Privacy policy
PRIVACY POLICY
Transigo Travel S.R.L.
Last Updated: July 2026
1. Introduction
Welcome to Transigo Travel.
Transigo Travel S.R.L. ("Transigo Travel", "Transigo", "we", "our", or "us") is committed to protecting your privacy and handling your personal information in a transparent, secure, and lawful manner.
This Privacy Policy explains how we collect, use, store, disclose, and safeguard your personal data when you:
- visit our website;
- request information;
- make a booking;
- communicate with our customer support;
- use any services provided under the Transigo Travel brand.
We recognize the importance of protecting personal information and process it in accordance with:
- Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR);
- applicable Romanian data protection legislation;
- the Romanian Civil Code;
- applicable consumer protection legislation;
- other relevant European Union legal requirements.
By using our website or booking our services, you acknowledge that you have read this Privacy Policy.
2. About Transigo Travel
Transigo Travel S.R.L. is a company registered in Romania specializing in private ground transportation management and selected travel experiences across Europe.
We manage bookings, customer communication, operational coordination, supplier relationships and service quality standards throughout the customer journey.
Services are delivered through a managed network of carefully selected licensed local transportation partners operating in the relevant destination.
3. Data Controller
The controller responsible for processing your personal data is:
Transigo Travel S.R.L.
Registered Office:
Calea Moșilor, Nr. 158, camera 4, M636, Etaj 4, Sector 2, Bucharest, Romania
Registration Number:
J2026031532008
VAT Number:
RO 55004425
Email:
info@transigotrips.com
Website:
https://transigotrips.com
3A. Privacy Contact and DPO Status
Privacy requests may be sent to info@transigotrips.com.
Transigo Travel has not appointed a Data Protection Officer at this stage, as the company is not currently subject to a mandatory DPO appointment requirement. If this status changes, the relevant DPO contact details will be published and notified where legally required.
4. Scope of this Privacy Policy
This Privacy Policy applies to:
- website visitors;
- customers;
- prospective customers;
- business partners;
- suppliers;
- individuals contacting our company;
- newsletter subscribers.
It does not apply to websites operated by third parties that may be linked from our website.
5. Categories of Personal Data We Collect
Depending on your interaction with us, we may collect the following categories of personal information.
5.1 Identity Information
This may include:
- full name;
- title;
- nationality, where relevant;
- preferred language.
5.2 Contact Information
Including:
- email address;
- telephone number;
- billing address;
- country of residence.
5.3 Booking Information
To organize transportation services we may process:
- pickup location;
- destination;
- hotel information;
- flight number;
- airline;
- arrival terminal;
- cruise information;
- booking reference;
- travel dates;
- number of passengers;
- child seat requests;
- luggage details;
- accessibility requirements;
- special requests voluntarily provided by you.
Special Category Data
Please do not provide health, medical, disability or accessibility information unless it is necessary for arranging the requested service.
If you voluntarily provide accessibility, mobility, health-related or special assistance information, we process it only to the extent strictly necessary for booking administration and service delivery, and only where an applicable GDPR Article 9 condition and legal basis are available.
5.4 Payment Information
Payments are securely processed through authorized third-party payment service providers.
We do not store complete payment card details. Card payments are handled by authorized payment service providers. We do not intentionally store card verification codes such as CVV or CVC after authorization.
Depending on the payment method used, we may receive:
- transaction identifier;
- payment status;
- payment amount;
- payment confirmation.
5.5 Communication Records
We may keep records of:
- emails;
- contact forms;
- live chat conversations;
- customer support requests;
- complaints;
- feedback.
5.6 Technical Information
When you access our website we may automatically collect:
- IP address;
- browser type;
- browser version;
- operating system;
- screen resolution;
- device type;
- language preferences;
- referring URLs;
- session identifiers;
- cookies;
- website usage statistics.
6. How We Collect Personal Data
We collect information through various channels including:
- information you provide directly;
- online booking forms;
- quotation requests;
- email correspondence;
- customer support;
- cookies;
- analytics tools;
- payment providers;
- third-party booking platforms such as Viator, GetYourGuide or similar marketplaces when bookings are placed through those platforms.
6A. Consequences of Not Providing Required Data
Certain information is necessary to confirm, manage and perform a booking. If required booking, contact, payment or pickup information is not provided, we may be unable to confirm or deliver the requested service.
Providing marketing consent, non-essential cookie consent or optional special requests is not required to make a booking.
7. Lawful Basis for Processing
We process personal data only where a lawful basis exists under Article 6 GDPR.
