Legal
Privacy Policy
Last updated:
This policy explains which personal data we process when you visit our website or book a transfer with us, what we use it for, and what rights you have. Processing is carried out in accordance with the General Data Protection Regulation (GDPR) and Slovenian data protection law.
Data controller
The controller of your personal data is:
- Company
- Elite 3M d.o.o.
- Registered office
- Kamniška ulica 25, 1000 Ljubljana, Slovenia
- Office
- Miklošičeva cesta 3, 1000 Ljubljana, Slovenia
- Registration number
- 9777946000
- VAT ID
- SI71838201
- Website
- elitetransfer.eu
Visiting the website
The website does not use analytics tools or advertising or tracking technologies, and does not load third-party content into your browser. Fonts and photographs are delivered from our own server. The website does not set cookies and does not store any other data on your device.
As with any website visit, your browser automatically sends the server the technical information needed to display the page (for example your IP address, browser type, the page requested, and the date and time of the request).
The website is hosted by Webtasy d.o.o. (Domenca) on a server in Slovenia (EU). The hosting provider acts as our processor and, to keep the server running and secure, keeps server logs that may contain the technical information listed above. The logs are kept for a limited period, as necessary for that purpose. We do not use them for analytics, advertising or profiling visitors.
Booking form and enquiries
When you submit the booking form, the details you enter (full name, email, phone, flight number if given, and your transfer details: pickup location, destination, date and time, return journey, number of passengers and vehicle class) are sent automatically via our server to our email address info@elitetransfer.eu. We use the email service provider Resend (Plus Five Five, Inc., USA), which processes this data on our behalf. The data is not stored on the web server; to prevent abuse, the sender's IP address is held only temporarily in the server's working memory to limit the number of submissions.
We handle the enquiry in our business mailbox, and keep customer and transfer details in our internal transport management application to prepare a quote and carry out the transfer. The application is hosted on Oracle infrastructure and is used to manage customer and transport information. It is operated for Elite 3M d.o.o., and access is limited to authorised users.
The “Request a Quote”, corporate enquiry and tour enquiry links open your email program with a pre-filled subject line; we only receive those messages once you send them yourself.
When you contact us by email or phone, we process the information you provide, in particular:
- your name and contact details (email address, phone number);
- transfer details (pickup location and time, destination, number of passengers, flight number where given, and other requests);
- for business customers, the company name, VAT ID and billing address;
- order and payment details; and
- any other information you include in your message.
Purposes and legal bases
- Responding to your enquiry, preparing a quote and carrying out the booked transfer — entering into and performing a contract (Article 6(1)(b) GDPR).
- Issuing invoices and keeping business records — compliance with legal obligations (Article 6(1)(c) GDPR).
- Establishing, exercising or defending legal claims — legitimate interest (Article 6(1)(f) GDPR).
- Operating and securing the website — legitimate interest (Article 6(1)(f) GDPR).
The website has no newsletter sign-up and does not collect data for marketing or profiling purposes.
Recipients of personal data
We do not sell personal data. We share it only where necessary to carry out the transfer you have booked, or where we are required to by law (for example under an order of a court or other competent authority).
To the extent necessary for each purpose, personal data may be received by:
- Webtasy d.o.o. (Domenca), Slovenia — website hosting;
- Microsoft (Microsoft 365 / Outlook) — business email;
- Oracle — hosting of our internal transport management application;
- Resend (Plus Five Five, Inc., USA) — delivery of booking form enquiries to our email address;
- an external accounting service — where necessary for invoicing and accounting;
- partner transport providers — where another transport provider carries out a journey; we share only the information reasonably necessary to perform the booked transfer (for example the passenger's name, contact phone number and pickup and destination details).
Providers that process data on our behalf (processors) may use it only on our instructions and for the purpose for which it was provided.
Transfers outside the EU/EEA
Where a provider processes data outside the European Union / European Economic Area (EU/EEA), the transfer takes place only where the conditions of Chapter V GDPR are met, for example on the basis of a European Commission adequacy decision or Standard Contractual Clauses.
Resend (Plus Five Five, Inc.) is based in the USA, so booking form data is transferred to the USA. The company participates in the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision; in addition, the Standard Contractual Clauses adopted by the European Commission are incorporated into its data processing agreement.
Where the use of Microsoft 365 involves a transfer of data outside the EU/EEA, Microsoft carries it out with appropriate safeguards under the GDPR, in particular the Standard Contractual Clauses adopted by the European Commission.
Where an international transfer is carried out by a partner transport provider based outside the EU/EEA, we share with it only the information necessary to perform the transfer you have booked (Article 49(1)(b) GDPR).
Retention period
We keep personal data for as long as needed to provide the service, and afterwards until the limitation periods for any claims arising from the contract have expired.
Invoices are kept for 10 years from the date of issue, as required by tax law.
Links to other websites
The website contains plain links to our Instagram and LinkedIn profiles. These services are not embedded on our website and receive no data unless you click the link. Once you visit their pages, their own privacy policies apply.
Your rights
Under the GDPR you have the right to:
- access your personal data;
- have inaccurate or incomplete data corrected;
- have your data erased, unless we are required by law to keep it;
- restrict processing;
- data portability; and
- object to processing based on legitimate interest.
You can send a request to info@elitetransfer.eu. We respond within one month of receiving your request.
Complaints to the supervisory authority
If you believe that the processing of your personal data breaches the law, you may lodge a complaint with the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si.
Changes to this policy
We update this policy whenever the way we process data changes — for example when an online booking system is introduced. The current version is always published on this page.
