Privacy Policy

Privacy Policy of Elmastransfer.com

This Website collects some Personal Data from its Users.

 

1. Data Controller

 

Blue Transfer s.r.l. Registered office: Via Turbigo 5, 09123 Cagliari. VAT / Tax Code: 03763670928.Contact email: info@blue-transfer.com

 

2. Types of Data Collected

 

Among the Personal Data collected by this Website, independently or through third parties,there are:

• First Name, Last Name, Email, Phone Number;

• Billing Address and Pick-up/Drop-off Address;

• Purchase history;

• Usage Data and Tracking Tools (Cookies).

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy.Unless specified otherwise, all Data requested by this Website is mandatory to provide the transport service. If the User refuses to provide it, it may be impossible for this Website to provide the Service. In cases where this Website specifically states that some Data is not mandatory, Users are free not to communicate this Data.

 

3. Mode and Place of ProcessingMethods of processing:

 

The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data. The Data processing is carried out using computers and/or IT enabled tools. In addition to the Data Controller, in some cases, the Data may be accessible to:

• Internal personnel (administrative, sales);

• External collaborators (e.g., drivers assigned to perform the service);

• External parties (technical service providers, mail carriers, hosting providers, IT companies, accountants).

Legal basis of processing: The Data Controller may process Personal Data relating to Users if one of the following applies:

• Processing is necessary for the performance of a contract (transfer booking) or pre-contractual measures;

• Processing is necessary for compliance with a legal obligation (e.g., invoicing);

• The User has given consent for one or more specific purposes (e.g., marketing).

Place: The Data is processed at the Data Controller's operating offices and, regarding third-party services (e.g., Google,Stripe), at the providers' facilities which may be located outside the EU (e.g., USA/Ireland), ensuring adequate levels of protection.

Retention period: Personal Data shall be processed and stored for as long as required by the purpose they have been collected for.

• Data for tax/administrative purposes will be retained for 10 years (legal obligation).

• Data collected for marketing purposes will be retained until the consent is revoked.

 

4. Details on the Processing of Personal Data

 

Personal Data is collected for the following purposes and using the following services:

A. Payment management The website processes payments via external providers. Blue Transfer s.r.l. does not collect complete credit card data, but only receives payment notifications.

• Stripe (Stripe Technology Europe Ltd): Payment service. Personal Data processed: Last name, first name, email,billing address, purchase history, Tracking Tools. Place of processing: Ireland – Privacy Policy.

B. Analytics The services contained in this section enable the Owner to monitor and analyze web traffic.

• Google Analytics (Google Ireland Limited): Web analysis service. Google utilizes the Data collected to track and examine the use of this Website, to prepare reports on its activities and share them with other Google services.Personal Data processed: Usage Data; Tracking Tools. Place of processing: Ireland – Privacy Policy

• Google Ads conversion tracking (Google Ireland Limited): Connects data from the Google Ads advertising network with actions performed on this Website. Personal Data processed: Usage Data; Tracking Tools.

C. Displaying content from external platforms

• Google Fonts (Google Ireland Limited): Typeface visualization service.

• Font Awesome (Fonticons, Inc.): Icon visualization service.

D. User Registration and Account Management

The User has the option to register on the Website to book and manage transfers more easily. For the creation and management of the personal account, the Data Controller collects the following Personal Data: First Name, Last Name, Phone Number, Email, Billing Address, Username, and Password (identification code).

• Purpose: To allow access to the personal area, manage the user profile, and enable the booking and management of online services.

• Legal basis: Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR).

• Retention: Account data will be retained as long as the profile remains active. In the event of account deletion by the User, data relating to commercial transactions carried out will be retained for 10 years to comply with legal obligations (accounting and tax purposes).

 

5. User Rights (GDPR)

 

Users may exercise certain rights regarding their Data processed by the Owner:

• Withdraw their consent at any time.

• Access their Data and request a copy.

• Verify and seek rectification of inaccurate data.

• Obtain the erasure (right to be forgotten) of their Data, under certain conditions.

• Object to processing of their Data for legitimate reasons.

How to exercise these rights:

Any requests to exercise User rights can be directed to the email: info@blue-transfer.com.These requests can be exercised free of charge and will be addressed as early as possible (within one month maximum).

 

6. Additional Information Legal defense:

 

The User's Personal Data may be used for legal purposes by the Data Controller in Court or in the stages leading to possible legal action arising from improper use of this Website.

System logs and maintenance:

For operation and maintenance purposes, this Website may collect system logs (files that record interaction and the IP Address).

Changes to this privacy policy:

The Data Controller reserves the right to make changes to this privacy policy at any time. Please check this page regularly.

Legal references: This privacy statement has been prepared based on provisions of multiple legislations, including Art. 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation).

Data Protection Authority Email: Garante per la Protezione dei Dati Personali protocollo@gpdp.it

Last modification: January 2026