Privacy Statement | Taxi Voorne aan Zee

1. Who is responsible for your data?

Data controller: Taxi Voorne aan Zee
Chamber of Commerce number: 97433659
Address: 't Woud 49e, 3232 LN Brielle
E-mail: [email protected]
Telephone: 0181-708780

2. What does this statement cover?

This statement applies to the website taxivoorneaanzee.nl and to the data you provide to us through that website: the ride request form and the contact form. If you call us, message us on WhatsApp or send us an e-mail, we process your data with the same care.

3. Which data do we process?

We only process data that you enter yourself or that is technically required to keep the website working safely:

Ride request: your name, e-mail address, telephone number, pick-up address, destination, date and time of the ride, an optional return ride with date and time, the number of passengers, the number of large and small suitcases and items of hand luggage, whether you are bringing a pushchair or wheelchair, whether you have other luggage or special requirements and any explanation you give, the language of the form, that you have agreed to the terms and conditions and, if you indicate a wheelchair, that you have given explicit consent to the processing of that information. If you had the route distance calculated on the website beforehand, that indicative distance is sent along with the request.
Contact form: your name, e-mail address and your message.
Technical data: your IP address and technical characteristics of your browser, solely for security, abuse prevention and the technical operation of the website (see sections 6, 7 and 8).
Website statistics: only if you give your consent, Google Analytics measures in broad terms which pages are visited and whether a ride request or contact message has been sent (see section 13).

We do not ask for data we do not need. Please do not enter medical or other special categories of personal data in free-text fields unless it is necessary for your request.

Information about a wheelchair or another health-related accessibility need may reveal something about your health and may therefore be a special category of personal data. We only ask for the information needed to arrange the requested ride properly. Insofar as Article 9 GDPR applies to such information, we process it solely for the requested ride and on the basis of your explicit consent (Article 9(2)(a) GDPR), which you give separately in the ride form.

You can withdraw this consent at any time, including before the ride, by calling us, sending a WhatsApp message or e-mailing us. We will then contact you about how your ride will be carried out.

4. Ride requests via the website

When you send a ride request, the website e-mails the data from the form to our mailbox, and you receive an acknowledgement by e-mail containing the details of your request; any free-text explanation is not repeated in it. We use your data to assess your request, confirm the ride with you and carry out the ride.

The website does not store your request itself: there is no customer account, no ride administration and no database of requests on the website. After sending, your request exists only as an e-mail. The website does not calculate a fare; the fare is determined by the taximeter or by a fixed price agreed with you in advance.

5. Contact form

A message sent via the contact form is e-mailed to our mailbox; you receive an acknowledgement. We use your name and e-mail address only to answer your question. Contact messages are not stored on the website either.

6. Google Maps, address suggestions and route calculation

To help you fill in your ride, our website uses services of Google Maps Platform (Google Ireland Limited / Google LLC): the Google Maps JavaScript API for the map, the Places API for address suggestions while you type, and the Routes API for calculating the route distance. These components are loaded in your browser as soon as you open the page with the ride form.

When you type a pick-up address or destination and have a route calculated, the typed text, the selected addresses and the route data are sent directly from your browser to Google. Google also processes technical data in the process, such as your IP address and information about your browser and device. Google processes this data under the terms that apply to Google Maps Platform and may be an independent controller for certain processing; not all processing by Google takes place on our behalf.

The website does not ask for the location of your device and does not use your browser's geolocation feature; the map starts at the area around our office in Brielle.
Addresses, map and route data are not stored in a database by our website. Only the calculated distance and the addresses you selected are included in the e-mail of your request, if you send a ride request.
The calculated distance is only an indication and not a price.

More information: Google Privacy Policy and the Google Maps/Google Earth Additional Terms of Service.

7. Protecting the forms with Cloudflare Turnstile

To protect our forms against spam and automated abuse we use Cloudflare Turnstile, a service of Cloudflare, Inc. Turnstile loads a small script in your browser and uses technical signals, such as your IP address and characteristics of your browser and connection, to assess whether a form is being sent by a human. Occasionally Turnstile asks you to tick a box. Turnstile does not read the contents of your form and does not process the data you entered.

