LiaGo Mobility (“LiaGo”, “we”, “us”) is the ride-hailing division of Liaco Limited. We run a fleet of electric cars in Malta, driven by our own drivers on ride-hailing platforms such as Bolt and Uber. This notice explains what personal data we collect, why, who we share it with, how long we keep it and the rights you have.
We process personal data in line with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and the Data Protection Act, Chapter 586 of the Laws of Malta. For Liaco’s vehicle sales, servicing and other activities, see the Liaco Limited privacy notice.
1. Who we are
LiaGo Mobility is a trading name of Liaco Limited, which is the data controller:
Liaco Limited
Lia Buildings, Triq il-Mosta, Ħal Lija LJA 9012, Malta
Company registration number C9805 · VAT number MT11083115
Telephone: +356 7941 8111 · Email: dataprotection@liaco.eu
Please send any data protection query to our data protection contact at the email address above.
2. Drivers
If you drive for LiaGo, we keep a driver record in the LiaGo Driver Hub, our private portal at liago.eu/drivers. You enter and update most of it yourself; our administrators complete the rest.
What we keep
- Identity: title, name, sex, date of birth, nationality, ID card number and expiry, social security number and a profile photo.
- Contact: address, telephone numbers (including the number you use on the ride-hailing apps), personal email, and the work email we give you.
- Driving and licensing: driving licence categories and expiry, Transport Malta driver tag number and expiry, and your police conduct certificate.
- Insurance: your own motor insurer, whether you have had a motor claim or road accident as a driver in recent years and, if so, the details, and our fleet insurer’s decision on covering you.
- Pay: bank name, IBAN and SWIFT/BIC code. Your pay and payroll records are kept in Liaco’s accounting systems, not in the Driver Hub.
- Employment: engagement and termination dates, employment type and nature, work arrangement and role, and documents such as your Jobsplus engagement letter, your last FS3, payslips and termination letter from your previous employer, and your VAT certificate if you are self-employed.
- Platforms and operations: your driver identifiers on the ride-hailing platforms, the car you are assigned to, your shift rota, and the trip, earnings and rating records the platforms make available to us as your fleet operator.
- Copies of documents: both sides of your ID card and driving licence, your driver tag and police conduct certificate, and the other documents listed above.
Why we use it
- to employ or engage you and pay you;
- to meet our obligations to Transport Malta, Jobsplus, the tax authorities and social security;
- to register you with the ride-hailing platforms and our fleet insurer;
- to assign you a car and a rota, and run the fleet safely;
- to remind you before your ID card, driving licence or driver tag expires.
Police conduct certificate
Transport Malta requires every light passenger vehicle driver to be of good repute. We keep your police conduct certificate and its issue date only to show that you meet this requirement, and only our administrators can see it.
3. Applying to drive
Driver applications are made through the form on liaco.eu/careers. The privacy section on that page explains how Liaco uses your application. If you are taken on, the details you gave move to your driver record (section 2).
If we help you obtain your Transport Malta driver tag, we use the information needed for each step — the medical certificate, the LPTV and Customer Care courses and the tag application — only for that purpose. If you are a non-EU national, this includes the details needed for your Cab Driver employment licence through Jobsplus and the employer declaration (form DPA16).
4. Passengers
When you book a ride on a ride-hailing app, the platform operating that app (for example Bolt or Uber) is the controller of your account and booking data, and its own privacy notice applies.
To complete your trip, our driver sees the details the app shows, such as your first name and your pick-up and drop-off points. As the fleet operator, we receive the trip records the platform makes available to us, such as trip times, routes, fares and ratings. We use them to pay our drivers, keep our accounts and deal with any complaint, incident or claim.
Our cars have dashcams that record inside the car (section 5). If you contact us directly — for example about lost property, a complaint or an incident — we use your name, contact details and what you tell us to deal with it. Where a road incident involves our insurer or the police, we share the details they need.
5. Dashcams and vehicle tracking
Our cars are fitted with dashcams and GPS tracking. A notice in each car tells passengers that cameras are in use.