Booking and Service Delivery — Article 6(1)(b) GDPR
We process identity, contact and booking information where this is necessary to take steps before entering into a contract, confirm a booking, manage a reservation, coordinate transportation services, communicate operational updates and provide customer support.
Legal and Accounting Obligations — Article 6(1)(c) GDPR
We process invoicing, accounting, tax and legally required business records where this is necessary to comply with Romanian law, EU law or other applicable legal obligations.
Legitimate Interests — Article 6(1)(f) GDPR
We process limited personal data for legitimate business interests, including fraud prevention, website security, service quality monitoring, complaint handling, supplier management, evidence preservation, legal defence and improvement of our services. Where we rely on legitimate interests, we assess that such interests are not overridden by the rights and freedoms of the individuals concerned.
Consent — Article 6(1)(a) GDPR
Where legally required, we rely on consent for marketing communications, newsletters, analytics cookies, marketing cookies and other optional non-essential tracking technologies.
Special Category Data — Article 9 GDPR
Where you voluntarily provide accessibility, health-related, mobility or special assistance information, we process it only where strictly necessary for arranging the requested service and only where a valid Article 9 GDPR condition applies, such as explicit consent or another applicable lawful condition under GDPR.
Consent may be withdrawn at any time where processing is based on consent.
8. How We Use Your Information
We use personal information to:
- process reservations;
- coordinate transportation services;
- assign bookings to appropriate licensed transportation providers;
- communicate travel information;
- process payments;
- issue invoices;
- verify bookings;
- improve our services;
- monitor quality;
- manage complaints;
- comply with legal obligations;
- prevent fraudulent activities;
- maintain website functionality;
- conduct statistical analysis.
We do not use automated decision-making that produces legal or similarly significant effects.
9. Our Business Model and Data Sharing
Transigo Travel manages private ground transportation services through a vetted network of licensed local transportation partners.
Where necessary to fulfil your reservation, relevant booking information is securely shared with the transportation provider responsible for delivering your transportation service.
The information shared is limited to what is reasonably necessary, including:
- passenger name;
- pickup details;
- destination;
- flight information;
- special transportation requirements;
- contact telephone number where operationally necessary.
Our partners are contractually expected to process personal information responsibly and in accordance with applicable data protection legislation. Where required, Transigo Travel uses contractual data-protection obligations, processor agreements, confidentiality obligations and appropriate transfer safeguards with vendors, processors and service providers.
10. International Transfers of Personal Data
As an international travel services company, Transigo Travel may process bookings involving destinations outside the European Economic Area ("EEA").
Where personal data is transferred outside the EEA, including where global technology providers, booking platforms, support tools or transportation partners are involved, we ensure that at least one of the following safeguards applies:
- the destination country has been recognized by the European Commission as providing an adequate level of data protection;
- Standard Contractual Clauses (SCCs) approved by the European Commission have been implemented;
- another lawful transfer mechanism permitted under applicable data protection legislation is used.
International transfers are limited to the information reasonably necessary to arrange and deliver the requested services.
Where required by GDPR, you may request information about the applicable transfer safeguard by contacting info@transigotrips.com.
11. Third Parties We May Share Data With
We may share your personal information with trusted third parties where necessary for the provision of our services or to comply with legal obligations.
These may include:
Transportation Providers
Licensed transportation companies responsible for providing your booked transfer or related transportation service.
Tour and Activity Providers
Where your reservation includes a tour or travel experience, we may share the information necessary to organize the service.
Payment Service Providers
Companies responsible for securely processing payments.
Technology Providers
Providers of:
- website hosting;
- cloud infrastructure;
- booking management software;
- email systems;
- cybersecurity services;
- customer support tools.
Analytics Providers
Including services used to understand website performance and improve user experience.
Professional Advisers
Lawyers, accountants, auditors and insurance providers where reasonably necessary.
Government Authorities
Where disclosure is required by law or lawful request.
We never sell personal information to third parties.
12. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.
