Your data, protected.
By design.

2. What Data We Collect

We collect only what is necessary to provide our services.

Booking form

First name, last name, email, phone number, flight number, pickup and drop-off addresses, date and time, vehicle preference, child seat request, special requests.

Contact form

Name, email, phone number, service type, message.

Corporate enquiry

Company name, contact name and role, email, estimated monthly trips, notes.

Automatically collected

IP address, browser type and version, device type, pages visited, referring URL, and interaction data — collected via Google Analytics.

Location data

Pickup and destination addresses you enter are processed via the Google Maps API for route calculation and autocomplete. We do not track your real-time location.

Messages and customer record

Messages you send us through website chat, email, Telegram or WhatsApp, your account profile, and the customer record we keep in our CRM: name, email, phone, trip history and notes made by our team.

3. Legal Basis for Processing

We process your personal data under the following legal bases defined in Article 6 of the GDPR:

Performance of a contract — Art. 6(1)(b)

Processing your booking data to arrange and fulfil your transfer, processing payment, sending booking confirmations, and providing driver contact details.

Legitimate interest — Art. 6(1)(f)

Website analytics to improve our service, fraud prevention, responding to your enquiries via the contact form, and keeping one customer record across our systems so we can answer you with your trip history in front of us.

Legal obligation — Art. 6(1)(c)

Retaining booking and payment records as required by Czech tax and accounting regulations.

4. Third-Party Service Providers

We share personal data only with trusted service providers who process it on our behalf and under our instructions.

5. International Data Transfers

Your booking data is stored within the European Union (Supabase EU region). Some of our service providers — including Google, Stripe, Resend, and Vercel — may process data in the United States. These transfers are protected by the EU–US Data Privacy Framework and, where applicable, Standard Contractual Clauses approved by the European Commission. Messages sent through the website chat, email, Telegram or WhatsApp, and our customer records, are stored on our own server in Germany; encrypted backups of that server are kept by Backblaze in the United States under the EU–US Data Privacy Framework.

6. Data Retention

7. Cookies

Our website uses a limited number of cookies:

We do not use advertising, remarketing, or social media tracking cookies.

8. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights:

• Right of access (Art. 15) — Obtain a copy of the personal data we hold about you.
• Right to rectification (Art. 16) — Request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17) — Request deletion of your personal data ("right to be forgotten").
• Right to restriction (Art. 18) — Request that we limit the processing of your data.
• Right to data portability (Art. 20) — Receive your data in a structured, machine-readable format.
• Right to object (Art. 21) — Object to processing based on legitimate interest.
• Right to withdraw consent (Art. 7(3)) — Withdraw consent at any time, without affecting prior processing.

When you ask us to erase your data, we first confirm that it is really you. We then delete your messages and customer record from our systems and remove your name, email, phone, notes and addresses from past bookings. We keep the date, amount, vehicle class, booking reference and invoice data that tax law requires.

To exercise any of these rights, email info@rideprestigo.com. We will respond within 30 days.

9. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Czech supervisory authority:

Úřad pro ochranu osobních údajű
Pplk. Sochora 27, 170 00 Prague 7, Czech Republic
www.uoou.cz

10. Changes to This Policy

We may update this privacy policy from time to time. The “last updated” date at the top of this page reflects the most recent revision. Continued use of our services after any changes constitutes your acknowledgement of the updated policy.