Dashcams
The dashcams record the road ahead and the inside of the car while the car is in use. Recordings may show drivers, passengers and other road users, and vehicle registrations.
We use recordings only to protect the safety of drivers and passengers, to establish what happened in an accident or incident, and to deal with insurance claims, complaints and crime. We do not watch recordings routinely. We look at a recording only when there is an incident, a complaint, a claim or a lawful request.
Recordings are overwritten automatically on a rolling basis. When a recording is needed for an incident, we save that clip and keep it until the matter is closed.
GPS tracking
Each car’s tracker records its location, journeys and the times it is driven. We use this to manage and charge the fleet, recover a stolen car, check trips and pay, and establish what happened in an accident, complaint or claim. Because each car is assigned to a driver and a rota, tracking data can show where that driver was while driving the car.
6. Website and Driver Hub
liago.eu
The public pages of liago.eu set no analytics or advertising cookies. Our web host records technical data for each visit, such as IP address, browser and operating system, pages visited and the date and time, to keep the site running and secure.
Driver Hub
- Sign-in: the Hub sets one essential cookie that keeps you signed in on your phone for 30 days. It is needed for the Hub to work, so it does not require consent.
- Security records: we record sign-in attempts and the IP address they come from, so that repeated failed attempts can be blocked.
- Change history: every change to a driver record is recorded with its old and new value, the date and who made it. When an administrator opens a driver record, that is recorded too.
- Bank details: a change of bank details is held as unverified until an administrator confirms it with you. This protects your pay from fraud.
7. WhatsApp and Telegram
Our number +356 7941 8111 is also on WhatsApp. When you message us we receive your WhatsApp number, profile name and picture if set, your messages, and any photos or documents you send. We use them to reply and to keep a record of what was agreed.
Drivers can link the “LiaGo Driver Hub” Telegram bot to their Hub account. We use it to send expiry reminders, a weekly list of anything still missing, and messages from our administrators. A copy of every message sent is kept, encrypted, with your record. Linking Telegram is your choice.
WhatsApp is operated by Meta and Telegram by Telegram Messenger. Each processes your account details and message metadata under its own terms, as an independent controller. Please do not send us more personal information than we ask for.
8. Our legal bases
| Purpose | Legal basis (GDPR Article 6) |
|---|---|
| Employing or engaging drivers, paying them, assigning cars and rotas | Performance of a contract, or steps taken at your request before entering one — Art. 6(1)(b) |
| Transport Malta, Jobsplus, tax and social security requirements, accounting records | Legal obligation — Art. 6(1)(c) |
| Police conduct certificate | Legal obligation — Art. 6(1)(c), processed under Art. 10 GDPR as Transport Malta’s good-repute requirement provides |
| Fleet insurance, claims history, incidents and claims | Legitimate interests in insuring and operating the fleet safely — Art. 6(1)(f); and the establishment or defence of legal claims |
| Expiry reminders, Hub security records, change history, bank-detail checks | Legitimate interests in keeping drivers licensed and the Hub and payments secure — Art. 6(1)(f) |
| Telegram messages to drivers | Performance of a contract — Art. 6(1)(b); linking Telegram is your choice |
| Passenger trip records, lost property and complaints | Legitimate interests in running the service, paying drivers and handling complaints — Art. 6(1)(f); legal obligation for accounting records — Art. 6(1)(c) |
| Dashcam recordings and GPS tracking | Legitimate interests in the safety of drivers and passengers, protecting the fleet, and establishing or defending legal claims — Art. 6(1)(f) |
| Website server records | Legitimate interests in keeping the website running and secure — Art. 6(1)(f) |
Where we rely on legitimate interests, you have the right to object. See section 13.
9. Who we share data with
We share the minimum personal data necessary, and only with:
- Maltese public authorities — Transport Malta for driver tags and licensing; Jobsplus for employment registration; the Commissioner for Revenue and social security authorities; or where we are otherwise legally obliged.
