1. Data controller
The controller of your personal data is Opotransfer, Lda., NIF 311259588, registered at Rua do Cerco do Porto, Porto, Portugal, operating under the OPO Transfer brand.
For any privacy question, contact us at geral@opotransfer.eu or +351 920 226 818.
2. Data we collect
We only collect the data needed to provide our service:
- Booking form: name, phone number (with country code), pickup location, destination, date and time, number of passengers and luggage.
- Contact form: name, email, phone, subject and message.
- WhatsApp, email or phone: any data you send us directly (for example, flight number or special requests).
- Browsing data: technical and statistical information collected through cookies, as described in our Cookie policy.
We do not ask for sensitive data. Please do not include it in your messages.
3. How we use your data and on what legal basis
- Handling your request and booking (quote, confirmation, contact with the driver) — performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR).
- Answering messages and enquiries — pre-contractual steps and our legitimate interest in replying (Art. 6(1)(b) and (f)).
- Complying with legal obligations, namely tax and invoicing (Art. 6(1)(c)).
- Statistics and website improvement through non-essential cookies — consent (Art. 6(1)(a)), which you may withdraw at any time.
We do not sell your data or use it for automated decision-making or profiling.
5. How long we keep it
- Booking and contact requests: for as long as needed to handle the request and provide the service, and up to 2 years afterwards to deal with any complaints.
- Tax documents: for the period required by law (currently 10 years).
- Cookies: as set out in our Cookie policy.
On the confirmation page, your booking details are temporarily stored in your browser (sessionStorage) to prepare the WhatsApp message. They are deleted when you close the tab.
6. Your rights
You may at any time request access to, rectification or erasure of your data, restriction of processing and data portability, and object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it without affecting processing already carried out.
To exercise these rights, write to geral@opotransfer.eu. We reply within one month at the latest.
You also have the right to lodge a complaint with the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt.
7. Security
We use appropriate technical and organisational measures to protect your data against loss, misuse or unauthorised access, and limit access to the people who need it to provide the service.
8. Minors
Bookings must be made by people aged 18 or over. Journeys with minors are booked by the responsible adult.
9. Changes to this policy
We may update this policy. The date of the last update is shown at the top of this page.