Informativa sulla privacy
Last updated: September 2026
Riepilogo
Conserviamo solo i dati necessari a organizzare il transfer: contatti, dettagli del viaggio e nomi dei passeggeri. I dati non vengono mai venduti né condivisi con terzi oltre all’autista assegnato. Contattaci per richiedere la cancellazione dei tuoi dati.
Il testo completo qui sotto è in inglese. In caso di discrepanze fa fede la versione inglese.
1. Controller
The controller of your personal data is S Drive d.o.o. , SITNIČKA 35, PODGORICA, Montenegro ("we"). Contact for all privacy matters: [email protected]. This policy is written to meet the requirements of the Montenegrin Law on Personal Data Protection and, for visitors from the European Union, the GDPR.
2. What we collect
Clients book without creating an account. When you request a ride we collect: passenger names, your phone number, preferred messaging channel, e-mail address (optional), ride details (locations, dates and times, passenger and luggage counts, child-seat needs, flight number for airport pickups) and any notes you write. For drivers and administrators we store account data (name, contact, hashed password; for drivers also licence details and vehicle data). We also keep a log of the notifications sent about a booking. We do not collect payment data — payment happens in person.
3. Why we use it (legal bases)
To handle your booking request, perform the transfer and send you booking-related messages on the channel you chose — performance of a contract (GDPR Art. 6(1)(b)). To keep records required by tax and transport regulations — legal obligation (Art. 6(1)(c)). To protect the service against abuse and to keep evidence of bookings within limitation periods — legitimate interest (Art. 6(1)(f)). We do not use your data for marketing and we do not profile you.
4. Who receives it
The driver assigned to your ride receives the details needed to perform it (names, pickup details, contact phone). Service providers process data on our behalf under data-processing agreements: IT hosting, the transactional e-mail provider, and — when you choose that channel — WhatsApp (Meta), Viber or Telegram. Authorities receive data only where the law requires it. We never sell personal data.
5. International transfers
Some providers (for example messaging platforms) may process data outside Montenegro and the EEA. Where that happens, transfers rely on the provider's recognised safeguards, such as EU standard contractual clauses.
6. How long we keep it
Booking data is kept for up to 3 years after the ride (the general limitation period for claims), unless accounting or transport regulations require a longer period for specific records. On request we anonymize a finished booking earlier — the ride record stays for statistics, but names and contact details are removed. Staff accounts are kept while the cooperation lasts.
7. Your rights
You can ask for access to your data, correction, deletion, restriction of processing, portability, and you can object to processing based on legitimate interest. Write to [email protected] from the contact details used in the booking, or include your booking reference, so we can verify the request. We answer within one month.
8. Security
Connections to the site are encrypted (TLS). Staff passwords are stored only as cryptographic hashes, staff access is role-based, and your booking is reachable only through its secret link. Should a breach ever put your rights at risk, we will notify the supervisory authority and, where required, you.
9. Cookies and local storage
The public website sets no cookies and uses no analytics or tracking. The staff portals (for drivers and the administrator) store a sign-in token in the browser's local storage; it is strictly necessary for the sign-in to work and is not used for tracking. That is why the site shows no cookie banner.
10. Complaints
If you believe we process your data unlawfully, you can complain to the Montenegrin supervisory authority (Agencija za zaštitu ličnih podataka i slobodan pristup informacijama — AZLP, azlp.me). If you live in the EU, you may also contact the data-protection authority of your country.
11. Changes
We may update this policy; the current version is always published here with its date.