Privacy Policy
Confidentiality notifications for passengers, in accordance with the European General Data Protection Regulation ( GDPR )

The information we provide below gives an overview of our approach regarding the processing of your personal data and your rights based on the provisions of data protection legislation regarding the use of our intermediation application for taxi transport services. for passengers (the Taxi ADA app).

The personal data processed depends very much on the services or products you use.

Summary
1 Information about the data operator
2 Processing purposes and categories of data processed
3 The basis of processing
4 Your rights
5 Data security
6 Retention Period

1. Data Operator Information
The data operator, according to the provisions of art. 4 point 7 GDPR for passengers on the territory of Romania:

Taxi ADA
Strada Nicolae Titulescu 58 Dorohoi, Botosani
* Phone: +40231 611 111
* E-mail address: gradinariu.vlad@yahoo.com.
* Responsible for data protection: Gradinariu Vlad
The easiest way to contact the data protection officer is to send an e-mail to gradinariu.vlad@yahoo.com or write to the addresses above.

2. Processing purposes and categories of data processed
We hereby intend to inform you about the different types of personal data we process and the purposes for which we do so.

2.1 Ordering the rides
The ADA Taxi application allows you to accept a taxi ride ordered by phone or online by the customer through us. You must provide personal data to use the Taxi ADA application, which we process in order to provide that service. The optional additional informations are marked as such.
In the context of the service of ordering the rides, the following personal data will be processed in accordance with the provisions of art. 6 paragraph (1) lit. (b) GDPR to carry out the contract:
- The exact GPS position (GPS satellites networks) will be used to provide to application and/ot to customer the exact driver location. Also the GPS location history is kept on the server in accordance with the Taxi Law.
- The e-mail will be used only for resetting the password (in case of losing it) or for sending the electronic documents related to the rides paid online by the client.
- The email address and password will be used to allow you to log in to the system. In case of forgetting, the password can only be changed by you, on our servers it is stored in encrypted form.
- The history of your rides is stored on servers in accordance with the Taxi Law.
- The identification data of the documents (number and expiration date) necessary for taxi operation in accordance with the Taxi Law may be entered optionally by the driver, in the application, they will not be processed, the driver will only be informed if they expire and must renewed.
- The data of the company (Name, fiscal code, email and address) are optional and will only be required if you accept rides payed by credit card.
At the time of registration, personal data is either entered by you (eg, email address), or received directly from your device (eg GPS location). During the use of the application there may be additional personal data provided by the taxi dispatcher (the history of your orders).

You cannot participate in the acceptance of taxi orders through us if we cannot process your personal data indicated above.
This does not apply to optional information. Optional information provided by you will eventually allow you to use additional options in the application, such as accepting the online payment by card, receiving warnings when the documents necessary to the taxi activity expire.

Data security
We have taken the appropriate technical and organizational measures to guarantee data security, in particular to protect your personal data against access by third parties, as well as against intentional modification, loss or destruction. These measures are periodically reviewed and adapted according to the latest technologies. The transfer of your data from your device to us is always encrypted.
2.2 The evaluation process
At the end of each ride, we request the evaluation of the drivers, the completion constituting your agreement for the participation in the evaluation process. When you submit a rating, it is assigned to a certain trip and taken into account of the Client's evaluations. It does not involve the transmission of personal data to the Client. Also, the customer for each trip ordered through the Taxi ADA application will be able to give a rating to the Driver and the Car, which also does not involve the transmission of personal data.

3. The basis of data processing
In general, the processing of Personal Data is necessary in order to carry out the activity specific to the purpose of processing, more precisely, the provision of services through the RAL Taxi application.

In general, you are required to provide your personal data as required.

In order to be able to process your personal data, Taxi ADA is based on different legal bases, as follows:

- The processing is necessary to make the necessary steps before the conclusion of the contract between you and Taxi ADA, as well as for the performance of the existing contract;
- The processing is necessary in order to fulfill a legal obligation, such as, for example, issuing an invoice;
- The processing is necessary for the purpose of the legitimate interest of the company to process the respective data. In the course of its activity, Taxi ADA processes your data in order to be able to offer you the requested services, as described in this Policy.

4. Your rights
You have the right to request information from us at any time regarding your personal data that we hold, as well as the origin, the recipients or categories of recipients to whom these data are transmitted or disclosed, the purpose of the retention and processing, the period of retention, our automated decision-making procedure, the right to data portability, the existence of the right of rectification, deletion, restriction or opposition against processing and the right to transmit notifications to the supervisory authority.

You also have the right to rectify incorrect data and, in cases where the legislative provisions are met, their deletion, as well as to restrict their processing. Based on the conditions provided by the applicable law (GDPR), you have the following rights:

(i) Right of access: You have the right to be notified, upon request, if your personal data are processed, and if so, you have the right to request access to them. The information includes, among others, the purposes of processing, the categories of personal data affected and the recipients or categories of recipients to whom your personal data have been disclosed or will be disclosed. You have the right to obtain a copy of your personal data processed. For additional children, we can charge you a reasonable fee, based on administrative costs.
(ii) The right to rectification: You have the right to obtain from us the rectification of your incorrectly personal data. Depending on the purpose of processing, you have the right to complete incomplete personal data, including through a supplementary statement.
(iii) The right to delete ("the right to be forgotten"): You have the right to ask us to delete your personal data.
(iv) Right to restriction: You have the right to request a restriction on the processing of your personal data. In this case, the respective data will be marked and can be processed by us only for certain purposes.
(v) The right to data portability: You have the right to receive your personal data that you have provided to us, in a structured, common and machine-readable format, and you have the right totransmit this data to another entity without objections from us.
(vi) The right to object: You have the right to object, for reasons related to your situation, at any time, to the processing of your personal data by us, and we may be required to we will no longer process your personal data. If you have the right to object and exercise it, we will no longer process your personal data for that purpose. The exercise of this right does not imply any cost. This right can be invalidated especially if the processing of your personal data is necessary for the formalities related to the conclusion of a contract or for the fulfillment of a contract already concluded.

You can send requests for information, withdrawal of consent, objections and other communications regarding data processing by e-mail at gradinariu.vlad@yahoo.com or at the addresses provided in the introduction.

We reserve the right to respond to requests received within the time allowed by law, as well as to protect us against repeated or unintentionally wrong requests.

5. Data security
We have taken the appropriate technical and organizational measures to guarantee data security, in particular to protect your personal data against access by third parties, as well as against intentional modification, loss or destruction. These measures are periodically reviewed and adapted according to the latest technologies. The transfer of your data from your device (eg smartphone) to us is always encrypted.

6. Retention period
Your data will be retained for the duration of the contract. In principle, we will keep your personal data for the duration requested or permitted by the applicable law. After the termination of the contractual relationship between us, we will retain the data for a period of three years from this moment. In addition, the legal provisions (for example the retention periods under the tax legislation) require the retention of certain data about you for a period of ten years. Later, we will delete your personal data from our systems and records and/or take measures to anonymise them so that you can no longer be identified based on them.

If a legal or disciplinary measure is initiated, the personal data may be stored until the end of this action, including any periods of appeal or appeal, and then they will be deleted or archived, according to the provisions of the applicable legislation.