Personal data protection
Privacy Policy
This policy explains what information CroCab processes, why it is needed and what rights you have.
This English text is provided for convenience. The Croatian version is authoritative.
Controller
Information we process
- account details such as name, contact information, login data and an optional profile photo
- ride and web-request details such as pickup, destination, time, category, services and notes
- location only when a passenger chooses location services or sets a pickup point
- technical and security information required for authentication, notifications, abuse prevention and system protection
- ratings, comments, enquiries and complaints
Purposes
- creating and maintaining accounts
- receiving, reviewing, organising, assigning and tracking rides
- ride communication, support and complaints
- security, abuse prevention and legal compliance
- accounting, tax and transport obligations where applicable
Partners and service providers
Information required to perform a ride is shared only with the assigned driver and transport partner. Technical processors may provide infrastructure, authentication, notification, security and mapping services only to the extent required to operate CroCab.
Retention
Information is retained while needed to provide the service, resolve disputes, maintain security or meet legal obligations. Records that must remain after account deletion are pseudonymised for the applicable retention period.
Your rights
Where applicable, you may request access, correction, deletion, restriction, portability or object to processing. Contact us at the address above or through the app. You may also lodge a complaint with the Croatian Personal Data Protection Agency.
Changes
Material changes receive a new version and effective date. Where required, the app will ask users to accept the updated document.