Privacy policy

This policy explains what personal data we use when you use ZUM.MD, and especially when you send us a booking request. In short: we only ask for what the carrier needs to call you, we never ask for your card, we don't sell data and we don't use tracking cookies.

Who is responsible for your data

The data controller is FALA NOLEGGI SRL, Via Natale Sandre 22/A, 10078 Venaria Reale (TO), Italia, VAT number IT13160840016, which runs the website zum.md.

ZUM.MD is an intermediary agency, not a carrier: we connect passengers with several types of transport, namely the coaches and minibuses of partner carriers and flights through Kiwi.com. The trips are operated by independent companies.

For any question about your data: zumtransport@gmail.com, phone +373 78 100 991.

What data we use

When you request a coach booking: your phone number (required), your name, email and message (optional), the chosen trip, the date and the number of adults and children.
If we verify your number with a code: your phone number and the code sent via Telegram or SMS.
When you write to us or call us: what you tell us in your message or on the phone (WhatsApp, Viber, email).
Technical data: IP address and browser type, to keep the website secure and stop abuse (for example too many requests from the same number).

We never ask for card details or health data. The number of children (and, if needed, their age) is given by the adult making the booking, only to work out the ticket price.

Why we use it and on what legal basis

To pass your request to the chosen carrier and so that the carrier or we can call you to confirm: these are steps taken at your request before a contract of carriage (Article 6(1)(b) of Regulation (EU) 2016/679, GDPR).
To send you a confirmation email, if you gave us your address: same basis.
To answer questions and complaints: same basis, or our legitimate interest in helping you (Article 6(1)(f)).
For security and to prevent abuse (request limits, technical logs): our legitimate interest in protecting the service (Article 6(1)(f)).
When the law requires it (for example a request from an authority): legal obligation (Article 6(1)(c)).

We don't send you advertising and we don't make automated decisions based on your data.

The carrier operating the chosen trip, by email and/or WhatsApp. The carrier uses the data for the booking and the journey as an independent controller, under its own rules.
Our technical providers, only as far as needed to run the service: website hosting, the mailbox (Google Gmail) and, if phone verification is active, the services that send the code (Telegram or Twilio).
Authorities, only when the law requires it.

We never sell or rent your data to anyone.

Transfers outside the European Union

Many partner carriers are based in the Republic of Moldova or in other countries outside the EU. When you request a booking with one of them, we send them your data because this is necessary for you to get the seat you asked for (Article 49(1)(b) and (c) GDPR). Some technical providers (for example Google or Twilio) may process data in the United States, with the safeguards required by the GDPR (EU–US Data Privacy Framework or standard contractual clauses).

Flights: Kiwi.com

The flight search starts on ZUM.MD, but you see, book and pay for flights on Kiwi.com. The data you enter there is processed by Kiwi.com (and, for the partner link, Travelpayouts) under their own policies. We don't receive your flight or payment data.

How long we keep it

Booking requests: at most 24 months from the travel date, then we delete them.
Phone verification codes and login attempts to the admin area: at most 30 days.
Messages you send us: as long as needed to reply, at most 24 months.

Your rights

You can ask us at any time to see your data, correct it, delete it, restrict its use, receive it in a portable format and object to processing based on legitimate interest. Write to zumtransport@gmail.com: we reply within one month.

If you think your data is not being used correctly, you can lodge a complaint with the Garante per la protezione dei dati personali (Italy, garanteprivacy.it), with the data protection authority of the EU country where you live or, in the Republic of Moldova, with the National Center for Personal Data Protection (datepersonale.md).

Cookies

The public website doesn't use tracking, analytics or advertising cookies. Details in the Cookie policy.

Changes

We may update this policy when the service or the law changes. The date at the top shows the latest update. The terms of the service are in the Terms and conditions.

A service of FALA NOLEGGI SRL · Via Natale Sandre 22/A, 10078 Venaria Reale (TO), Italia · VAT no. IT13160840016