Privacy Policy

Data Controller

What Data We Collect

When you use our booking or contact forms, we collect the following personal data:

• Name
• Email address
• Phone number
• Pickup and destination address
• Trip details (date, time, number of passengers, flight number)
• Message / Special requests

Purpose of Data Processing

• Processing your booking request and carrying out the transfer
• Responding to your contact inquiry
• Improving our services

Legal Basis (Art. 6 Para. 1 GDPR)

• Consent (Art. 6 Para. 1 lit. a GDPR) – for cookies and Google Analytics
• Contract fulfillment (Art. 6 Para. 1 lit. b GDPR) – for processing bookings
• Legitimate interest (Art. 6 Para. 1 lit. f GDPR) – for improving our website

Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited. Google Analytics uses cookies that enable analysis of website usage.

Google Analytics is only activated when you give your explicit consent via the cookie banner. Without your consent, no tracking data is collected.

Cookies

Our website uses the following cookies:

Hosting

This website is hosted by Vercel Inc., 440 N Baxter St, Coppell, TX 75019, USA. Vercel acts as a data processor pursuant to Art. 28 GDPR. A data processing agreement (DPA) has been concluded. When visiting our website, information (e.g., IP address, browser type, timestamp, requested URL) is automatically transmitted to Vercel's servers. Server logs are stored for a maximum of 30 days. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website). More information: https://vercel.com/legal/privacy-policy

Email Service

For sending emails (booking confirmations, contact inquiries), we use the service Resend (Resend Inc., San Francisco, USA). Resend acts as a data processor pursuant to Art. 28 GDPR. A data processing agreement (DPA) has been concluded. The email address, name, and message content are transmitted to Resend's servers. Email logs are stored by Resend for a maximum of 30 days. The legal basis is Art. 6(1)(b) GDPR (contract performance). More information: https://resend.com/legal/privacy-policy

Data Transfers to Third Countries

When using our website, personal data may be transferred to service providers in the USA:

• Vercel Inc. – Website hosting (USA). Server location may also include the EU.
• Resend Inc. – Email delivery for booking confirmations and contact inquiries (USA).
• Google Ireland Ltd. – Google Analytics for website analysis (Ireland/USA, only with your consent).

Data transfers to the USA are based on Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR. These clauses oblige the recipients to maintain an adequate level of data protection. For Google Analytics, data is additionally transferred only on the basis of your consent (Art. 49(1)(a) GDPR).

Your Rights

• Right of access to your stored data (Art. 15 GDPR)
• Right to rectification of inaccurate data (Art. 16 GDPR)
• Right to deletion of your data (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to lodge a complaint with a supervisory authority (Bayerisches Landesamt für Datenschutzaufsicht)

Data Retention

Personal data is deleted as soon as the purpose of storage no longer applies. Specifically: Booking data is stored for the duration of statutory retention periods (6 years under §257 HGB, 10 years under §147 AO for tax-relevant data). Contact inquiries are deleted after processing is complete and no later than 12 months. Cookie consent preferences remain stored in your browser until you delete them. Google Analytics data is automatically deleted after 14 months.