Privacy Policy

Privacy Policy

This policy explains what personal data we process when you use airportshuttleitaly.it, why, and what rights you have under the EU General Data Protection Regulation (GDPR).

1. Data controller

Airport Shuttle Italy, Rome, Italy — email info@airportshuttleitaly.it, phone +39 06 5656 7649 — is the controller of the personal data processed through this website.

2. Data we collect

Booking data: name, surname, email, phone, pickup and dropoff addresses, flight number, number of passengers and any special requests. Payment data: your card details are collected and stored directly by Stripe on its secure pages and never reach our servers — we only hold the booking amount, its status and a payment reference. Account data, if you create an account: email, password (stored hashed) and your booking history. Technical data: IP address, device and pages visited (see Cookies).

3. Purposes and legal bases

We process data to perform the transfer contract — booking management, driver assignment, flight monitoring, confirmations and support (art. 6.1.b GDPR); to comply with legal obligations such as invoicing and accounting (art. 6.1.c); for our legitimate interest in preventing fraud and protecting the service, including essential service emails (art. 6.1.f); and, only with your consent, for analytics cookies and any marketing communications (art. 6.1.a).

4. Who receives the data

Only what is strictly needed, and only to: the driver assigned to your transfer (name, pickup details, phone number); Stripe, for payments, under its own privacy policy; Pickup Dispatch, the booking and dispatch platform that processes reservations on our behalf; our EU hosting provider; Google, for Analytics 4 and Tag Manager, only after your cookie consent; and email delivery providers for confirmations. We never sell personal data.

5. Transfers outside the EU

Some providers (such as analytics or payment services) may process data outside the European Union: in those cases the transfer is protected by EU Standard Contractual Clauses or an adequacy decision.

6. Retention

Booking and invoicing data are kept for the periods required by Italian tax law (up to 10 years). Account data are kept until you delete your account. Analytics data follow the retention configured in Google Analytics.

7. Your rights

Under articles 15-22 GDPR you can request access, rectification, erasure, restriction, portability, object to processing and withdraw consent at any time, by writing to info@airportshuttleitaly.it — we answer within 30 days. You can also lodge a complaint with the Italian supervisory authority, the Garante per la Protezione dei Dati Personali (gpdp.it).

8. Cookies

Essential cookies (session, security, cookie preferences) are always active. Analytics cookies — Google Analytics 4, loaded through Google Tag Manager — run only after you give consent in the cookie banner, where you can change your choice at any time.

9. Security

All pages are served over TLS; card data are handled exclusively by Stripe with bank-level encryption; access to our booking platform is restricted and logged.

10. Minors

The website is addressed to adults. Bookings may include minor passengers, who travel under the responsibility of the adult who booked.

11. Changes to this policy

Updates to this policy are published on this page together with their effective date.