Legal
Privacy policy
How we handle your personal data – under the EU General Data Protection Regulation (GDPR).
1. Controller
Tik Tak Transfer, owner Armin Spielhaupter, Industriestr. 10A, 82110 Germering
Phone: +49 89 748 66 88 3 · Email: contact@tiktaktransfer.com
We are not legally required to appoint a data protection officer. For privacy questions please contact us at the address above.
2. Overview
- We use no analytics or advertising cookies and no tracking.
- Fonts are served from our own server, not from Google.
- No map services are embedded in the page. Address search and route calculation run through our server; your IP address is not passed on to third parties.
- We process your data only to carry out your ride, answer your enquiry and meet legal obligations.
3. Hosting and server log files
When you visit the website, our hosting provider processes technically necessary data: IP address, date and time, page requested, referrer URL, browser and operating system. This serves the secure and stable provision of the website (Art. 6(1)(f) GDPR). Log files are deleted after 14 days at the latest unless needed to investigate a security incident.
4. Online booking
For bookings we process: name, email, phone number, pickup and destination address, date and time, vehicle class, number of passengers and items of luggage, flight number, name for the pickup sign, child seats, your note to the driver, billing and company details where applicable, and the name and phone number of a passenger you book for. The legal basis is the performance of the contract or pre-contractual measures (Art. 6(1)(b) GDPR).
Booking data is stored in our booking system and passed on to the assigned driver to the extent needed for the ride (name, phone, pickup location, time, flight number, sign). If we use a partner operator for a ride, it receives the same details.
To determine the price we calculate the route. For this, our server sends the addresses you entered (without your name or IP address) to the following services based on OpenStreetMap data: Photon (komoot GmbH, Potsdam, Germany) for address search, Nominatim (OpenStreetMap Foundation, United Kingdom – EU adequacy decision) as a fallback, and the routing service of FOSSGIS e.V. (Germany). If Google Maps is enabled in the booking system, the addresses are sent to Google Ireland Ltd. instead (Art. 6(1)(b) and (f) GDPR).
5. Contact form, email, phone and WhatsApp
When you contact us, we process your details (name, email, phone, message) to answer your enquiry (Art. 6(1)(b) GDPR for booking enquiries, otherwise (f)).
WhatsApp is a service of WhatsApp Ireland Ltd. (Meta). A WhatsApp link on our website only opens the app when you click it; no data is sent to WhatsApp beforehand. If you message us on WhatsApp, WhatsApp's privacy policy also applies, and data may be transferred to the USA (EU-US Data Privacy Framework). If you prefer not to, please use phone or email.
6. Sending emails
We send booking confirmations and replies via our provider's email server (processing on our behalf under Art. 28 GDPR). We do not use read receipts or tracking pixels.
7. Payment
You pay in the vehicle by cash, card (card terminal), Apple Pay, Google Pay or PayPal, or by invoice as a corporate customer. For card payments the payment data is processed by the respective payment provider; for PayPal by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. We do not store complete card details ourselves (Art. 6(1)(b) GDPR).
If you choose online payment when booking, you are redirected to the provider's payment page: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland for card, Apple Pay and Google Pay; PayPal (Europe) S.à r.l. et Cie, S.C.A. (see above) for PayPal. We pass on the booking reference, amount, vehicle, route and your email address. You enter your payment details directly with the provider; we only receive the payment confirmation (Art. 6(1)(b) GDPR). The privacy notices of Stripe or PayPal also apply.
8. Cookies and local storage
Technically necessary storage is allowed without consent (Section 25(2) no. 2 TDDDG). Anything else is only used with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR).
| Name | Purpose | Type / duration | Basis |
|---|---|---|---|
| cookiePreferences | Stores your cookie banner choice (date, version, selection) | Local storage, 6 months | necessary |
| Login cookie | Only in our staff's password-protected administration area | Cookie, session | necessary |
Your choice is stored only in your browser and is not sent to us. You can change it or withdraw consent with effect for the future at any time: . We ask again after 6 months.
9. Social media
We link to our profiles on Facebook, Instagram and X. These are plain links, not embedded plug-ins; data is only transferred when you click a link.
10. Storage period
We keep booking and invoice data for up to 10 years in line with commercial and tax law (Section 147 AO, Section 257 HGB). Enquiries that do not lead to a booking are deleted after 12 months at the latest.
11. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). You can withdraw consent at any time with effect for the future. Simply write to us at contact@tiktaktransfer.com.
You also have the right to lodge a complaint with a data protection authority, for example the authority responsible for us: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.
12. Changes
We update this policy when our website or the law changes. The version published here applies. See also our imprint.