Privacy Notice (customer app)

ottobre 2026

This notice explains how Perko processes the personal data of users of the application, in accordance with Regulation (EU) 2016/679 (GDPR).

1. Data controller

The controller is Perko (full company details in the "Legal notices" section). For any request: privacy@perkotaxi.it.

2. Data we collect

We collect: identity and contact details (first name, last name, email, phone number, date of birth); ride data (pickup and destination locations, times, amounts); location data while you use the service; technical device identifiers and notification tokens.

3. Purposes of processing

Data is processed in order to: provide the ride booking service and carry out rides; manage payments, wallet and the points programme; send service messages and, with your consent, promotional messages; ensure security, prevent fraud and meet legal obligations, including handling reports of illegal content (Digital Services Act).

4. Legal basis

Performance of the contract (Art. 6(1)(b) GDPR), consent for promotional messages (Art. 6(1)(a)), legal obligations (Art. 6(1)(c)) and legitimate interest in security and service improvement (Art. 6(1)(f)).

5. Location data

Your location is used only to identify the pickup point, send your request to the available taxi drivers in the area (one of them accepts it) and allow the ride to be tracked. It can be turned off in your device settings, which may limit the service.

6. Retention

We keep data only for as long as necessary. After that it is deleted or anonymised automatically:

• price quotes: 24 hours;
• taxi location during the ride: 90 days after the ride ends;
• ride chat messages: 90 days;
• questions to the in-app assistant: 90 days;
• ride addresses: 12 months after the ride ends, after which only an approximate location (about 1 km) is kept;
• drivers' shifts, declined rides and pickup checks: 12 months;
• support requests and price checks: 24 months after they are closed;
• content reports (messages and reviews): 24 months after the report is closed; the copy of the reported text is kept even after the chat is deleted, as evidence;
• internal log of staff actions: 24 months;
• points, levels and leaderboard history: 24 months;
• documents uploaded by drivers: until the account is closed; 90 days if the application is rejected; a document or photo that is replaced, or uploaded for a rejected renewal, is kept for up to 90 days and then deleted;
• payments, credit movements, subscriptions and refunds: 10 years, to meet tax obligations;
• consents and deletion requests: 10 years from withdrawal or account closure, as evidence.

When you delete your account, your personal data is deleted or anonymised straight away. Ride amounts and dates are kept for 10 years without your name or contact details; for drivers, tax code and VAT number are also kept for 10 years to meet tax obligations.

7. Disclosure of data

Data may be disclosed to suppliers acting as data processors (hosting, maps, notifications, payments) and to the authorities where required by law. We do not sell data to third parties.

8. Your rights

You may exercise your rights of access, rectification, erasure, restriction, portability and objection, and withdraw your consent at any time, by writing to privacy@perkotaxi.it. You can also delete your account directly in the app (Settings → Delete account).

9. Complaints

You may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

10. Security

We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or disclosure.

11. Minors

The service is not intended for people under 18. We do not knowingly collect data relating to minors.

12. Changes

Any updates to this notice will be communicated in the app. Continued use of the service constitutes acceptance of the updated version.

This is a translation provided for convenience. In the event of any discrepancy, the Italian version prevails.