Privacy policy

This notice explains how Elysium VIP Service FZC LLC handles the personal data of travellers, agencies and anyone who contacts us through elysiumexclusive.com, by WhatsApp, by phone or by email. It follows the EU General Data Protection Regulation (GDPR), which applies because we offer our services to people travelling in Italy and the European Union.

1. Who is responsible for your data

The controller is Elysium VIP Service FZC LLC, licence 2622410104888, 26th Floor, Amber Gem Tower, Ajman, United Arab Emirates. For anything about your data, write to info@elysiumexclusive.com.

Our representative in the European Union, under Article 27 GDPR, is Elysium Exclusive S.R.L.S., Via Giorgio Compiani, 22, 00054 Fiumicino (RM), Italy, VAT IT18005561008. You and the supervisory authorities can address it on any matter about this notice.

2. What we collect

• Contact details: name, email address, phone or WhatsApp number, and whether you book for yourself, for someone else or for an agency's client.
• Travel details: dates and times, airport, station or address of pickup and drop-off, flight or train numbers, number of travellers and bags, the names of the other travellers and the service you choose.
• Information you choose to give us in notes and messages, such as child seats, a celebration or a request for assistance.
• Health information, only if you tell us that a traveller needs reduced-mobility assistance: we use it solely to arrange that assistance.
• Where your visit came from, sent with your request: the campaign tags of the link you followed and the name of the site that sent you, to understand which pages and advertisements are useful (our legitimate interest, Article 6(1)(f)).
• Technical data needed to run and protect the website, such as your IP address, browser type and the time of your visit, held by our hosting provider in its security logs.

When you book for other travellers, please let them know you are sharing their details with us for their journey.

3. Why we use it, and on what legal basis

• To answer your request, quote and organise your service, including passing the details to the agent, chauffeur or boat that carries it out: steps taken at your request before a contract and the performance of the contract (Article 6(1)(b) GDPR).
• To arrange reduced-mobility assistance: your explicit consent, which you give when you tell us about it (Article 9(2)(a)). You can withdraw it at any time, although we may then be unable to arrange that assistance.
• To keep invoices and booking records: legal obligations on accounting and tax (Article 6(1)(c)).
• To keep the website and our systems secure, prevent abuse and handle any claim: our legitimate interest (Article 6(1)(f)).
• To understand how the website is used and measure our advertising, through Google Analytics and Google Ads: your consent (Article 6(1)(a)), which you can withdraw at any time from Cookie settings.

We do not send newsletters or marketing, we do not use your data for profiling or automated decisions, and we never sell it. If we ever wish to send you offers, we will ask for your consent first.

4. Who receives it

• The people who carry out your service: our agents and chauffeurs and, where needed, the airport, the railway or the water taxi operator, and our team in Italy.
• Providers who process data for us, under contract and only on our instructions: Cloudflare (website hosting and security), Supabase (the database where our team manages requests), Google (only if you search for an address in the booking form, to find it and measure the driving distance) and our email provider.
• Google, for statistics (Google Analytics) and to measure our advertising (Google Ads), only if you consent in the cookie banner, which is provided by Cookiebot (Usercentrics). Details are in the cookie policy.
• WhatsApp, if you choose to send or continue your request on WhatsApp: WhatsApp's own privacy policy then applies to that conversation.
• Authorities, where the law requires it.

5. Transfers outside the European Union

The controller is based in the United Arab Emirates, and some of our providers may process data in the United States. A transfer to the Emirates is necessary to carry out the service you request (Article 49(1)(b) GDPR). Transfers to providers in the United States rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's standard contractual clauses. You can ask us for a copy of the safeguards in place.

6. How long we keep it

• Requests that do not become a booking: up to 24 months, then deleted.
• Bookings, invoices and the related correspondence: for as long as accounting and tax law requires, up to 10 years.
• Health information about assistance: deleted within 30 days after the service.
• Website security logs: kept by our hosting provider for a short period, as set out in its own policy.

7. Your rights

You can ask us to access your data, correct it, delete it, restrict its use or send it to you in a portable format, and you can object to its use based on our legitimate interest. Where we rely on your consent, you can withdraw it at any time without affecting what was done before. Write to info@elysiumexclusive.com: we reply within one month.

You also have the right to lodge a complaint with a data protection authority, in particular in the country where you live or work. In Italy it is the Garante per la protezione dei dati personali.

8. Children

Our website is not meant for children under 16. Children's details reach us only from the adult who books their journey.

9. Security

Your data travels over encrypted connections, and only our team members who handle your request can see it, each with a personal login. No system is completely secure, but we take care to protect what you share with us.

10. Cookies

How this website uses cookies and similar technologies is explained in the cookie policy.

11. Changes to this notice

We update this notice when the way we handle data changes, and show the date of the latest version at the top of the page.