Trinaka is a service of Chip-Tools S.R.L., Str. Podul Înalt 6, Birou 2, Bloc Corp C1, Et. 1, 041383 București, Romania — CIF RO48467311. For anything about your data, write to ciao@trinaka.com: a person reads it, not a system.
Your account: email, name, language, traveller ID, and phone if you gave it. Your requests: what you asked, when, for how many people, the meeting point, and the messages you exchange with the operator and with us. For a transfer, a phone number with WhatsApp is required to send the request, and so is the flight number when the pick-up is at an airport (unless you tick that you will add it later from your page): the driver needs them to find you, and without them the request cannot be sent. Photos you upload, with the permission you ticked. The waiting list: email and language; for businesses also name, trade, town and phone. The SOS button: position, accuracy, your name and note if you wrote them, and your IP address. Technical data: IP address and country, used only to limit abuse. Your voice, if you use the microphone in chat: it is recorded only while you hold the button, it is used to turn what you say into text, and the audio is deleted straight after, never stored anywhere. If you confirm with a card as a guarantee: the card brand and its last four digits, when you saved it and the amount you accepted, and whether a no-show charge was made; the card number is entered on Stripe and never reaches us.
Waiting list: your consent (art. 6.1.a GDPR), which you can withdraw with the link in every email. Account, requests, messages and the “who is picking you up” page: performance of the contract you asked for (art. 6.1.b). SOS and your position: your explicit consent at the moment you press the button, and the protection of vital interests (art. 6.1.d); the position is read only when you press, never in the background. Site security (anti-bot check, rate limits, logs): our legitimate interest in keeping out abuse (art. 6.1.f). Service emails (confirmation, check-in, how it went): the contract. The card guarantee and any no-show charge: the conditions of the service you accept by ticking the box (art. 6.1.b). We do no profiling and no advertising.
The operator you ask: your first name and your ID, never your email; your phone only around the time of the service, or if you choose to leave it. Providers working for us under contract: Cloudflare (hosting, database, anti-bot check, automatic translation of messages; USA), Brevo (emails; France), Pushover (SOS alerts to the people on duty; USA), Stripe Payments Europe (the card you save as a guarantee and any no-show charge: you enter the card on Stripe’s page, we only see its brand and last four digits; Ireland). Services your browser contacts directly when a page loads, which therefore see your IP address: MapTiler (maps; Switzerland), FOSSGIS/OSRM (route calculation, which receives the coordinates of the route; Germany), Wikimedia Commons (photos of places; USA), INGV and GARR (Etna cameras; Italy). Nobody buys your data, and nobody gets it for advertising. If the operator you ask hands the work to a supplier (a driver, a restaurant, a guide), that supplier receives only what the job needs — as a rule your first name, phone, language, party size, time and place — through a link that expires on its own; never your email or your notes.
Cloudflare and Pushover are in the USA and are covered by the EU-US Data Privacy Framework and by standard contractual clauses. MapTiler is in Switzerland, a country the EU recognises as adequate. Wikimedia Commons (USA) only receives the technical request for an image. Stripe Payments Europe is in Ireland; what Stripe processes in the USA is covered by the EU-US Data Privacy Framework and by standard contractual clauses. Everything else stays in the EU.
If you sign up a business: the business name, email, phone if you give it, town, category and language; the password only as an encrypted fingerprint that nobody can read back; your listings, photos and the messages you exchange with customers. Public pages show the business name, the town and what you write in your listings; never your email or phone. Legal basis: the contract under which you use the platform (art. 6.1.b) and, to check that a business exists before publishing it, our legitimate interest (art. 6.1.f). The account stays as long as you use it and is deleted on request; requests and messages follow the periods set out below. If you came through an invitation from your town council, the council receives none of your data from us. If you offer a professional service (for example as a sommelier), we may ask you to show us your diploma, VAT number or insurance: they are used only for the check, are never published, and we keep no copy after the check.
Waiting list: as long as you are on it; after you unsubscribe, the email and the proof of consent for 12 more months, then deleted. Account: as long as you use it; deleted on request. Requests and messages: 24 months after the service, because of guarantees, complaints and passenger rights. Photos: until you or we remove them. SOS: position, accuracy and IP address are removed after 12 months; the record of the call remains, without position. IP addresses used for rate limits: 24 hours.
Access, a copy, correction, deletion, restriction, portability, objection, and withdrawal of consent with no effect on what was done before: write to ciao@trinaka.com and we answer within 30 days. Every email we send has an unsubscribe link that works immediately.
If you think we handled your data badly, you can complain to the Romanian data protection authority ANSPDCP (dataprotection.ro), where the controller is based, to the Italian Garante per la protezione dei dati personali (garanteprivacy.it), or to the authority of the country where you live.
Last revised on October 9, 2026. When something substantial changes, the new text appears here with a new date; if you have an account, we tell you by email.
Chip-Tools S.R.L., Str. Podul Înalt 6, Birou 2, Bloc Corp C1, Et. 1, 041383 București, Romania — CIF RO48467311 · ciao@trinaka.com
These texts are written by us and are being reviewed by a lawyer; where they and the law differ, the law applies.