Comebytaxi Privacy Policy
Effective Date: April 1st, 2025
Introduction
This privacy policy describes how Comebytaxi collects, uses, stores, shares, and protects your personal information ("Privacy Policy"). This Privacy Policy applies to the Comebytaxi.com website ("Comebytaxi" or "Website") and all related websites, applications, services and tools where this policy is referenced ("Services"), regardless of how you access the Services, including access via mobile devices.
Data Controller and Data Protection Officer
Infinity Market Unipessoal, Lda (“Comebytaxi”) is the controller of your personal data. For questions related to the processing of your personal data or to exercise your rights, you can contact our Data Protection Officer at dpo@comebytaxi.com or by post to Centro Coordenador de Transportes, 1 andar, Vila 4960-549 Melgaço, Portugal.
Information we collect
Information you provide to us directly:
Account registration data (name, email, phone number)
Contact data (names, numbers, emails) from the user's address book will be collected and uploaded
Profile information
Content and communications you send to us
Payment information (where applicable)
Information collected automatically:
Device ID and device type
Geographic location information (only if you have enabled this service)
Computer and link information
Statistics on page views
Traffic to and from Comebytaxi.com
Referrer URL
Advertising data
IP address
Standard web log information
Contact Data for Invitations:
When you grant permission, we may access your device's contact list to:
Identify friends who use Comebytaxi
Send invitations to non-users (only contacts you select)
Improve service personalization
Upload to Servers:
Selected contact data (names, phone numbers, emails) will be securely transmitted to our servers solely for these purposes. We do not store this data longer than necessary to fulfill the invitation request.
Demographic data
Browsing data
Additional contact data
Data from social networks (if you connect your account)
Performance of contract: To provide the services you have requested.
Consent: When you give us explicit permission to process your data for specific purposes, such as direct marketing.
Legitimate interest: When processing is necessary for our legitimate interests, provided that they do not prevail over your rights and freedoms.
Legal obligation: When processing is necessary to comply with a legal obligation.
Contact Access & Upload: Processing is based on your explicit consent (Art. 6(1)(a) GDPR). You may revoke consent anytime via app settings or by contacting us.
Provide you with access to our Services and Customer Support
Prevent, detect, and investigate potentially prohibited or illegal activities, fraud, and security breaches
Personalize, measure, and improve services, content, and advertising
Contact you via email, push notification, text message (SMS), or phone to:
Respond to questions about the Services
Send you targeted marketing activities (based on your consent)
Send you updates and promotional offers (based on your consent)
Provide other services you have requested
Service providers with whom we have entered into agreements to help us provide our services (payment processing, marketing, technical support).
Public authorities, when required by law, court order or to prevent fraud.
Third parties to whom you have given explicit consent to share data.
Companies with which we may merge or which may acquire Comebytaxi (subject to prior notice).
Contact Data Recipients
- Third-party SMS/email providers (to deliver invitations).
- Cloud storage providers (e.g., AWS/Azure) for temporary processing.
- No sale to advertisers or third-party marketers.
Adequacy decisions by the European Commission
Standard contractual clauses approved by the European Commission
Approved codes of conduct
Approved certification mechanisms
The time needed to provide the requested services
Your instructions or consent
Legal or regulatory requirements
Industry standards
Contact data uploaded for invitations is deleted within 30 days after processing.
Metadata (e.g., "Invitation sent to X") is retained for 12 months for fraud prevention.
Right to access: Request a copy of your personal data.
Right to rectification: Correct inaccurate or incomplete data.
Right to erasure: Request the deletion of your personal data.
Right to restriction of processing: Restrict the processing of your data.
Right to object: Object to the processing of your data.
Right to data portability: Receive your data in a structured format.
Right to withdraw consent: Withdraw consent at any time.
Right to lodge a complaint: Lodge a complaint with the competent supervisory authority.
Right to withdraw consent for contact data: Withdraw access via iOS Settings > Comebytaxi > Contacts or request deletion of uploaded contacts via dpo@comebytaxi.com
Identify you as a user
Provide a better experience on our Site
Measure promotional effectiveness
Ensure trust and security on our Site
Essential cookies: Necessary for the basic operation of the website
Preference cookies: Allow the website to remember information that changes the way the website behaves or looks
Statistical cookies: Help us understand how visitors interact with the website
Marketing cookies: Used to track visitors across websites and display relevant advertisements
Clicking on the “unsubscribe” option in our email communications
Sending an email to support@comebytaxi.com
Contacting us by telephone at +351 251 035 415
Data encryption
Regular security testing
Restricted access to personal data
Incident response procedures
Email: dpo@comebytaxi.com
Telephone: +351 251 035 415
Address: Centro Coordenador de Transportes, 1 andar, Vila 4960-549 Melgaço, Portugal
Information received from third parties:
Legal Basis for Processing
We process your personal data based on the following legal bases:
Purposes of Data Processing
We use your personal information to:
Sharing of Personal Data
We may share your personal information with:
International Data Transfers
When we transfer your personal data outside the European Economic Area (EEA), we ensure an adequate level of protection through:
Data retention
We only keep your personal data for as long as necessary to fulfil the purposes we collected it for, including any legal, accounting, or reporting obligations. Specific retention periods are determined based on the following criteria:
Invitation Data Retention
Your Rights
Under the General Data Protection Regulation (GDPR), you have the following rights:
To exercise any of these rights, please contact us at dpo@comebytaxi.com.
Cookies and Similar Technologies
We use cookies, web beacons, and similar technologies to:
What are cookies?
Cookies are small text files stored on your browser or device when you visit our website. These files allow the website to remember your actions and preferences for a certain period of time.
Types of cookies we use:
How to manage cookies
You can set your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features of the website may not function properly if you disable cookies. The options for managing cookies vary from browser to browser. Please consult your browser's help menu for specific instructions.
Marketing Communications
We may send you marketing communications based on your consent. You can withdraw this consent at any time by:
Data Security
We have implemented appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction or damage. These measures include:
Changes to the Privacy Policy
Comebytaxi may change this Privacy Policy from time to time. Substantial changes will be announced on the Comebytaxi Website and, where necessary, we will obtain your consent again. The amended Privacy Policy will be effective immediately after being published on the Comebytaxi website.
Additional Information for Residents of the European Union
Supervisory Authorities
In addition to the National Data Protection Commission (CNPD) in Portugal, residents of other EU countries have the right to lodge a complaint with the data protection authority in their country of residence. A list of EU data protection authorities can be found at: https://edpb.europa.eu/about-edpb/about-edpb/members_en
International Data Transfers
When we transfer your data outside the European Economic Area (EEA), we mainly use Standard Contractual Clauses approved by the European Commission. These transfers may occur to:
- Servers located in the United States of America
- Servers located in the United Arab Emirates
- Service providers in the United States of America and the United Arab Emirates
Specific retention periods
- Account data: Kept for as long as your account is active and for an additional period of 12 months after closure
- Transaction data: Kept for 10 years as required by tax legislation
- Marketing data: Kept until you withdraw your consent and for an additional period of 30 days
- Communications records: Kept for 12 months
Data Transfer between Comebytaxi Branches
Comebytaxi may transfer your personal data between its branches located in the EU for the purposes described in this Privacy Policy, always in compliance with the GDPR.
Contact
If you have any questions or concerns about this Privacy Policy or the processing of your personal data, please contact us at:
If you are not satisfied with our response, you have the right to lodge a complaint with the competent supervisory authority (in Portugal: Comissão Nacional de Proteção de Dados - CNPD).