a contract or steps prior to contract (Art. 6(1)(b) GDPR): handling enquiries, preparing quotes, confirming bookings, providing transport or coordinating partners, customer support, invoicing where applicable.
• Legal obligation (Art. 6(1)(c)): accounting, tax and regulatory record-keeping, responding to lawful requests from authorities.
• Legitimate interests (Art. 6(1)(f)): operating and securing our website, fraud prevention, quality control, enforcing our Terms and Conditions, and direct enquiries relating to your existing bookings.
• Consent (Art. 6(1)(a)): for Google Analytics 4, Google Ads conversion measurement and other non-essential cookies or tags, as well as certain marketing messages or optional services clearly presented as consent-based. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Providing booking-related data is often necessary to conclude or perform a contract; if you do not provide essential information, we may be unable to process your request or complete the service.

Recipients and processors

We may disclose personal data to:

• Drivers and transport partners who need trip details to perform the service.
• IT and hosting providers that store data or operate infrastructure.
• Communication and productivity tools (e.g. email, messaging) used to respond to you.
• Payment service providers for processing payments you authorise.
• Analytics and advertising providers (Google Analytics 4 and Google Ads) only after you consent to their optional technologies.
• Maps, routing and security providers (e.g. map APIs, optional bot protection such as Google reCAPTCHA where enabled).
• Professional advisers (lawyers, accountants) where bound by confidentiality.
• Authorities when required by law or to protect rights, safety and security.

When a verified licensed transportation partner is assigned to a booking, we share only the information reasonably necessary to perform that transfer, such as passenger name, contact details, pickup and drop-off locations, pickup time, flight or vessel information, luggage, selected vehicle class, child seat requirements and service notes. Partners must use this data only to perform the booked transfer and customer support related to that transfer.

We use data processing agreements or equivalent terms with processors where required by law. We do not sell your personal data.

International transfers

Your data is primarily processed within the European Economic Area (EEA). If we transfer personal data to countries outside the EEA/UK that are not subject to an adequacy decision, we will ensure appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, or other mechanisms permitted by GDPR, unless a specific derogation applies.

Retention periods

We retain personal data only as long as necessary for the purposes above, including:

• Booking and contract records: typically for the duration of the service plus a period necessary for support, disputes and legal claims (often several years, depending on type of data and legal requirements).
• Driver applications and verification records: for as long as needed to review the application, complete onboarding, manage an active partner relationship, meet applicable obligations, resolve claims and protect the service against fraud or misuse.
• Accounting and tax records: as required by Croatian and EU law (often up to 11 years for certain documents).
• Marketing: until you opt out or withdraw consent, or we cease the activity.
• Server and security logs: for a limited period needed for security monitoring and troubleshooting.
• Complaints and legal proceedings: as long as needed to resolve the matter and defend legal rights.

When retention ends, we delete or anonymise data where possible.

Security of processing

We implement appropriate technical and organisational measures—such as access restrictions, secure connections (HTTPS) where supported, vendor diligence and staff awareness—to protect personal data against unauthorised access, alteration, disclosure or destruction. No method of transmission over the Internet is completely secure; we encourage you not to send unnecessary sensitive information via unsecured channels.

In the event of a personal data breach likely to affect your rights, we will comply with GDPR obligations to notify the supervisory authority and, where required, affected individuals.

Your rights (data subject rights)

Subject to conditions and exceptions in applicable law, you may have the following data subject rights under the GDPR:

• Access your personal data and obtain certain information about processing.
• Rectification of inaccurate or incomplete data.
• Erasure (“right to be forgotten”) where applicable.
• Restriction of processing in certain situations.
• Data portability for data you provided, where processing is based on consent or contract and carried out by automated means.
• Object to processing based on legitimate interests, including profiling (if any).
• Withdraw consent at any time, without affecting lawfulness of processing before withdrawal.
• Lodge a complaint with a supervisory authority (see below).

To exercise your rights, contact us at info@royalcomfortride.com. We may need to verify your identity before responding. We will answer within one month, extendable where permitted by law.

Supervisory authority

If you believe processing infringes the GDPR, you have the right to lodge a complaint with a supervisory authority—in Croatia, the Croatian Personal Data Protection Agency (AZOP): azop.hr. You may also contact the authority in your country of habitual residence or place of work.

Automated decision-making and profiling

We do not use automated decision-making that produces legal effects concerning you or similarly significantly affects you. Price estimates on our website may be calculated by rules you can review (distance, vehicle type, etc.); these are tools to assist you and do not replace individual confirmation of booking terms.

Children

Our services are not directed at children under 16 (or the age of digital consent in your country) without parental involvement. If you believe we have collected data from a child without appropriate authority, please contact us and we will take steps to delete it.

Cookies and similar technologies

Google Analytics 4 and Google Ads conversion measurement load only after you consent to optional analytics and advertising technologies. We store your preference in browser storage so the site can remember it until you change it or clear site data. You can withdraw or update your choice at any time through “Manage cookie preferences”. See our Cookie Policy for the identifiers, data categories and available controls.

Changes to this Privacy Policy

We may update this policy to reflect legal, technical or organisational changes. The current version is always published on this page with the effective date. For material changes, we may provide additional notice (e.g. a banner or email) where appropriate.

Contact

For any questions about this Privacy Policy or the processing of your personal data:

Email: info@royalcomfortride.com
Postal address: ROYAL COMFORT RIDE, Mlini, Pod križem 18, Croatia

This policy is provided for transparency and compliance purposes. It does not constitute legal advice; for specific legal questions you may consult an independent adviser.