Privacy Policy

1. Introduction

At MerrTaxi, your privacy is a top priority. This Privacy Policy explains how we collect, use, and protect your information and personal data when you use our services through our website, MerrTaxi.com. By using our website, you are informed of and accept the practices and rules described in this Policy.

“Personal data” refers to any information relating to a data subject (as defined in point 3, Article 5 of Law No. 124/2024 “On the Protection of Personal Data”).

Whether you are a customer (a person seeking information about our services), a job applicant or employee, or a visitor to our office premises, we recommend that you read carefully this Privacy Policy, as it contains important information regarding “your personal data,” particularly concerning their use, the categories of data collected, the purposes ofprocessing, the security measures applied, as well as the rights and remedies available to you.If you believe that any important element required under this Privacy Policy is missing, please do not hesitate to contact us at the following address: info@merrtaxi.com.

2. Who is the Controller?

A “Controller” is any natural or legal person, as well as any public authority, which alone or group with others determines the purposes and means of processing personal data (as defined in point 8, Article 5 of Law No. 124/2024 “On the Protection of Personal Data”).

The Controller is Merr Taxi Shpk, for all data collected and processed through the company’s website, data processed in the course of providing taxi services (through telephone communications with customers and via the operating system), as well as data processed for recruitment and human resources purposes.

The registered office of Merr Taxi Shpk is located at: Autostrada Tiranë–TEG, Km 2, Building No. 2, Park Place, Property No. 168/4/1-ND, Vol. 37, Pg. 20, ZK 3266, Postal Code 1003, Sauk, Tirana,Albania.

3. Categories of Data Subjects

• Customers (requesting taxi services);
• Potential customers (visitors of the website);
• Visitors to the company’s office premises;
• Job applicants;
• Employees.

4. Personal Data That We Process

We take care to inform you “regularly and continuously” regarding the nature of the data we process, the methods, purposes, security measures, as well as the rights you are entitled to. In general, the data are collected directly from you and with your consent as the data subject.

Merr Taxi Shpk, in the course of fulfilling of the object of its activity, processes the following categories of personal data:

• Customers,in the context of providing taxi services and with their consent, Merr Taxi Shpk processes the personal data and information provided by the customer in two ways: 1.Customers contacting us by phone: Only their phone number is processed. 2. Customers contacting us through the website:the following data are processed:first name, last name, phone number, and email. In all cases, a random address of the location from which the taxi service is requested is collected (which is not considered personal data).These data are accessed by the call operator.

• Potential Customers (website visitors) who express interest and contact us by phone or through our website. With their consent, they may provide data such as: first name, last name, phone number, or email.

• Job Applicants, Applicants are requested to send a CV to the email address info@merrtaxi.com. In this context, the following data are processed: first name, last name, email, phone number, date of birth, professional qualifications and experience, type of driver’s license (if applicable)(all information typically included in a CV). These data are accessed electronically only by the Administrator, who oversees the recruitment process. The data of candidates not selected for the job vacancy is deleted immediately when the recruitment selection process is completed.

• For Employees, the following data are processed: first name, last name,email, phone number,educational data, signature, salary, bank account number, ID, professional qualifications and experience, data on work ability and health ,home address, criminal record certificate and a picture. These data are accessed manually (via the physical file) only by the Administrator and the Finance Department.

For employees and visitors at the company premises, data are also processed through the CCTV camera system.

These data are for the exclusive use of Merr Taxi Shpk.

5. Purposes for Which We Process Personal Data

The purposes for processing your personal data depend on the relationship that the data subjects have with Merr Taxi Shpk, as well as on the services provided by the company.

• The personal data of “customers” and “potential customers” are processed for the following purposes:

1. To process reservations and payments;
2. To provide the service as quickly and efficiently as possible;
3. To respond to customer inquiries;
4. To improve our services;
5. To fulfil legal obligations and resolve disputes.

• The personal data of job applicants are processed to ensure the functioning of the recruitment and selection process, with the purpose of hiring qualified individuals and professionals in this sector.

• The personal data of employees are processed to ensure the proper functioning of the employment relationship, compliance with obligations between the parties, and in accordance with the legislation

• Data collected through the CCTV system for visitors and employees at the company premises, CCTV data are processed to ensure their physical safety, as well as the security of company assets and monetary values.

6.  The Law for Processing Personal Data

Merr Taxi Shpk processes personal data in accordance with law, in compliance with the legal criteria for processing (as provided in Article 7 of Law No. 124/2024 “On the Protection of Personal Data”).

