Tazzi, a private company, is responsible for the processing of your data.
Personal data collected
Personal data that you communicate to us. We collect the personal data that you communicate to us directly, namely during the creation and modification of your account and use of our Services. The data categories involved are as follows:
Identity data: this information may include, inter alia, your name, surname, photograph, telephone number, e-mail address, or even your postal address;
Bank details: this information is used for the purpose of carrying out your travels and fighting fraud. It will be passed on to the payment service providers we work with. Except for the purposes of proof of payment, this data will be retained until your account is closed and/or your credit card expires. The retention of your bank details only refers to the last four digits of the credit card and its expiry date.
Personal data collected in the context of using our Services. We also collect other types of personal data that concern you when you use our Services. The data categories involved are as follows:
Location data: If you give us permission to do so, we will need to collect satellite location data for the mobile device you use to access the Tazzi app. In any case, we collect satellite location data relating to the mobile device used by the Driver during the requested trip. We will also be able to estimate your location from the analysis of your IP address (only at the level of the city in which you are located);
Travel data: we collect some data relating to the travels you request through our Services: date, time, collection point and destination addresses (which can be directly provided by the User Customer or which can be known by analyzing their location ), advertised price and paid price, order status (placed or cancelled). We also track the total number of trips made.
Transaction data: in addition to information regarding the payment methods you use, transaction data is collected by the payment service providers we work with. We also collect some of this transactional data, in particular information relating to authorization requests and payments made: amounts, dates and times, as well as the response returned by our partner payment service providers.
Technical and navigation data: we may collect various types of data relating to the technical modalities through which you access our Services, as well as data related to your use and navigation in our Services: name and version of the operating system of the mobile device used, IP address, date and time of last connection to our Services, settings and preferences, navigation data on the Mobile Application or on our website. These different data may be collected, namely, through cookies or other similar techniques.
Personal data as a Driver: if you also use our Services as a Driver, we may associate the personal data we collect as such with the personal data relating to your use of our Services as a User Customer. It is clarified that the collection and processing of personal data relating to your use of our Services as a Driver complies with our Confidentiality Policy - Driver s.
Personal data communicated by third parties: If you use our Services as part of our offers to companies, your employer, or, in general, the company that allows you to benefit from our Services in this context may communicate to us some personal data that concern you.
Use of your personal data
We use the personal data we collect for several purposes:
Functioning of the Services: firstly, the personal data we collect are necessary for the functioning of the Services, namely in the context of planning and carrying out trips, the security of our systems, our assistance services or even to communicate with you or for that can communicate with Drivers;
Improvement of the Services: the data we collect, namely during the use of the Services, may be used by Tazzi based on its legitimate interest, for the purposes of commercial development and with a view to improving its knowledge of User Customers, increasing the security of our systems and propose new services or features;
Internal management of the Services: we may use your personal data based on Tazzi's legitimate interest in combating fraud or with the aim of preventing and correcting any failures that affect our Services. Also based on the legitimate interest in improving our Services, we may also use your personal data, anonymously or otherwise, in the context of analyses, statistics or for research and development operations;
Commercial communications & promotional operations: without prejudice to your right to object, we may, based on Tazzi's legitimate interest, use your personal data to make you aware of offers, promotions or any other commercial information related to our Services or services of our partners, if you authorize the processing of your data for this purpose. We may also use your data in the context of contests and other promotional operations in order to propose your participation in them (if you accept to receive this type of communication from us) and monitor and manage your participation, if applicable;
Personalization: without prejudice, namely the necessary consent regarding cookies and similar techniques contained in our Cookies Policy, we may use some data to propose you, namely through advertising, services and personalized offers, including in cases where you visit other websites on the Internet;
Sharing personal data
We may have to share your personal data with:
Drivers: in order to transport you and make the trip you requested, drivers will have access to your name, surname, characteristics of the requested trip (address, etc.), and also to your location, if you have authorized us to collect this type of data. We have also implemented a mechanism that allows drivers to call you to the number you have indicated, without, however, having access to it, thus respecting the principle of anonymization of calls. This mechanism is solely intended to facilitate the collection and keep you informed of any problem or incident when necessary;
Your employer (and similar): as part of our offers to companies, we may communicate to your employer some data concerning you, or to the company that allows you to benefit from our Services in this regard;
The companies of our group: we may have to share your data with the companies with which we are related (parent company, subsidiaries or affiliates), within the scope of the functioning of the Services or in particular for logistical purposes
We may also share your personal data with other companies, namely in the context of mergers, acquisitions, sale of assets, or restructuring, without prejudice to informing you in advance that such communication will take place and to do so only in the absence of opposition from your part, in accordance with applicable law.