Typical retention periods and retention criteria include:
- incomplete quote or abandoned booking requests: normally up to 6 months;
- customer support enquiries without a confirmed booking: normally up to 12 months;
- operational booking records: normally up to 3 years after the service date, unless longer retention is required for legal claims, accounting or compliance purposes;
- complaint, incident and legal claim files: normally up to 3 years after closure of the matter, or longer where a dispute is ongoing or legally required;
- accounting, invoice and tax records: for the statutory period required by Romanian accounting and tax legislation;
- payment metadata: for the period necessary for payment reconciliation, fraud prevention, chargeback handling and accounting compliance;
- marketing consent records: until consent is withdrawn and, where necessary, for a reasonable period thereafter to demonstrate compliance;
- email suppression lists: for as long as necessary to ensure that unsubscribed users are not contacted again;
- website and security logs: normally 30–90 days unless longer retention is necessary for security, fraud or incident investigation;
- analytics data: according to the configured analytics retention settings;
- cookie consent logs: according to the applicable consent-management settings;
- vendor due diligence, data-processing and transfer safeguard records: for as long as necessary to demonstrate compliance.
Retention periods may be extended where required by law or for the establishment, exercise or defence of legal claims.
13. Information Security
We implement appropriate technical and organisational measures designed to protect personal information against:
- unauthorized access;
- accidental loss;
- destruction;
- alteration;
- disclosure;
- misuse.
Our security measures may include:
- encrypted HTTPS connections;
- secure hosting environments;
- access control policies;
- authentication procedures;
- limited employee access;
- regular software updates;
- malware protection;
- secure backups;
- internal security procedures.
Although we take reasonable precautions, no system connected to the Internet can be guaranteed to be completely secure.
Personal Data Breaches
Where a personal data breach occurs and notification is legally required, Transigo Travel will notify the competent supervisory authority and affected individuals in accordance with applicable GDPR requirements.
14. Your Rights Under GDPR
Subject to applicable law, you may exercise the following rights.
Right of Access
Request confirmation whether we process your personal information and obtain a copy.
Right to Rectification
Request correction of inaccurate or incomplete personal information.
Right to Erasure
Request deletion of your personal information where applicable.
Right to Restriction
Request limitation of processing in certain circumstances.
Right to Data Portability
Receive your personal information in a structured, commonly used and machine-readable format.
Right to Object
Object to processing based on legitimate interests.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time.
Right to Lodge a Complaint
If you believe your privacy rights have been violated, you may lodge a complaint with the competent supervisory authority in Romania, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), or with the competent supervisory authority in your country of residence within the European Union.
How to Exercise Your Rights
You may exercise your GDPR rights by emailing info@transigotrips.com. We normally respond within one month of receiving a valid request, subject to lawful extensions for complex or multiple requests.
15. Marketing Communications
Where legally permitted, and where required only with your consent, we may send newsletters, promotional offers, travel updates and company news by email or other communication channels enabled by you.
Marketing consent is optional and is not required to make a booking.
You may unsubscribe at any time by clicking the unsubscribe link in our messages or by contacting us directly.
You have the right to object at any time to the processing of your personal data for direct marketing purposes. If you object or withdraw consent, we will stop using your data for direct marketing, subject to maintaining a limited suppression record to ensure that you are not contacted again.
16. Cookies and Similar Technologies
Our website uses cookies and similar technologies to:
- operate the website;
- remember user preferences;
- analyse website performance;
- improve security;
- understand visitor behaviour.
Where required by law, non-essential cookies, analytics cookies, marketing cookies and similar tracking technologies are used only after obtaining your consent. You can withdraw or change cookie consent through the Cookie Settings mechanism where available.
1). Introduction
This Cookie Policy explains how Transigo Travel S.R.L. ("Transigo Travel", "we", "our", or "us") uses cookies and similar technologies when you visit www.transigotrips.com.
This Policy should be read together with our Privacy Policy.
2). What Are Cookies?
Cookies are small text files placed on your device when you visit a website. Similar technologies may include pixels, tags, local storage, SDKs and scripts.
Cookies and similar technologies may help websites operate, remember preferences, improve security, measure performance and, where consent is provided, support analytics or marketing.
3). Legal Basis and Consent
Strictly necessary cookies may be used without prior consent where they are required to provide the website or booking functionality requested by the user.
Non-essential cookies, including analytics, functional preference cookies that are not strictly necessary, marketing cookies, advertising pixels and similar tracking technologies, are used only where legally permitted and, where required, only after the user has provided consent.
Consent must be freely given, specific, informed and unambiguous. Continuing to browse, scrolling, or closing the banner is not treated as consent for non-essential cookies.
4). Cookie Categories
Strictly Necessary Cookies
These cookies are required for core website functionality, security, booking flow, fraud prevention, load balancing, session management and payment-related security. Without them, certain website functions may not work.
Functional Cookies
Functional cookies may remember preferences such as language, region, accessibility settings or previously selected options. Where these cookies are not strictly necessary, they are used only with consent where required by law.
