PRIVACY POLICY

2026 Edition

This Privacy Policy describes the processing of personal data carried out through this App.

1. DATA CONTROLLER AND DPO DETAILS

1.1. DATA CONTROLLER

The DATA CONTROLLER is Consorzio TAXI MOVE, Tax Code 07300420481, with registered office at Via della Casella 51, 50142 Florence (FI), Italy. Tel.: 0554377741 – Email: taximove@pec.it. You may contact the Data Controller to exercise your rights.

1.2. DATA PROTECTION OFFICER (DPO)

The DATA PROTECTION OFFICER (DPO) is Sicurdata S.r.l., represented by DPO Claudia Giugni, with registered office at Via E. Codignola 10/A, 50018 Scandicci (FI), Italy. Tel.: +39 055750808 – Email: dpo.sicurdata@opendata.it.

2. PERSONAL DATA PROCESSED, PURPOSES AND LEGAL BASIS OF PROCESSING, NATURE OF THE PROVISION OF DATA

2.1. This section provides information concerning the personal data processed, the purposes for which they are processed, the legal bases for such processing and the nature of the provision of such data.

1. Personal data processed:
When you download the App from the Apple App Store or Google Play, the following data are processed: the IP address of the device used to access the App, date and time of access, amount of data transferred, whether or not the booking was successfully completed, the browser used, the User’s operating system and the name of the Internet service provider.

Purpose of processing:
To ensure an optimal connection to the App, guarantee its functionality and assess the security and stability of the system.

Legal basis for processing:
Consent of the data subject pursuant to Article 6(1)(a) GDPR.

Nature of the provision of data:
Necessary in order to use the App.

2. Personal data processed:
First name and surname, login details and password selected upon initial activation, device geolocation, pick-up location, cost of the service, credit card details, payment made/not made and billing details (where requested).

Purpose of processing:
Performance of the contractual service, including geolocation for the purpose of identifying the radio-taxi dispatch centre and the vehicle with territorial jurisdiction in the area where the service is requested, as well as compliance with the related legal obligations.

Legal basis for processing:
Performance of a contract/pre-contractual measures pursuant to Article 6(1)(b) GDPR.

Nature of the provision of data:
Necessary in order to use the requested services.

2.2. You may withdraw your consent at any time by contacting the Data Controller using one of the contact details provided in this Privacy Policy. Withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

3. RETENTION PERIOD

3.1. Personal data processed for the purposes referred to under point 1 of the previous section are temporarily stored in log files held at the Data Controller’s operations centre for a maximum period of 30 days, after which they are anonymised.

3.2. Personal data processed for the purposes referred to under point 2 of the previous section are retained for the entire duration of the contract and, as required by law, for 10 years following termination of the contractual relationship.

4. RECIPIENTS OF PERSONAL DATA

4.1. Personal data may be accessed by the Data Controller’s employees and collaborators who are authorised to process such data pursuant to Article 29 GDPR.

4.1.1. Personal data may be disclosed to entities providing services on behalf of the Data Controller and acting as Data Processors:

a) Mikrotek S.r.l., creator of the App, whose servers receive functionality-related data such as username, password and geolocation, which are subsequently transmitted to the Data Controller’s operations centre;

b) Aruba S.p.A., provider of the cloud service connected to the App;

c) any consultants and/or suppliers providing services to the Data Controller.

4.1.2. Such entities operate in accordance with the instructions and directives of the Data Controller.

4.2. Personal data may also be disclosed to entities acting as independent Data Controllers:

a) NEXI, for credit card payments;

b) external entities, including private entities, responsible for carrying out inspections and checks of various kinds;

c) any consultants and/or suppliers providing services to the Data Controller, including individual partner radio-taxi dispatch centres and drivers operating in the city in which the User requests the transportation service, limited to the data necessary to manage the call, perform the journey and complete the related reporting.

The updated list of local partners and cities served is available at: https://www.taximove.it/citta-servite/.

4.3. Personal data may be transmitted to Public Security Authorities and Judicial Authorities where required by law or where necessary to protect a legal right.

4.4. The complete list may be requested from the Data Controller using one of the contact details provided in this Privacy Policy.

5. TRANSFERS OUTSIDE THE EU

5.1. Your personal data will not be transferred to a country outside the European Union.

5.2. Where necessary, the Data Controller shall ensure compliance with the applicable legislation (Articles 44 et seq. GDPR).

6. RIGHTS AND COMPLAINTS

6.1. By contacting the Data Controller using the contact details indicated above, you may exercise the rights provided for under Articles 15 to 22 GDPR and the right to withdraw consent pursuant to Article 7 GDPR.

6.2. You may lodge a complaint pursuant to Article 77 GDPR.

7. FURTHER INFORMATION

7.1. The Data Controller and/or the DPO remain available should any further clarification be required.