When you submit a form, our server verifies the proof issued by Turnstile with Cloudflare; in doing so we pass on your IP address. Insofar as Cloudflare processes this data on our behalf to protect our website, Cloudflare acts as a processor. For certain limited purposes of its own, such as the security and improvement of Turnstile, Cloudflare may be an independent controller under its own terms.

Turnstile may use limited technical storage in your browser for the security check. In our current configuration, Turnstile does not use tracking or marketing cookies.

More information: Cloudflare Turnstile Privacy Addendum.

8. Technical data, log files and website security

Server log files: like almost every website, our web server records technical data about visits, such as IP address, time, requested page and browser type. We use these logs only for administration, troubleshooting and security.
Abuse protection: to prevent the forms from being submitted en masse in a short time, the website briefly keeps a hashed derivative of your IP address together with the number of submission attempts. This data expires automatically after no more than one hour and cannot be traced back to you without the website's secret key.
Honeypot: our forms contain a hidden field that normal visitors do not see and do not fill in. Only automated spam programs fill in that field; this is how we recognise spam. This field does not track your behaviour.
The website is available over a secure connection (https). Apart from the website statistics of section 13, which are collected only with your consent, the website uses no scripts that track your behaviour.

9. Why are we allowed to process your data?

Ride requests, confirmations and carrying out rides: this is necessary to prepare and perform a contract at your request (Article 6(1)(b) GDPR).
Contact form: answering your question, on the basis of preparing a contract or our legitimate interest in responding to your message (Article 6(1)(b) and (f) GDPR).
Google Maps, Cloudflare Turnstile, log files and abuse protection: insofar as we are responsible for them, our legitimate interest in a well-functioning, secure website and in offering the route feature that you use yourself (Article 6(1)(f) GDPR).
Information about a wheelchair or another health-related accessibility need: for the ride itself Article 6(1)(b) GDPR and, insofar as it concerns health data, in addition solely Article 9(2)(a) GDPR — explicit consent. We use this information only for the requested ride.
Financial administration of completed rides: our legal obligations, including the statutory retention obligation for tax purposes (Article 6(1)(c) GDPR).
Website statistics with Google Analytics: solely your consent (Article 6(1)(a) GDPR and Article 11.7a of the Dutch Telecommunications Act), which you can withdraw at any time.

We do not use your data for newsletters, marketing or profiling and we never sell your data.

10. With whom do we share your data?

Our drivers: they receive the data needed to carry out your ride (name, telephone number, addresses, times, passengers and luggage).
Web Interactive (hosting and e-mail): our website and mailbox run on the infrastructure of this hosting provider in the Netherlands. It processes data solely on our behalf.
Google (Google Maps Platform): see section 6.
Cloudflare (Turnstile): see section 7.
Google (Google Analytics, only with your consent): see section 13.
Our administration/bookkeeping: data about completed rides that is needed for invoicing and the statutory records.

We only provide data to government authorities if the law obliges us to do so.

11. Processing outside the European Economic Area

Our own systems, hosting and e-mail are located in the Netherlands. Google and Cloudflare are international companies; when Google Maps, Cloudflare Turnstile and (with your consent) Google Analytics are used, technical data (such as your IP address and typed addresses) may be processed outside the EEA, including in the United States. Insofar as data is transferred outside the EEA in the process, the recognised transfer mechanisms that apply to the processing concerned are used, such as the EU-US Data Privacy Framework and/or the standard contractual clauses of the European Commission, where applicable to the processing concerned. You can find more information in the current privacy and data processing terms of Google and Cloudflare referred to in sections 6 and 7.

