Updated: 22 September 2025
This Privacy Policy explains how "Udruga Žuti Taxi Dubrovnik" (Association Yellow Taxi Dubrovnik) collects, uses, and protects your personal data when you use our website and our mobile applications for ordering taxi rides, transfers, and excursions.
Data Controller: Udruga Žuti Taxi Dubrovnik (Udruženje žuti taxi Dubrovnik)
Address: Ćira Carića 3, 20000 Dubrovnik, Croatia
OIB (Croatian TIN): 04250953622
Phone: +385 20 411 411
Privacy contact e‑mail: info@zuti-taxi-dubrovnik.hr
Website: https://www.zuti-taxi-dubrovnik.hr/
Supervisory authority: Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, Croatia; tel. +385 1 4609 000; e‑mail: azop@azop.hr; web: https://azop.hr/
This Policy applies to:
Name and surname, phone number, e‑mail; booking details (pickup/drop‑off, time, number of passengers, child seat, pet), notes (e.g., flight number).
Precise device geolocation during ordering and the ride to determine pickup, routing, and ETA. In limited cases we may use background location while a ride is active (e.g., for safety and accurate ETA).
If you pay by card, we process tokenised payment data via our payment service provider (PSP). We do not store full card numbers.
Device ID / push token, OS/app version, IP address, crash logs and performance metrics (for security and improvement).
Content of messages sent to support (e‑mail/form), status of notifications (push/SMS). We do not record calls unless we inform you in advance and have a valid legal basis.
Strictly necessary cookies (load balancing, security) and — only with consent — analytics cookies and embedded maps/content tools.
We process personal data only when allowed under the GDPR:
Contract performance: Art. 6(1)(b) - Processing location for pickup and navigation; sharing necessary details with assigned driver/partner.
Payments and accounting: Art. 6(1)(b), (c) - Card authorisation via PSP; issuing invoices and keeping records as required by law.
Security & abuse prevention: Art. 6(1)(f) (legitimate interests) - Event logs; checks of suspicious activity; legal claims.
Customer support: Art. 6(1)(b)/(f) - Status notifications (push/SMS), replies to enquiries.
Analytics: Art. 6(1)(f) - Aggregated app usage statistics.
Marketing: Art. 6(1)(a) (consent) - Newsletter, promotional messages — only with your consent.
We share personal data only when necessary:
You have the rights of access, rectification, erasure, restriction, objection, data portability, and to withdraw consent. Exercise your rights by emailing info@zuti-taxi-dubrovnik.hr.
Our services are not intended for children under 16. If we learn that we process children's data without proper authorization, we will delete such data.
We implement TLS encryption, access controls, system segmentation, regular patching, least‑privilege access, and confidentiality agreements with processors.
We request only necessary permissions: Location (pickup, navigation, ETA), Push notifications (ride status), Camera/Photos (optional profile features), Phone/SMS (contacting driver).
Request deletion by emailing info@zuti-taxi-dubrovnik.hr with subject "Account deletion". We will process within 30 days, except for legally required data.
For privacy questions: info@zuti-taxi-dubrovnik.hr or +385 20 411 411