Public authorities: we may be required to communicate your personal data to respond to a specific request from a competent administrative or judicial authority and, in general, in all situations where this is required by law, regulation, administrative decision or judicial;
Other third parties: within the scope of specific offers and services that you have subscribed to, within the scope of other applications or internet sites that connect to our Services through an API proposed by us, without prejudice to the need for us to have obtained your agreement for this purpose.
In general, we may share your data with any other third parties provided that we inform you of this fact and provided that you have not objected or that we have obtained your prior consent to such communication, in accordance with applicable law.
In order to guarantee, in Tazzi's legitimate interest, the quality and security of our Services, we use two mechanisms to combat fraud in credit card transactions: (i) an internal system for detecting suspicious behavior with an evolutionary algorithm based on in a pre-established profile based on your history, in order to identify abnormal or unusual expenses related to your habits of using our Services. In this case, you will be invited by electronic means to contact Tazzi Customer Support to analyze your situation and proceed, if necessary, with the respective regularization. If you do not respond, you may run the risk of not being able to continue to benefit from our Services; and (ii) the use of anti-fraud systems proposed by our payment service providers.
This data is only kept for as long as necessary to eliminate fraud risks associated with credit card transactions.
In this context, we may carry out checks on the information you provide (eg name, surname, address, email, etc.) and we may also ask Drivers to verify your identity during the journey (asking you to present a document of identity).
Mobile Device Authorization Mechanisms
The operating systems of the most common mobile devices have a specific authorization mechanism for some data: location sharing, notifications, access to contacts, camera, etc. When using our Services with a mobile device, you will be asked to give us permission to do so, in particular with regard to your location data.
It should be noted that you can withdraw your authorization under consideration at any time by changing the parameters of your mobile device. However, withdrawing such authorization may limit your ability to benefit from certain features. With regard to location, it should be added that disabling the location option of your mobile device will not prevent us from identifying, even indirectly, your location along the journeys you make, whether through the driver's mobile device, or by determining your approximate location from the analysis of your IP address.
For more information, we recommend consulting the documentation provided by the publisher of your mobile device's operating system.
Period of retention of your personal data
Your personal data will be kept in active files or systems only for the time necessary to fulfill the purposes for which they were collected, according to the applicable rules in the matter. I.e:
As a rule, for all your data: until the cancellation of your User Account in our Services;
Specifically for electronic marketing purposes, we may retain your e-mail address, as well as your name and surname for a maximum period of one year after the last contact with you, without prejudice to the possibility of exercising your right to opposition at any time.
If you later object to the sending of this type of communication, we may keep the data collected for the period necessary to comply with your decision (and to prove compliance with it), after which they will be deleted, unless necessary the fulfillment of other purposes (eg, use of our Services).
For any other type of treatment, we keep the personal data collected throughout the entire business relationship, and after it, for the maximum periods provided for by law to comply with tax and accounting obligations. In any case, your data may be temporarily archived during the applicable statute of limitations.
Pursuant to the regulations in force, you have, if necessary and upon presentation of a valid identification document, the rights of access, portability, rectification, limitation and deletion of the data that concern you and a right to object to the processing of such data, without prejudice to the possible existence of legitimate and imperative reasons that permit or impose such treatment. You can also define rules regarding the fate of your personal data in the event of death. These rights can be exercised directly with Tazzi by email to: firstname.lastname@example.org or by post with Tazzi at the address to be defined
Finally, you have the right to file a complaint with the CNPD (National Data Protection Commission, the National Control Authority).