Who controls the data
The privacy notice must identify the organisation responsible for deciding how personal data is used.
TO COMPLETE: Add registered company name, address, contact details and DPO details if applicable.
Data collected
A taxi request may involve a name, phone number, email, pickup and destination, trip date, and any details a customer chooses to provide.
TO COMPLETE: Audit all forms, accounts, analytics, maps, payments, WhatsApp/email integrations and server logs.
Purposes and legal bases
Each use of personal data needs an accurate purpose and legal basis.
TO COMPLETE: List actual purposes and legal bases separately, including any marketing or analytics.
Recipients and transfers
The notice should explain which providers or other recipients can access data and whether any data leaves the EEA.
TO COMPLETE: List real hosting, mapping, email, messaging, payment and analytics providers and transfer safeguards.
Retention periods
Visitors should be told how long information is kept or the criteria used to determine retention.
TO COMPLETE: Insert verified retention periods for bookings, contact messages, payment records and logs.
Your rights
The final notice should explain how people can exercise their applicable data-protection rights and contact the competent supervisory authority.
TO COMPLETE: Add the process for access, correction, erasure, objection, portability and complaints, as applicable.
Privacy contact
For a privacy enquiry, contact info@e-cabs.gr.
TO COMPLETE: Confirm the correct privacy contact, effective date and any required company details.