Privacy Policy

In the context of the change in the European legislation regarding the protection of personal data, M&M EXPRESS aligns itself the new regulations regarding their collection, processing and storage.
We would like to inform you about our Privacy Policy to highlight the new rules.
We respect your privacy and believe it is important that you understand how to manage your personal data.

What has changed?

Our revised Privacy Policy helps you have a clearer picture of what information we hold about you, how we use it and what rights you have. We recommend that you read them.

These changes in particular introduce more transparency about our services.

The revised Privacy Policy and Terms and Conditions will take effect on May 25, 2018.
If you continue to use our booking platform after that date, you agree to these new versions. Of course, you can easily change your account settings at any time.

If you have any further questions, please do not hesitate to contact us.

This version of the Privacy Policy will be effective from May 25, 2018.
M&M Express processes the personal data of Users making online reservations and using our Services.
Within this Privacy Policy, we would like to inform you which personal data we process and for what purpose.
M&M Express is the data controller that processes your personal data.
Please read this information carefully to understand how we process your personal data and what your rights are.

Privacy Notice
This Privacy Notice explains how we collect, use and protect any information about you. It also tells you how to contact us if you have any questions about it, and we'll be happy to answer. If you are interested in what we do with cookies and similar technologies, see our Cookie Statement.
We may change this Notice from time to time; so please check back here for any updates.
We offer a wide range of online chauffeured car rental services, including products and services, through our own websites, mobile applications, email and text messages ("Platforms"). We also make this and through our business partners' websites, social media and other platforms.This Notice applies to all personal data we collect while doing this or when you contact us via email, live chat, telephone or post Our business partners are asked to visit our Business Partner Privacy and Cookie Statement to understand how personal data is processed as part of our business relationship.

The personal data you provide to us
We cannot help you make a reservation or request a quote without certain information. When you do any of these things, we ask for the information we need to give you what you want. This is standard stuff and can include your name, age, address and contact details (email, address and phone number). It may also include payment information.
In addition, we may collect information from your computer when you use one of our platforms, even if you do not make a reservation. This may include your IP address, the browser you are using and your language settings. There are also situations where we receive information about you from third parties or collect other information automatically. This is an overview of the information we collect. Want to learn more?

The personal data you provide to us
We store and use the information you give us. When you make a reservation, we need at least your name, email address, phone number, pick-up and drop-off address, and payment information. We could also request your home address, your flight number and date of birth as well as the age of the minor child who is going to travel.
If you contact us (for example by phone, email or social media), we will collect information from you and there.
After booking, we may ask you to provide a review to help us improve our services and to help ensure that future customers get exactly what they are looking for.
There are other ways you can provide us with information. For example, if you are browsing from your mobile device, you may share your current location with us in order to provide you with the best possible services. To make things easier you could open a user account, which allows you to see and manage your bookings, as well as save your personal settings, also makes it easier to make future bookings.

Personal data you give us about other people
You can make a booking on behalf of someone else, for example a friend, family member or colleague. If you do this, please make sure that person knows that you are giving us their details and that they have agreed to how we handle their personal data (as described in this Notice). This is your responsibility.

Personal data collected automatically
When you make a booking, we record which platform it was made on and how you got to our platform (for example, if you came from another site).
Even if you do not end up making a booking, we may automatically collect certain information when you visit our platforms. This may include your IP address, the pages you have visited, the browser you are using and information about clicks. It may also include information about your computer's operating system, its application version, language settings, device-specific settings and features, and device-identifying data.
If you use a mobile device, we may also collect location details. And we can analyze and process basic data about the applications installed on it (eg name, description and category).

Personal data we receive from other companies
We may also obtain information about you from social media platforms, our business partners, and other third parties. E.g:

• We work with affiliated business partners to offer our services on other platforms. When you make a booking on one of these platforms, we may share your personal data with them, and they may share your personal data with us.
• Companies that provide the services you have booked through our platforms may need to send us information about you - for example, if your booking results in an insurance claim or customer service dispute.
• Our business partners may also send us information about you that can help us show you more relevant ads.

We may combine any of this information with information you provide directly to us.
See "Why do we collect and use your personal data?" for details.

Why do we collect and use your personal data?
We ask for your personal data so that we can book your car (or anything else you need for your booking) and make sure you get the best possible service. We also use it to contact you and inform you about the latest proposals and special offers. These are the main reasons why we collect your personal data, but there are other reasons as well. Want to learn more?

