Privacy Policy

1. Data Controller

Business name: TORONTO, obrt za prijevoz putnika i usluge, vl. Tomislav Baričević, Kaštel Sućurac, Petrina ulica 10A

Address: Petrina ulica 10A, Kaštel Sućurac, 21211 Kaštel Sućurac, Hrvatska

Phone: +385 95 508 6993

Email: tbaricevic0207@gmail.com

2. What Personal Data We Collect

We do not collect personal data automatically through the website. Personal data is provided directly by you when you contact us by phone, SMS, WhatsApp, or email to request a ride, transfer, or private tour.

Depending on your request, we may process:

• name (if provided)
• telephone number
• pickup location
• destination
• date and time of transport
• number of passengers
• additional information necessary to provide the service

3. Purpose and Legal Basis

Personal data is processed solely for the purpose of organizing and providing the requested transport service.

The legal basis for processing is performance of a contract or taking steps prior to entering into a contract (Article 6(1)(b) GDPR).

We do not use your personal data for marketing and we do not create customer databases for advertising purposes.

4. Sharing of Data

If we are unavailable to perform the requested service, your contact details and necessary ride information may be shared with trusted partner drivers solely for the purpose of completing the requested transport.

These partners are independent transport providers and may act as separate data controllers. They are expected to handle personal data only for providing the agreed ride and not for marketing or other unrelated purposes.

We do not sell, rent, or otherwise distribute personal data to third parties.

5. Communication Services

Communication may take place via telephone networks, SMS, email, or messaging applications such as WhatsApp. These services are provided by third-party providers and may transfer data outside the European Economic Area in accordance with their own privacy policies and applicable legal safeguards.

6. Data Retention

Personal data is kept only for as long as necessary to complete the requested service and handle potential follow-up communication related to the ride.

• ride communication: up to 6 months
• accounting records (if an invoice is issued): according to legal obligations

After this period, data is deleted or no longer actively used.

7. Your Rights

You have the right to:

• access your personal data
• request correction
• request deletion
• restrict processing
• object to processing
• lodge a complaint with a data protection authority

To exercise your rights, contact us at tbaricevic0207@gmail.com.