Privacybeleid

This Privacy Policy applies to personal information processed
through the YourPrivateDriver.be website and in connection with
quotations, bookings, payments, chauffeur assignments, journeys,
customer support and related services.

For the processing described on this page, Your Private Driver
acts as the data controller. This means that we determine why
and how personal information is used for our services.

By using the website or submitting booking information, you
acknowledge that your information will be processed as explained
in this policy. Where you book for another passenger, you should
ensure that the passenger is aware of the relevant information.

The information we obtain depends on how you interact with us.
A simple website visit generally requires less information than
a completed transport reservation.

Information may be provided through our booking forms, contact
forms, telephone calls, WhatsApp, email or direct communication
with a chauffeur or customer-support representative.

We may also receive information from a person booking on your
behalf, a corporate customer, a travel organiser, a payment
provider or a professional transport partner involved in the
reis.

Special requests

A booking may occasionally include information relating to
accessibility, reduced mobility, allergies or another passenger
requirement. Please provide only information that is genuinely
necessary to organise the service safely.

Where such information qualifies as sensitive personal data,
we process it only when permitted by law, including where the
passenger has deliberately provided it for the requested service.

Depending on the circumstances, processing may be necessary:

• To take steps requested before entering into a transport contract.
• To perform a confirmed booking or related contractual obligation.
• To comply with tax, accounting, legal or regulatory duties.
• To protect passengers or another person’s vital interests
  in an emergency.
• For legitimate business interests that do not override your
  fundamental rights.
• On the basis of consent where consent is legally required.

Legitimate interests may include protecting our website, preventing
fraudulent bookings, maintaining service quality, resolving
disputes and improving business operations.

Payments made through the website are securely processed by
Stripe. Payment card information is entered into Stripe’s payment
environment rather than being stored directly by Your Private
Driver.

Stripe processes personal information under its own privacy
and security arrangements. It may also perform fraud-prevention,
authentication and payment-compliance checks.

Information is disclosed only where there is a valid operational,
contractual or legal reason to do so.

Chauffeurs and transport partners receive only the information
reasonably required to perform the assigned service. They are not
authorised to use passenger details for unrelated purposes.

Processing outside the European Economic Area

Some technical providers may process information in countries
outside Belgium or the European Economic Area. Where required,
appropriate safeguards are used, such as adequacy decisions,
approved contractual clauses or another lawful transfer mechanism.

When you access the website, certain technical information may
be generated automatically. This can include the IP address,
browser type, device category, operating system, requested pages,
visit time and technical error information.

Such information helps us operate the website, diagnose problems,
maintain security and understand how visitors use its functions.

Cookie categories

Non-essential cookies are used only where an appropriate legal
basis exists and, where required, after your consent has been
obtained.

You can manage available choices through the cookie settings
displayed on the website. Browser controls may also allow cookies
to be blocked or removed, although disabling essential cookies
may affect website or booking functions.

Personal information is not kept indefinitely. The applicable
retention period depends on the type of record, the purpose for
which it was collected and the legal obligations connected with it.

• Uncompleted enquiries may be removed after they are no longer
  relevant.
• Booking and communication records may be kept while required
  for service management, complaints or legal claims.
• Invoices and transaction records are retained for the periods
  required by Belgian accounting and tax rules.
• Security information may be retained where reasonably necessary
  to detect fraud or protect the website.

When information is no longer required, it may be deleted,
anonymised or securely restricted from ordinary use.

Security measures

We use reasonable organisational and technical measures intended
to protect information from unauthorised access, alteration,
disclosure, accidental loss or misuse.

These measures may include controlled access, secure connections,
account protection, software maintenance, data minimisation and
the use of professional service providers.

Subject to the conditions and exceptions established by the GDPR,
you may exercise the following rights:

• Receive information about how your personal data is processed.
• Request access to personal information held about you.
• Correct inaccurate or incomplete information.
• Request deletion where continued retention is no longer lawful
  or necessary.
• Restrict processing in certain circumstances.
• Receive eligible information in a portable format.
• Object to processing based on legitimate interests.
• Withdraw consent for future processing where consent is the
  applicable legal basis.

Withdrawing consent does not make processing carried out before
the withdrawal unlawful.

Some requests may be limited where information must be retained
for accounting, legal claims, fraud prevention or another
overriding legal obligation.

Submitting a request

Please contact us using the details shown below and describe
the right you wish to exercise. We may request reasonable evidence
of identity before providing, changing or deleting information.

This verification protects personal data from being disclosed
to an unauthorised person. We will respond within the period
required by applicable law and will inform you where additional
time is lawfully necessary.

Questions about this policy or requests concerning your personal
information may be sent to Your Private Driver.

Belgian Data Protection Authority

You may lodge a complaint with the Belgian Data Protection
Authority if you believe that your personal information has been
processed unlawfully. We nevertheless invite you to contact us
first so that we have an opportunity to examine the matter.

The Belgian Data Protection Authority can be contacted at
Rue de la Presse 35, 1000 Brussels, Belgium.

Changes to this Privacy Policy

This policy may be revised when our website, services, providers
or legal responsibilities change. The latest version will be
published on this page with a revised update date.

Where a change materially affects the way existing personal
information is used, we will provide additional notice where
this is required by law.