Analytics Cookies
Analytics cookies help us understand how visitors use the Website, including pages visited, session duration, navigation paths, device type and browser information. Analytics cookies are used only with consent where required by law.
Marketing Cookies
Marketing cookies and pixels may be used to measure advertising performance, personalize advertisements or improve marketing campaigns. These technologies are used only with prior consent.
5). Third-Party Cookies and Similar Technologies
The Website may use third-party technologies only where they are actually implemented and configured for the Website.
Depending on the final technical setup, providers may include:
- hosting, security or content-delivery providers;
- booking software providers;
- payment service providers;
- analytics providers such as Google Analytics, where enabled;
- tag-management providers such as Google Tag Manager, where enabled;
- advertising technologies such as Meta Pixel, where enabled;
- ecommerce or website platform providers such as Shopify, where enabled;
- customer support or communication tools, where enabled.
If a provider or technology is not enabled on the Website, it should not be treated as active merely because it is mentioned in this Policy.
6). Cookie Inventory
A current cookie inventory should be maintained and updated whenever the Website's technical setup changes.
The cookie inventory should identify, where applicable:
- cookie or technology name;
- provider;
- purpose;
- category;
- first-party or third-party status;
- duration;
- legal basis;
- whether consent is required.
Where a cookie settings panel is available, the current list of active non-essential cookies should be made available through that panel or a similar transparent mechanism.
7). Consent Management
Where non-essential cookies are used, users should be able to:
- accept all non-essential cookies;
- reject all non-essential cookies;
- customize preferences by category;
- change or withdraw consent at any time.
Withdrawing consent should be as easy as providing consent.
Non-essential cookies should not be placed before consent is obtained where consent is legally required.
8). Booking-Related Cookies
Where customers make reservations through our Website, cookies may be used to:
- maintain booking sessions;
- prevent duplicate bookings;
- remember selected services during the booking process;
- support payment security;
- improve booking reliability.
These cookies are generally considered essential where they are necessary for the booking process requested by the user.
9). Cookie Duration
Cookies may be session-based or persistent.
Session cookies are deleted automatically when you close your browser.
Persistent cookies remain on your device until they expire, are deleted manually, or are removed by your browser.
The exact duration of each active cookie should be displayed in the cookie inventory or cookie settings panel where technically available.
10). Managing Cookies in Your Browser
Most browsers allow users to block, delete or restrict cookies. Please note that disabling strictly necessary cookies may affect the functionality of the Website or booking process.
Browser controls are separate from the Website's cookie consent mechanism and may not fully replace consent settings on the Website.
11). Do Not Track
Some browsers offer a "Do Not Track" feature. Currently, there is no universal standard governing how websites should respond to such signals. Accordingly, our Website may not respond to all Do Not Track requests.
12). Updates to This Policy
We may update this Cookie Policy from time to time, especially when our website technology, cookie inventory, analytics configuration, marketing tools or consent-management tools change.
The latest version will be published on our Website together with the revision date.
13). Contact
If you have any questions regarding our use of cookies, please contact:
Transigo Travel S.R.L.
Email: info@transigotrips.com
Website: https://transigotrips.com
17. Children's Privacy
Our services are intended for individuals capable of entering into legally binding agreements.
We do not knowingly collect personal information directly from children for marketing, account creation or consent-based online services.
Where transportation services involve minors travelling with parents, legal guardians or booking adults, we process only the information reasonably necessary to organize the requested service, such as passenger count, child seat requirements or special assistance information.
In Romania, where consent is required for information society services offered directly to children, the applicable age threshold is 16 unless the law changes.
18. Links to Third-Party Websites
Our website may contain links to external websites operated by third parties.
We are not responsible for the privacy practices or content of such websites.
Users are encouraged to review the privacy policies of any third-party websites they visit.
19. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy from time to time.
Any changes become effective upon publication on our website unless otherwise required by applicable law.
The "Last Updated" date at the beginning of this document indicates the most recent revision.
20. Contact Information
If you have any questions regarding this Privacy Policy or wish to exercise your rights, please contact:
Transigo Travel S.R.L.
Registered Office: Calea Moșilor, Nr. 158, camera 4, M636, Etaj 4, Sector 2, Bucharest, Romania
Company Registration Number: J2026031532008
VAT Number: RO 55004425
Email: info@transigotrips.com
Website: https://transigotrips.com
21. Governing Law
This Privacy Policy shall be governed by the laws of Romania and applicable legislation of the European Union, including the General Data Protection Regulation (GDPR).