Information
Privacy Policy
How we handle information when you browse the website or ask us to plan a journey.
Last updated: 1 October 2026
Who is responsible for your data
This notice concerns the Elite Private Transfer website and requests received through its quote form or contact details. The data controller is the operator identified below.
- Legal name / data controller
- Elite di Luca Cristian
- Registered address
- Via delle Batterie 23, 30013 Cavallino-Treporti
- info@eliteprivatetransfer.com
- VAT number
- 04889470276
- Telephone
- +39 327 429 0694
Privacy enquiries: info@eliteprivatetransfer.com.
Information we receive
When you contact us, we receive the details you choose to provide: your name, email address, optional telephone number, pickup and destination, dates and times, passenger count, selected service or tour and any return journey. Optional information includes luggage, airport, flight or train number, child-seat requirements and notes. Business or event requests may include company or agency, number of journeys and programme. Services at disposal may include duration and planned stops.
Fields marked with an asterisk are needed to assess and reply to a request. Other fields are optional; leaving them blank may mean we need to ask you for further details. Sending a request does not create a confirmed booking.
Please do not send payment-card details, identity documents, medical records or other sensitive information through the form. For children’s seats, approximate ages are enough; we do not ask for children’s names. Describe practical assistance needs without including a diagnosis.
The web server also receives technical information required to deliver and protect the website, such as IP address, request time, requested resource, browser information and error records.
Why we use the information
- Enquiries and quotations: to understand your request, assess availability, prepare a proposal and reply. The legal basis is taking steps at your request before entering a contract (Article 6(1)(b) GDPR).
- Confirmed services: to organise and perform the agreed journey and communicate about it, on the basis of the contract (Article 6(1)(b)).
- Legal obligations: where a booking requires invoices or other legally required records, on the basis of the applicable legal obligation (Article 6(1)(c)).
- Website security and protection of rights: to limit automated abuse, investigate technical faults and establish or defend legal claims, on the basis of the controller’s legitimate interests (Article 6(1)(f)), taking your rights into account.
The website does not provide a newsletter subscription or advertising-profile service. A quote request and acknowledgment of this notice do not subscribe you to marketing. We do not use the quote form to make decisions with legal or similarly significant effects solely by automated processing.
How a quote request is handled
The short form on the home page carries your journey details to the contact page using a form submission. It does not add those journey details to the page address. Service and tour links carry a public content identifier so your selection can be displayed in the full form.
When an enabled request is submitted, the custom quote system sends its contents by email to the operator. It does not create a customer-record entry in the website’s quote database. Copies in email accounts and any records created to manage a confirmed journey remain personal data and are covered by this notice.
The quote handler uses a keyed IP-derived rate-limit counter with a ten-minute expiry. This is a security control, not an advertising identifier. A non-identifying confirmation token used for a return page expires after five minutes and is removed when read. Hosting logs and backups are separate from these short-lived counters.
Who can receive the information
Information is accessible to authorised people handling enquiries and journeys, and to service providers supporting website hosting, technical maintenance, email delivery and record keeping. Where they act on the controller’s instructions, the appropriate data-processing arrangements are required. Information may also be supplied to professional advisers or public authorities where necessary or legally required.
For a confirmed journey, only relevant operational details should be shared with the driver or any specifically agreed transport provider. We do not publish your request on the website.
Technical services include Netsons hosting and email infrastructure. Where the operator accesses the mailbox through a connected email application, the application provider may also process the information needed to deliver that service. You can request details of the providers handling your enquiry at the privacy contact above.
Where information is processed
Hosting, email and connected service providers may process information in the countries where they operate. Where a transfer outside the European Economic Area occurs, it must rely on an applicable adequacy decision or appropriate safeguards under the GDPR. Contact the controller for information about the arrangements and safeguards applicable to your data.
How long information is kept
Enquiry information is retained for the period needed to assess the request, provide the response and deal with relevant follow-up. If a booking follows, the information needed for the service and for applicable accounting, tax or legal obligations is retained for those purposes. Information necessary for an actual dispute may need to be retained until that matter and the relevant legal periods have ended.
The ten-minute security counter, five-minute confirmation token and browser-storage lifetimes described in the Cookie Policy have separate, limited purposes. They do not determine how long an enquiry email is kept.
Your choices and rights
Depending on the applicable conditions, you may request access to your personal data, correction, deletion, restriction of processing and portability. You may object to processing based on legitimate interests. Where a separate processing activity relies on consent, you may withdraw that consent without affecting earlier lawful processing.
Send your request to info@eliteprivatetransfer.com. We may ask for proportionate information to verify your identity. Requests are normally addressed within one month; if an extension is permitted because of their complexity or number, you will be informed within that first month.
You may lodge a complaint with the Italian Data Protection Authority or the competent supervisory authority, including in the country of your habitual residence or place of work, and seek a judicial remedy.
Technical storage and external links
The Cookie Policy describes the technical browser storage used by the website. Links to external websites do not embed those services in this site; visiting a link opens a separate service governed by its own information and settings.
Changes to this notice
This notice will be updated when the website’s services or processing arrangements change. The date at the top identifies the current version. Information about a materially different use of your data will be provided where required.
Optional analytics, advertising and experience tools
Google Analytics 4, Google Ads and optionally Microsoft Clarity are not active unless configured and enabled with the required information and consent. The current status and categories appear in the Cookie Policy. Consent is requested separately for Analytics, Advertising and Experience; declining does not prevent an enquiry. The theme does not load these scripts before permission. Contact details and itineraries are not included in conversion events; Clarity excludes the contact form page and masks the homepage enquiry form.
Spam protection with Cloudflare Turnstile
We use Cloudflare Turnstile to protect our forms from spam and automated abuse. Cloudflare processes technical signals, including IP address and browser information, to distinguish human visitors from bots and improve bot detection. For details, see the Cloudflare Turnstile Privacy Addendum.