Privacy Policy

Last updated: October 22, 2025

1. General Information

Prime-Transfer respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your personal information when using our transfer services in Prague and the Czech Republic.

2. Data Controller

3. What Data We Collect

We may collect the following types of personal data:

• Personal Information: first name, last name, phone number, email address
• Booking Data: travel dates, pickup and destination addresses, number of passengers
• Payment Information: payment data (processed through secure payment systems)
• Technical Data: IP address, browser type, operating system
• Cookies: cookie files to improve website functionality

4. How We Use Your Data

Your personal data is used for:

• Providing transfer services and processing bookings
• Communicating with you regarding your order
• Processing payments
• Improving the quality of our services
• Sending important service notifications
• Fulfilling legal obligations

5. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contract: to fulfill the contract for providing transfer services
• Consent: for marketing communications (with your consent)
• Legitimate Interests: to improve our services and security
• Legal Obligations: to comply with legal requirements

6. Data Sharing with Third Parties

We may share your data with the following categories of recipients:

• Partner Drivers: to fulfill orders (only necessary information)
• Payment Systems: for payment processing we use GoPay (GoPay s.r.o.) services, which processes payment data in accordance with GDPR. Data protection details can be found at GoPay Privacy Policy
• IT Providers: for technical maintenance
• Law Enforcement: upon request in accordance with law

We do not sell your personal data to third parties for marketing purposes.

7. International Transfers

Your data may be processed on servers located in the European Union. When transferring data outside the EU, we ensure an appropriate level of protection in accordance with GDPR.

8. Data Retention

We retain your personal data for the following periods:

• Booking Data: 3 years after trip completion
• Financial Data: 7 years (tax law requirements)
• Marketing Data: until consent withdrawal or 2 years without activity
• Technical Logs: 1 year

9. Your Rights

Under GDPR, you have the following rights:

• Right to Access: obtain a copy of your personal data
• Right to Rectification: correct inaccurate data
• Right to Erasure: request deletion of your data
• Right to Restriction: restrict processing of your data
• Right to Portability: receive data in structured format
• Right to Object: object to processing
• Right to Withdraw Consent: withdraw consent at any time

10. Data Security

We implement the following security measures:

• SSL/TLS encryption for data transmission
• Database encryption
• Regular security system updates
• Role-based access control
• Regular security audits

11. Cookies

Our website uses cookies to improve functionality and analytics. You can manage cookie settings through the consent banner on our website or in your browser settings.

12. Children's Rights

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from children under 16 without parental or guardian consent.

13. Policy Changes

We may update this Privacy Policy from time to time. We will notify you of material changes via email or website notification. The last update date is indicated at the beginning of the document.

14. Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

15. Complaints to Supervisory Authority

If you believe that the processing of your personal data violates GDPR, you have the right to file a complaint with the data protection supervisory authority in your country of residence or in the Czech Republic:

© Prime-Transfer 2025. All rights reserved.