Privacy policy (GDPR)
Information on data processing in accordance with the GDPR (EU Regulation 2016/679) and the German BDSG. Last updated: .
1. Data controller
Vip Black Car, owner Grzegorz Ganc
Brigittenweg 19, 12524 Berlin, Germany
Tel.: +49 176 40783582 · Email: info@vbctransfers.com
Data protection officer: [if appointed — to be completed; not required in many small companies].
2. What data we process
- Booking data: full name, phone (including mobile, messengers), email, pickup/destination addresses, date and time, flight/train number, number of passengers, luggage, child seats, notes.
- B2B account data: company name, legal form, address, tax ID/USt-IdNr, registration data, contact persons (including emergency and billing contacts).
- Billing data: payments, invoices, discount codes.
- Technical data: IP address, device/browser type, cookies (see section 7).
- Location data (drivers): the vehicle's GPS position during the job (for tracking and dispatch).
3. Purposes and legal bases
| Purpose | Basis (GDPR art.) |
|---|---|
| Fulfilment of the booking and transport | art. 6(1)(b) (contract) |
| Settlements, invoices, accounting | art. 6(1)(c) (legal obligation) |
| Contact, service, ride tracking | art. 6(1)(b) and (f) (legitimate interest) |
| Security and abuse prevention | art. 6(1)(f) |
| Marketing (with consent) | art. 6(1)(a) (consent) |
4. Recipients and processors
- Drivers performing the job (data necessary for pickup).
- Maps and routing provider: Google Maps (Google Ireland Ltd.) — see section 6.
- Analitykę ruchu na stronie zapewnia Ahrefs Web Analytics. Po zgodzie na analitykę narzędzie przetwarza zagregowane informacje o odwiedzanych adresach stron, źródłach wejścia, przeglądarce i urządzeniu, przybliżonej lokalizacji (kraj i miasto), języku oraz interakcjach. Według Ahrefs tracker domyślnie nie używa cookies ani nie zapisuje surowych adresów IP. Polityka prywatności Ahrefs.
- Flight data provider (flight tracking): [e.g. AeroDataBox/AviationStack — to be completed].
- Payment providers: [e.g. Stripe/PayPal/Przelewy24 — to be completed].
- Hosting/server: [hosting provider — to be completed].
- Messengers (on request): WhatsApp/Telegram/Signal — communication with the driver initiated by the user.
We conclude data processing agreements with processors (art. 28 GDPR).
5. Retention period
We store data for the duration of the service and for periods required by law (including accounting documents — up to 10 years under German law). Consent-based data — until consent is withdrawn. Ride location data — deleted/anonymised after the job and the complaint period.
6. Google Maps
We use Google Maps to display maps, calculate routes and track. This may involve transferring data (including your IP address) to Google, also outside the EEA (USA) on the basis of standard contractual clauses. Details: policies.google.com/privacy.
7. Cookies
We use cookies and similar technologies. Necessary cookies are always active; functional, analytical and marketing cookies require consent, which you give in the banner and can change at any time: Cookie settings.
8. Your rights
- access to data, rectification, erasure, restriction of processing;
- data portability; objection to processing based on legitimate interest;
- withdrawal of consent at any time (without affecting prior processing);
- complaint to a supervisory authority — in Germany the competent one is: Berliner Beauftragte für Datenschutz und Informationsfreiheit.
For data matters, write to: info@vbctransfers.com.
9. Transfers outside the EEA
Where we use providers outside the EEA (e.g. Google), the transfer takes place on the basis of an adequacy decision or EU standard contractual clauses.
10. Changes to this policy
We may update this policy as our services evolve and the law changes. The version published on the site applies.