Why do we collect and use your personal data?
We may use your personal data in the following ways:

• Bookings: Primarily, we use your personal data to make and manage your booking and to send you the necessary details about the booked service. This includes sending you communications relating to your booking, such as confirmations, changes and reminders.
• Customer service: We offer a customer information service. Our customer service team needs your details to help you make a booking, for example, or to answer any questions you may have before, during or after your booking.
• Customer reviews: We may use your contact details to send you a short questionnaire about your booking. This helps us understand and improve our service and the services offered by our business partners.
• Account Facilities: To make things easier, you can create a user account on our platforms. This involves providing your personal data and allows you to do a number of useful things. You can manage your bookings, settings and personal preferences. It also makes future bookings easier.
• Marketing activities: We also use your personal data for marketing activities, which may include:
  • Contacting you by post, telephone, email or SMS (depending on the contact details you give us) with our latest news, special offers, discounts and updates, including details of our (and/or your our group companies or business partners). You can quickly and easily unsubscribe from these marketing communications at any time – click on the "unsubscribe" link.
  • Contact by phone, e-mail or SMS with information about your reservation.
  • Displaying relevant offers on our platforms or on third-party websites, including social networking sites.
• Communicating with you: There may be other times when we contact you by phone, email or SMS. There can be a number of reasons for this, including:
• Responding to and dealing with any request you have made.
  • Emailing a reminder for a booking you haven't completed to see if you need help with it.
  • Sending a survey or invitation to review your experience.
  • Sending other materials related to your booking, such as how you can contact us (or another company) if you need help during your booking.
  • Sending a summary of your previous bookings.
  • Sending other administrative messages, which may include security alerts, even if you do not have an upcoming booking.
• Market Research: We may ask you to participate in market research. Any additional personal data you provide us as part of this study will only be used with your consent.
• Fraud detection and prevention: In order to provide you with a safe and reliable service, we use your personal data to detect and prevent fraud and other illegal or unwanted activities. Similarly, we may use personal data for security and risk assessment purposes, which may include user and booking verification. This may mean that we may sometimes put certain bookings on hold.
• Improving our services: We analyze personal data to help us improve the functionality and quality of our online services and to improve the overall user experience. We are always working to make our platforms easier and more enjoyable to use.
• Customer reviews: After booking, we may invite you to provide a review about the services we or our business partners provide. Your review will help future customers make the right choice and help our business partners improve the services they offer. By submitting a review, you agree that it may be displayed. You can review anonymously or simply enter your first name and country location.
• Call monitoring: We may record telephone calls and/or allow other people to listen to them, to help us train our colleagues and to ensure that we continuously provide the best quality service. We automatically delete records after a certain period of time, unless we have good reason not to (for example, when we believe there is evidence of fraud).
• Legal Purposes: Finally, in certain cases, we may need to use your personal data to resolve legal disputes, for regulatory investigations, for compliance reasons, or to ensure that we accurately apply the terms and our terms.

In order to process your personal data in this way, we rely on the following legal grounds:

• Performance of a contract: We need to use your personal data to perform any contract you have entered into with us. For example, when you book transport, we need to transfer your booking details to your allocated driver, to make sure you are met at the correct place.
• Legitimate interests: We may use your information for our "legitimate interests" (a term that applies to anything we believe is an essential part of running our business effectively – while respecting your rights and the law). For example, to provide you with the most appropriate content on our platforms, including our emails and newsletters; to improve and promote our products and services; and for administrative purposes.
• Consent: We may rely on your consent to use your personal data in certain circumstances, for example for direct marketing purposes. You can withdraw your consent at any time by email to office@transferairport.ro mentioning "Confidentiality" in the subject line.

With which third parties do we share your personal data – and why?
There are a number of different business partners integrated into the services we provide, and in certain situations we may share your personal data with them. In most cases, we simply pass your booking details on to business partners who help us deliver the service you request. We will also share your data with other third parties, which may include payment service providers, advertising partners and in some cases – authorities. These are the main reasons why we would share your personal data. Want to learn more?

With which third parties do we share your personal data – and why?

• Travel agencies that launch reservations on the M&M Express platform. These details may include your name, age, contact details (email, address and telephone number), date of birth, flight details and any preferences you have communicated to us at the time of booking. If there is a dispute regarding your booking or insurance coverage or any other type of customer service issue, we may need to provide some information about the booking process as well as the dispute itself. This may include a copy of your booking confirmation, to prove that a booking has been made, as well as any information relating to your complaint. Please note that any information you provide directly to the company providing the car and/or related products will be stored and used in accordance with their own privacy notices and terms and conditions.
• Our business partners: We work with business partners around the world. Some of our partners offer or promote our services, helping other business partners to offer and promote their own travel-related services. This may mean that their services are integrated into our platforms. When you make a booking on one of our business partners' platforms, they will send us some of the personal data you have provided. Similarly, we may send some personal data about your booking to our business partners. This could be, for example, to help them analyze their business or run their loyalty programs. It could also be to send you things like special offers, but only if you've given your consent for this. If the business partner provides customer service support, we will send them the details of your booking that they need to provide you with the support you need. In either case, the handling of your personal data is governed by the privacy notices of those business partners. When you make a booking on a business partner's website, read the privacy notice to see how they handle your personal data. When you purchase a product or service provided by one of our business partners, we will send them the personal data they need to provide it. Finally, we may also share information about our users with business partners for fraud detection/prevention purposes, but only as strictly necessary.
• Competent authorities: We may share your personal data with governmental or investigative authorities if we are required to do so by law (or any regulation). This includes court orders, subpoenas and orders arising from legal processes and criminal investigations. We may also disclose your personal data if strictly necessary for the prevention, detection or prosecution of fraud and other criminal acts. And we may need to disclose personal data to competent authorities to protect and defend our rights or property or the rights or property of our business partners.
• Third party service providers: We may use third party service providers to process your personal data on our behalf and to support us in providing our services. For example, we may use them to contact you or to send booking information on our behalf to the company providing the service or to manage aspects of our website, call centers or our own marketing activities. We may also use third-party service providers for market research and fraud detection and prevention services, including fraud screening services. These third parties are bound by the confidentiality clauses and are not allowed to use your personal data for other purposes.
• Advertising Partners: We may share your email address and other personal data with third-party advertising partners to ensure that you see relevant advertisements when we market our services through third-party business partners. We also work with third-party advertising networks to market services on other platforms and with third-party providers that help us analyze our own data. All such third parties will be required to enter into confidentiality agreements and will not be able to use your personal data for other purposes. For more information about personalized ads and your choices, read "How and why do we use these technologies?" and "It's your choice: Opting in and opting out."
• Payment service providers and other financial institutions: We also work with third party payment service providers to arrange payments or payment guarantees. If you (or the holder of the bank card used to make the booking) request a refund, you may need to share certain booking details with the relevant payment service provider and financial institution. This may include a copy of your booking confirmation or the IP address used to make the booking. We may also share information with relevant financial institutions where we deem it necessary for fraud detection and prevention purposes.