• Your consent, particularly in your capacity as a customer, potential customer/interested person, job applicant, or employee of Merr Taxi Shpk;
• The contractual relationship between you and Merr Taxi Shpk. This applies especially if you are an employee or any other party involved in a transaction carried out with Merr Taxi Shpk;
• Compliance with our legal and regulatory obligations, mainly referreing to commercial legislation, civil law governing legal relationships, contracts and obligations, employment legislation and procedures, as well as tax and banking legislation, which define the purposes of every processing activity or procedure we are required to perform in accordance with these laws;
• Our legitimate interests, especially for the protection of our offices and premises and the physical integrity of our employees and visitors (CCTV monitoring of the premises).

7. Data Retention Periods

• Customer data processed in the context of providing the service will be retained for 7days from the moment the service is provided (for the purpose of ensuring service quality and resolving any potential issues). After this period, the data will be irreversibly deleted.
• Potential customer / interested person data will be retained for 24 hours from the moment of contact if the request is solely for information purposes, and for 7 days from the moment the service is provided (when a service is booked). After this period, the data will be irreversibly deleted.
• Job applicant data will be retained until the completion of the recruitment process for the vacant position. Once the vacant candidate is selected, the data of other applicants will be destroyed.
• Employee data will be retained for the entire duration of the employment relationship and up to two years after the end of the employment relationship, corresponding to the period in which the employee has the right to raise legal claims against the employer (ref Civil Code).
• CCTV data collected from the company premises will be retained according to server capacity for up to 29 days.

8. Security Measures

Data security is essential to protect personal information, maintain integrity, and comply with legal and ethical standards. Our company operates in accordance with applicable data protection legislation and has established the necessary policies and systems. 

We ensure the privacy and protection of personal data by securely storing your information and obtaining your informed consent before collecting data. Personal information will not be disclosed to any person outside the company. Individuals have rights provided under applicable law, including access, correction, and deletion of their data.

To protect personal data and maintain the integrity of processing activities, we apply the following approaches:

• Data Storage – We use encrypted storage solutions, secure servers, and restricted access to protect personal data.
• Access Control – We enforce strict access controls to limit access to personal data, ensuring that only authorized personnel can view, access, delete, or modify specific information or data.
• Physical Security of Devices / Premises – The devices and premises where we store personal data are located in a secure environment with restricted physical access (e.g., locked rooms).
• Data Retention Policy – We have established rules regarding data retention periods and secure deletion to mitigate the risk of unauthorized access to data.
• Data Security Training – Before starting their duties, relevant personnel are trained and certified in data protection, regularly updated on our data security standards, practices, and specific data management protocols.

9. Recipients of Data

The recipients of personal data are as follows:

• Authorized personnel of Merr Taxi Shpk, company employees who, in accordance with their job responsibilities, are authorized to process data solely for the purposes described above.
• Service providers entities involved in managing our relationship with you, providing technical support for our software, and in this context may only access the clients’ phone numbers.
• Competent public institutions such as the Tax Directorate, ISSH, Labor Inspectorate, and judicial authorities, under circumstances provided by specific legislation and upon a justified request.
• Banks with which we collaborate for financial transactions.

Merr Taxi Shpk guarantees that it adheres to a security and confidentiality policy compliant with Law no. 124/2024 “On the Protection of Personal Data,” its subordinate acts, and implements the highest standards regarding the processing of personal data.

Employees of Merr Taxi Shpk have signed Confidentiality Declarations to ensure the confidentiality of the data they become aware of during their duties. These declarations include penalties in case of violations.

Under no circumstances will your personal data be subject to commercial transactions with third parties.

10. The Rights

According to Articles 13–21 of Law No. 124/2024 “On the Protection of Personal Data”, you have rights regarding to your personal data and may request additional information at any time concerning the processing of your personal data.You have the following rights:

• The right to be informed;
• The right of access;
• The right to rectification or erasure;
• The right to be forgotten;
• The right to object;
• The right not to be subject to automated decision-making;
• The right to lodge a complaint.

11. Changes to This Policy

We regularly update our privacy policy to ensure that it is accurate and up to date, and we reserve the right to amend its content whenever we deem it necessary.
You will be informed of all changes and additions through our website, in accordance with the the principle of transparency. 

12. Contact Us

For questions or concerns, email us at info@merrtaxi.com.il us at info@merrtaxi.com.