Privacy Policy
Last updated: 6 October 2026
This policy explains how we process your personal data when you use www.blta.ro, make a booking, request a quote or contact us. Processing complies with Regulation (EU) 2016/679 (GDPR) and Romanian Law no. 190/2018.
1. Who the controller is
The data controller is BLACK LIMO CONCEPT SRL, tax ID (CUI) RO38740561, Trade Register no. J2018000264232, registered office at Drum Fermei nr. 23, Bl. 2, Et. P, Ap. 3, Popești-Leordeni, Ilfov County, Romania (“Black Limo Concept”, “we”).
For any question about your personal data, write to contact@blta.ro or call +40 730 514 474.
2. What data we process
We collect only the data needed to arrange your trip or answer you:
- identification and contact data: name, phone number, email address;
- trip details: pick-up and destination addresses, date and time, number of passengers and bags, the vehicle chosen, duration (for hourly hire), and any notes you send us (for example your flight number);
- invoicing data, if you ask for a company invoice: company name, tax ID, address;
- the content of messages sent via forms, email, phone or WhatsApp;
- technical data strictly necessary for the website to work securely (for example IP address and browser type, processed by our hosting provider and anti-spam service).
We do not ask for sensitive data, and we kindly ask you not to include any in your notes.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Receiving and confirming your booking, carrying out the trip, communicating with you and the chauffeur | performance of a contract or steps prior to entering into it – Art. 6(1)(b) |
| Issuing invoices and keeping accounting records | legal obligation – Art. 6(1)(c) |
| Answering quote requests and questions | pre-contractual steps – Art. 6(1)(b), and our legitimate interest in responding to requests – Art. 6(1)(f) |
| Protecting the website against spam and abuse, aggregated traffic statistics | our legitimate interest in keeping the website secure and working – Art. 6(1)(f) |
| Defending against complaints or legal claims | our legitimate interest – Art. 6(1)(f) |
Your contact data and trip details are required to accept a booking; without them we cannot take it. We do not make decisions based solely on automated processing and we do not profile you. We do not use your data for advertising and we never sell it.
4. How your data is stored
Bookings and requests are not stored on the website. They go directly to the company mailbox and to a private Google spreadsheet, accessible only to authorised people in the company. The chauffeur carrying out the trip receives only the information needed for it.
5. Recipients and processors
We use the following providers, who process data on our behalf under contract:
- Cloudflare – website hosting, Turnstile anti-spam protection and cookieless visitor statistics;
- Google – Google Maps, for address suggestions and route calculation, only when you use the calculator; Google Workspace, for email and the spreadsheets where bookings are recorded;
- WhatsApp (Meta Platforms Ireland Ltd.) – if you contact us or book via WhatsApp, or if we send you the pro forma invoice via WhatsApp to the phone number given in the form; in these cases your messages and phone number are also processed by WhatsApp under its own privacy policy (https://www.whatsapp.com/legal/privacy-policy-eea).
- ANAF (Romanian Tax Administration) – final invoices are submitted through the national RO e-Factura system (SPV), as required by law.
Data may also be disclosed to public authorities where the law requires it.
6. Transfers outside the European Economic Area
Cloudflare, Google and WhatsApp (Meta) may process data outside the EEA, including in the United States. In such cases the transfer relies on the European Commission’s adequacy decision for the EU-US Data Privacy Framework, for certified providers, or on the Standard Contractual Clauses approved by the European Commission.
7. How long we keep data
- Booking and request records are kept for 3 years and then deleted.
- Invoices and accounting documents are kept for the periods required by the Romanian Accounting Law no. 82/1991.
- Email messages are kept no longer than the booking or request they relate to.
8. Your rights
Under the GDPR you have the right:
- of access to the data we hold about you;
- to rectification of inaccurate data;
- to erasure (“right to be forgotten”), except for data we are legally required to keep;
- to restriction of processing;
- to data portability for data you provided;
- to object to processing based on our legitimate interest;
- to withdraw your consent at any time where processing is based on consent, without affecting prior processing.
To exercise your rights, write to contact@blta.ro. We will reply without undue delay and within one month of receiving your request.
If you believe your rights have been infringed, you can lodge a complaint with the Romanian data protection authority, ANSPDCP – www.dataprotection.ro.
9. Security
We apply appropriate technical and organisational measures: encrypted connections (HTTPS), access limited to authorised people, two-factor authentication on the accounts we use, and data minimisation.
10. Cookies
This website does not use non-essential cookies. See our Cookie Policy for details.
11. Changes
We may update this policy when our services or the law change. The current version is always published on this page, with its last-updated date.