Privacy Policy

Controller

The controller of personal data in this part is [Operator name], Company ID [Company ID], registered office [registered office]. Contact: [e-mail].

What data we process and why

Account and login: name, e-mail address, password hash, administration language, login times and the time of acceptance of the Terms of Service. The purpose is keeping the account and providing the service (performance of the contract).

Company details: name, logo, contact e-mail and telephone for operational notifications, journey configuration. The purpose is providing the service.

Billing details and payments: processed by Stripe as an independent controller for the purpose of payment; we keep subscription identifiers, subscription status and the records needed for accounting (performance of the contract and legal obligation).

Operational logs: IP address, time and address of the request, error records and login attempt counters. The purpose is security and operation of the service (legitimate interest). They are kept for at most 90 days.

Communication: the content of e-mails and chat messages on the website and in the administration, so that we can reply (legitimate interest, performance of the contract).

We send customers messages about the service only in connection with their account (changes to the Terms, material changes to features). They are part of running the account and end with it.

Cookies

The service website uses no analytics or advertising tools and no tracking cookies. The administration sets a single technical cookie with the session identifier, which is necessary for login and lasts at most 8 hours.

The tawk.to chat on the website and in the administration may set its own cookies to keep the conversation going between pages. On the traveller's private page neither the chat nor any other third-party script is loaded.

Who we share data with

Processors that help us run the service: [VDS hosting provider in the Czech Republic] (server in the Czech Republic), [SMTP provider] (sending e-mails) and tawk.to Inc. (chat). Stripe Payments Europe, Ltd. processes payments as an independent controller.

We also disclose data where the law requires it or where it is necessary to protect our rights.

Retention

We keep account data for as long as the account exists. After the account is deleted we remove it without undue delay, from backups within 30 days at the latest. Accounting records are kept for the statutory period. Operational logs for at most 90 days.

Who the controller is

A traveller is a customer of the company that uses the service (a transfer company, a car rental). That company is the controller of the traveller's personal data and decides what data it enters into the service and for how long it needs it. We are the processor: we process the data on behalf of the company and according to its instructions under the Data Processing Agreement attached to the Terms of Service.

Requests for access, correction or deletion of data go to the company the traveller has the booking with. If a traveller contacts us, we forward the request to the company without undue delay.

What the traveller sees on the private link

The company sends the traveller a private link to their booking. The page on that link shows the data the company entered for the booking: the traveller's name, pickup time and place, destination, flight number, the assigned vehicle and driver, instructions and contact details. Using buttons and forms the traveller can send the company a message (for example that they are ready or cannot find the driver).

The page requires no registration or app installation and sets no cookies. It is excluded from search engine indexing and loads no third-party scripts. Anyone who knows the link can open it, so travellers should not pass it on.

If the traveller saves a pass to Apple Wallet or Google Wallet, the pass content (name, pickup time and place, link) is passed to Apple or Google so that they can issue and update the pass. During pass updates the phone identifies itself with an anonymous device identifier.

What data is processed

Name, e-mail, telephone, language, pickup time and place, destination, flight number or other booking identifier, driver and vehicle details, responses from forms on the page, the record of the journey and the time the page was opened. Special categories of data, identity documents and payment details are not processed; the company must not request them through the service and the page does not allow file uploads.

Anonymisation and retention

Thirty days after the journey ends (completed, cancelled or expired), the traveller's name, e-mail and telephone are removed automatically, including from the event log and the record of notifications. The company keeps the course of the journey without a link to a person. The company may cancel a journey earlier or delete its whole account, which removes all data.

Data subject rights

You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability and to object to processing based on legitimate interest. Administration users exercise their rights at [e-mail]; travellers with the company that is the controller of their data.

You also have the right to lodge a complaint with a supervisory authority, which in the Czech Republic is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz.

Transfers outside the EU

We store data in the Czech Republic. Apple, Google, Stripe and tawk.to may also process data outside the European Economic Area. Transfers are safeguarded by the European Commission's standard contractual clauses or an adequacy decision, together with the supplementary measures of these providers.

Security

Transport is encrypted, passwords and API keys are stored as hashes only, data of individual companies is separated and the traveller's page is reachable only through a private link with a random token. The server is backed up and updated regularly.

Changes to this policy and contact

We may update this policy; the current version is always at this address. We inform users of material changes by e-mail. This policy is effective from [effective date].

Data protection enquiries: [e-mail].