- Ride-hailing platforms — such as Bolt and Uber, to register you as a driver in our fleet. Each platform is an independent controller and its own privacy notice applies.
- Our fleet insurer — the driver details and claims history it needs before accepting a driver, and the details of any incident or claim.
- Law enforcement — where records are lawfully requested. We keep a record of every such disclosure.
- Our technology and business service providers, who process data on our written instructions: website and Driver Hub hosting, dashcam and vehicle-tracking services, email and file storage, accounting and payroll systems, and messaging services.
- Our professional advisers — auditors, accountants and lawyers, where necessary.
We do not sell personal data. Ask us at the address in section 14 and we will tell you the identity of any provider we use.
10. Transfers outside the EEA
Where a provider processes personal data outside the European Economic Area, we rely on a European Commission adequacy decision, the provider’s certification under the EU–US Data Privacy Framework, or the Commission’s Standard Contractual Clauses together with a transfer impact assessment. You may ask us for details of the safeguards for any transfer.
11. How we protect your data
The Driver Hub is open only to drivers and LiaGo’s administrators, each with their own sign-in. Each driver sees only their own record. Sensitive details — date of birth, ID card and social security numbers, address, bank details and claims details — and every uploaded document are stored encrypted. The encryption key is kept apart from the data.
12. How long we keep your data
| Data | Retention period |
|---|---|
| Driver records, documents and change history | While you work with us, then 10 years from the end of your engagement, covering employment, tax, social security and accounting obligations and any claim |
| Hub records of people who did not start driving with us | 24 months from last contact |
| Trip, earnings and rating records | 10 years, as part of our accounting records |
| Lost property, complaints and incident records | 24 months from last contact, or until any claim or investigation is closed |
| WhatsApp and Telegram messages | With the record they relate to, or 24 months from last contact if there is none |
| Dashcam recordings | Overwritten automatically on a rolling basis; a saved clip is kept until the incident, claim or investigation is closed |
| GPS tracking data | 12 months, or longer where it is needed for a claim, investigation or our accounting records |
| Sign-in and security records | Only as long as needed to protect the Hub |
When a retention period ends, we delete the data or make it anonymous.
13. Your rights
- Access — obtain a copy of the personal data we hold about you. Drivers can see most of their record in the Driver Hub at any time.
- Rectification — have inaccurate or incomplete data corrected. Drivers can update their own details in the Hub.
- Erasure — ask us to delete your data, where no legal reason to keep it applies.
- Restriction — ask us to limit how we use your data while a dispute or objection is resolved.
- Data portability — receive the data you gave us in a structured, machine-readable format.
- Object — object to processing based on our legitimate interests.
- Withdraw consent — where we rely on consent, at any time, without affecting earlier processing.
- Not to be subject to a decision based solely on automated processing that has legal or similarly significant effects. We do not make such decisions. Expiry reminders are sent automatically, but they decide nothing about you.
To exercise any of these rights, contact us using the details in section 14. We may ask you to confirm your identity. We will reply within one month, extendable by two further months for complex requests, in which case we will tell you within the first month.
14. Contact us
Liaco Limited — LiaGo Mobility
Lia Buildings, Triq il-Mosta, Ħal Lija LJA 9012, Malta
Telephone: +356 7941 8111 · Email: dataprotection@liaco.eu
Please mark postal correspondence for the attention of the data protection contact.
15. Complaints
If you are not satisfied with how we have handled your personal data, you have the right to complain to Malta’s supervisory authority:
Office of the Information and Data Protection Commissioner (IDPC)
Floor 2, Airways House, Triq il-Kbira, Tas-Sliema SLM 1549, Malta
Telephone: +356 2328 7100 · Email: idpc.info@idpc.org.mt · Website: idpc.org.mt
You may also seek a judicial remedy. We ask you to raise the matter with us first so that we have the chance to put it right.
16. Changes to this notice
We review this notice periodically. When we make a material change, we update the date at the top of this page. Drivers are asked to read and accept the new version in the Driver Hub.