Privacy policy | Z&D Transfers
1. Introduction
This Privacy Policy explains how M obrt, vl. Stipe Mužanović, operating under the brand “Z&D Transfers” (“Company”, “we”, “us”, “our”) collects, uses, stores, and protects personal data when you use our website, contact us, or book transportation services.
We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable Croatian data protection laws.
By using our services or submitting a booking request, you agree to the processing of your personal data as described in this Policy.
2. Data controller
The data controller responsible for processing personal data is:
M obrt, vl. Stipe Mužanović
Dubrovačka 45
23210 Biograd na Moru
Croatia
Email: zd.transfers@gmail.com
Phone / WhatsApp: +385 91 565 5427
3. Definitions
For the purposes of this Policy:
- “Client” means any person requesting, booking, or using transport services.
- “Service” means private passenger transfer services provided by the Company.
- “Booking” means a confirmed request for transportation services.
- “Personal Data” means any information relating to an identified or identifiable person (GDPR Article 4).
4. Personal data we collect
We may collect and process the following data:
- Full name
- Phone number and email address
- Pickup and drop-off locations
- Flight number and travel details (if applicable)
- Number of passengers and luggage information
- Booking details and communication history
- Payment and invoice data (if applicable)
We do not collect more data than necessary for service execution.
5. Purpose of processing
We process personal data for the following purposes:
- Managing and confirming bookings
- Providing transport services
- Communicating with clients regarding services
- Monitoring flight delays and operational planning
- Invoice and payment processing
- Legal compliance and dispute resolution
6. Legal basis for processing
Processing is based on:
- Contractual necessity (GDPR Art. 6(1)(b))
- Legal obligations (GDPR Art. 6(1)(c))
- Legitimate interest in providing safe and efficient transport services (GDPR Art. 6(1)(f))
7. Data sharing and third parties
We may share personal data only when necessary for service execution:
- Licensed drivers and subcontracted transport partners (if required)
- Payment processors and banks
- IT and communication service providers
All third parties are bound by confidentiality and GDPR compliance obligations.
We do not sell or rent personal data.
8. International data transfers
If service execution requires cooperation with partners outside the EU, data will only be transferred where adequate safeguards are in place under GDPR.
9. Data retention
We retain personal data only for as long as necessary:
- Booking and operational data: up to 24 months
- Invoice and accounting data: up to 11 years (legal obligation)
- Communication data: up to 24 months unless required longer for dispute resolution
10. Data security
We apply appropriate technical and organisational measures to protect personal data from:
- unauthorized access
- loss or destruction
- misuse or alteration
However, no system can be 100% secure.
11. Your rights (GDPR)
You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion (“right to be forgotten”)
- Restrict processing
- Object to processing
- Data portability
Requests can be sent to: zd.transfers@gmail.com
12. Cookies
Our website may use cookies to:
- ensure website functionality
- analyse traffic and improve user experience
You can disable cookies in your browser settings.
13. Service communications
By submitting a booking request, you agree that we may contact you via email, phone, or WhatsApp regarding:
- booking confirmation
- operational updates
- service coordination
14. Data accuracy responsibility
The Client is solely responsible for ensuring that all provided information is accurate and complete.
The Company is not responsible for delays, service issues, or additional costs caused by incorrect or incomplete data.
15. Right to lodge complaint
You have the right to lodge a complaint with:
Croatian Personal Data Protection Agency (AZOP)
16. Changes to this Policy
We reserve the right to modify this Privacy Policy at any time.
Updated versions will be published on our website.
17. Contact
For any questions regarding this Privacy Policy:
Related information
For additional information, please visit our FAQ page, review our Terms & Conditions and our Cancellation Policy, or contact our team directly.