Privacy policy

The purposes (and legal bases) for processing personal data are as follows:

• Providing the Service (contractual relationship or its preparation, legitimate interest)
• Administration, protection, and maintenance of the Service, as well as development (legitimate interest)
• Customer service and communication, e.g., Service-related notifications, informing about changes to the Service, requesting feedback on the Service, and customer satisfaction surveys (legitimate interest, consent, contractual relationship)
• Marketing, including market research, other marketing promotions, and analytics, as well as generating statistics and measuring marketing effectiveness (legitimate interest)
• Direct marketing, including electronic direct marketing and telemarketing, as well as planning advertising and marketing, measuring effectiveness, and combining and updating personal data for direct marketing purposes (the data controller may use personal data to tailor its offerings and provide relevant content - this includes recommendations or tailored content and tailored ads on its and third-party services) (legitimate interest, consent)
• Management of customer and partnership relationships, as well as cooperation with subcontractors and service providers (legitimate interest, contractual relationship, or its preparation)
• Using data analytics to develop the website, services, marketing, customer relationships, and experiences (legitimate interest, consent)
• Tracking user traffic on our website and other services (consent)
• Invoicing, credit decisions, and debt collection (legitimate interest)
• Internal reporting and other administrative actions (compliance with legal obligations)
• Handling complaints and managing litigation and official proceedings (compliance with legal obligations)
• Preventing and investigating misuse, as well as ensuring security (legitimate interest)
• Managing and protecting our business and website, including troubleshooting, data analysis, testing, and system maintenance (legitimate interest)
• Fulfilling other legal obligations (e.g., accounting and taxation-related actions) and reporting obligations (legal obligation)

When processing personal data based on legitimate interests, we assess the benefits and potential risks to the data subject, and we have assessed that the rights and interests of the data subjects do not override the legitimate interest. Upon request, we provide additional information about the processing of personal data based on legitimate interests.

The following personal data of Service users are processed:

• User related information:
• • First and last name
  • Phone number
  • Address
  • Email address
• User-inputted data for the Service:
• • Departure address
  • Destination address
• Details related to taxi rides:
• • Travel date
  • Payment time
  • Distance of the ride
  • Cost of the ride
  • Addresses
  • Travel restrictions
  • Additional notes by the user
• Other user data:
• • Customer service and contact information provided by the customer
  • Customer satisfaction information (e.g., feedback and complaints), comments on the data controller's services, and other information obtained with customer consent
  • Data related to Service usage (e.g., details about the use, ordering, and cancellation of trips)
  • Customer payment method and payment behavior information, along with billing details
  • Direct marketing consents and opt-outs (e.g., removal from the newsletter mailing list)
• Business or organization-related information::
• • Basic details like name, marketing name, business ID, and contact details (address, phone number, email address)
• Service provider related info:
• • Basic details like name, marketing name, business ID, contact details (address, phone number, email address), license number
  • Taxi Association membership number
• Technical information related to the Service:
• • Data collected during website use, such as usernames, passwords, identification-related details

We retain personal data for as long as necessary to fulfill the purposes defined in the privacy policy and always for the period required by law (e.g., obligations related to accounting or reporting duties), or if we need the information to prepare, present, or defend against a legal claim or to resolve a similar dispute.

After the purpose of use has ended, personal data is deleted or anonymized within a reasonable time.

Generally, we follow the following criteria for the retention and deletion of personal data:

• Personal data is processed for as long as the Customer uses the Service and for one year thereafter. Upon request, we provide additional information about the practices related to the retention of personal data.

Upon request, we provide additional information about our practices regarding the retention of personal data.

In the processing of personal data, various service providers and other third parties, such as providers of technical solutions or server space, may be used.

We ensure that the necessary agreements regarding data protection are in place with the parties we use for the processing of personal data.

The company or organization using the Service has access to information regarding the trips it has ordered.

In addition to the above, the data controller may disclose personal data for the following purposes:

• To taxi companies to order and execute the requested service;
• For the collection of payments, it may, for example, transfer or sell unpaid invoices to third-party debt collection services;
• The data controller may share personal data in the context of a corporate merger or other business arrangement, or when the Service is transferred to another service provider. The data controller may share personal data based on a court or similar order;
• To third parties in situations required by legislation or authorities, or to investigate misconduct and ensure security. In addition, personal data may need to be disclosed in the context of legal proceedings or similar legal processes;
• If the data controller is involved in a merger, business acquisition, or other corporate transaction, personal data may be disclosed to the parties involved in the transaction or to entities assisting in the transaction.

When personal data is transferred to a third party, i.e., another data controller, the data protection practices of that organization are then applied.

On our website and in our Service, cookies may be set, and data may be collected or transferred to third parties. We ask you to review our cookie policy and cookie settings on our website for information about these third parties and the purposes for which data is collected. We only use non-essential cookies if the data subject has given their consent.

Upon request, we provide additional information about the recipients of personal data.

Individuals have rights regarding their data by data protection legislation. The application of these rights in each specific situation depends on the purpose and context of the personal data processing.

• Right to access personal data: Individuals have the right to confirm whether their data is being processed and to obtain additional information about the processing, as per data protection legislation. Individuals have the right to receive a copy of their data.
• Right to rectify personal data: Individuals have the right, with certain restrictions, to request the correction or deletion of inaccurate or incomplete information.
• Right to erasure of personal data: Individuals have the right, by data protection legislation, to request the deletion of their data. We will comply with the request unless there are legal or other applicable exceptions that require us to retain the data.
• Right to restrict processing: Individuals have the right, by data protection legislation, to request the restriction of processing in certain situations.
• Right to data portability: Individuals have the right to request the transfer of their data to another controller. This right generally applies to data provided by the individual in a structured, machine-readable format, processed based on consent or a contract, and/or processed automatically.
• Right to object processing: Individuals have the right, by data protection legislation, to object to the processing of personal data based on legitimate interests, including profiling. We may refuse the request if the processing is necessary for the compelling and legitimate interests of the controller or a third party. However, individuals always have the right to object to the processing of personal data for direct marketing purposes and related profiling.
• Right to withdraw consent: If the processing of personal data is based on the individual's consent, they have the right to withdraw that consent at any time. Withdrawal of consent does not affect processing performed before the withdrawal.