How is your personal data shared within M&M Express SRL?
We may receive personal data about you from other companies - Travel Agents or share your personal data with them for the following purposes:

• to provide services (including to make, administer and manage bookings or to manage payments);
• to provide customer support services;
• to detect, prevent and investigate fraud, other illegal activities and data breaches;
• for analytical and product improvement purposes;
• provide personalized offers or send you marketing materials with your consent or in accordance with applicable law;
• to ensure compliance with applicable laws.

For purposes 1-5, we rely on our legitimate interest in sharing and receiving personal data.
For purpose 6, we rely, where applicable, on compliance with legal obligations (such as requests from official authorities).

How can we use mobile devices?
We offer versions of our regular website that have been optimized for mobile and tablet browsing. They collect and process your personal data in the same way as our other platforms and also allow you to make online bookings.

How can we use mobile devices?
In order to provide you with a better service and more relevant marketing, we may use something known as "cross-device tracking". This just means that we look at how you use our platforms across multiple devices: for example, we might combine data from your mobile phone and home computer This is something we may or may not use cookies for (for more on cookies and similar technologies, see our Cookie Statement own -s).
To ensure that you find offers that are more likely to interest you in our newsletter, we analyze the searches you make and the services you book across multiple devices once you've logged in to your user account. If you don't want us to do this, just log out before browsing or unsubscribe from our newsletter.

What security procedures do we use to protect your personal data?
Our business systems and procedures ensure that we take all reasonable steps to protect your personal data and protect it against improper or unauthorized use in accordance with European data protection laws. We also have specific security procedures and restrictions (both technical and physical) that limit access to and use of any personal data we hold. Only authorized personnel can access personal data – and they are only allowed to do so for specific, authorized reasons.

How do we treat children's personal data?
We do not direct our services to children under the age of 18. For children under the age of 18, use of any service is permitted only if accompanied by a parent or guardian. We may receive information about children in certain situations, for example as part of a booking or in connection with a customer service dispute. If this happens, we will only collect and use that information with the consent of the child's parent or guardian. We reserve the right to delete any information we may receive from a child under this age or without the valid consent of a parent or guardian.

How can you control the personal data you have given us?
You have the right, subject to legal exceptions, to access, correct or delete any personal data we hold about you and to object to the processing of your personal data. You can request the personal information we hold and exercise any of these rights. If you do so, we will ask you for additional information to confirm your identity, to keep your information safe and we will process your request in accordance with applicable European data protection law. You can update or delete your user account at any time by logging into our site.
When you make a booking or request a quote, we ask if you want to opt-in to receive marketing emails. You can opt-out at any time by clicking "unsubscribe" in any of these marketing emails or by updating your email preferences in your user account.

Who is responsible for processing personal data on our platforms?
M&M Express SRL controls the processing of personal data on its platforms. If you have any questions, concerns, or comments about our practices or this Privacy Notice, please email office@transferairport.ro with "Privacy" in the subject line and we'll get back to you right away. When it comes to privacy, we are always happy to chat.

What should you do in the event of a privacy breach?
If you believe that we have violated your right to privacy, please inform us by sending us an email to reclamatii@transferairport.ro mentioning "Privacy". This allows us to investigate the situation as soon as possible.

Can this Privacy Policy be changed?
M&M Express has the right to modify or supplement the Privacy Policy at any time by displaying the modified Privacy Policy on the Online Platform. We will notify you by email if a change or addition will materially impair your rights or obligations or become known to you while using the Service. The Romanian version of the Privacy Policy is the original version, the other languages ​​are just the translations. In the event of an incompatibility, the Romanian language version will prevail.

Contact
If you have any questions about the Privacy Policy, you can contact us at any time;
M&M Express SRL
Brașov, str. Iuliu Maniu no. 37, Postal code: 500091
Telephone: 0268-310444 (Monday - Friday between 10:00 and 18:00)
Email: office@transferairport.ro