12. How long do we keep your data?

On the website: nothing. The website does not keep ride requests, contact messages, addresses or routes.
E-mails with ride requests: we keep the request e-mail only as long as necessary to handle and carry out the ride. After the ride has been carried out we delete the original request e-mail, unless a legal obligation, a complaint, a specific dispute or another valid reason requires it to be kept longer.
E-mails via the contact form that do not lead to a ride: we delete them after your question has been fully handled, no later than 30 days afterwards, unless a valid reason requires them to be kept longer.
Financial administration: data about completed rides that ends up in our bookkeeping (such as invoices) is kept for as long as the law requires; for tax records in the Netherlands that is seven years. This concerns the administrative data, not the original request e-mail.
Technical server logs: no longer than necessary for administration, troubleshooting and security, as a rule no more than 30 days. Data needed to investigate a specific security incident or to meet a legal obligation may temporarily be kept longer.
Abuse protection of the forms: the data expires after no more than one hour.
Website statistics (only with consent): our configuration limits the lifetime of the Google Analytics cookies to no more than 12 months; we keep the measurement data in Google Analytics for no longer than 14 months.

13. Cookies, website statistics and local storage

Without your consent we do not place any analytical or marketing cookies. Strictly necessary and functional techniques that are needed for the security of the website or for a feature you use yourself may be used independently of this, insofar as the law permits.

Only if you allow it, we use Google Analytics 4 (a service of Google Ireland Limited / Google LLC) to measure in broad terms how the website is used: which pages are visited and how often a ride request or contact message is sent, the telephone button is tapped or a WhatsApp conversation is started. We use these statistics only to improve the website.

On your first visit we ask for your consent with a short notice. If you choose “Decline” or make no choice, Google Analytics is not loaded and no data is sent to Google. If you choose “Accept”, Google Analytics places the analytical cookies “_ga” and “_ga_…” in your browser to recognise returning visits; our configuration limits the lifetime of these cookies to no more than 12 months. We store your choice only in your own browser (local storage), for no more than 12 months.

The statistics contain no names, e-mail addresses, telephone numbers, addresses, ride details or messages: when a form is sent we only measure that something was sent, not what.
Google Analytics does not store your full IP address and we do not use advertising features, Google Signals, linking to a user account or data for personalised advertising.
Google processes the statistics on our behalf as a processor, under the data processing terms of Google Analytics; Google may not use the data for its own purposes.
You can withdraw or give your consent at any time via “Cookie settings” at the bottom of every page. After withdrawal, measurement stops immediately; statistics already collected are deleted in accordance with the retention period in section 12. You can also delete the cookies yourself via your browser.

During your visit your browser may keep a small technical setting in the browser's session storage (for example whether your browser can display emoji); it disappears as soon as you close the browser and contains no personal data. The Google Maps and Cloudflare Turnstile components are loaded from the servers of Google and Cloudflare; sections 6 and 7 explain which data they process in the process. We do not use marketing cookies, statistics from other third parties or social media buttons that track you.

More information: Google Privacy Policy and How Google Analytics safeguards data.

14. Your privacy rights

You have the right to:

access the personal data we hold about you (right of access);
have incorrect data corrected (right to rectification);
have your data deleted, insofar as we are not legally required to keep it (right to erasure);
have the processing restricted (right to restriction);
object to processing based on our legitimate interest (right to object);
withdraw consent you have given at any time with effect for the future (right to withdraw consent);
receive the data you gave us for a ride or question in a common digital format, insofar as the statutory conditions for this are fulfilled (right to data portability).

Only the following are based on your consent: the website statistics of section 13 and, if you indicate a wheelchair, the processing of that information (section 3). You withdraw consent for statistics via “Cookie settings” at the bottom of every page, and consent for wheelchair information by contacting us. Withdrawing consent does not affect the lawfulness of processing before the withdrawal. Our other processing activities are not based on your consent. We do not make automated decisions about you.

Would you like to exercise one of these rights? Send an e-mail to the address at the bottom of this statement. We respond within one month. To make sure we are helping the right person, we may ask you to prove your identity.

15. Security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. These include a secure connection (https), protection of the forms against abuse, minimal data processing on the website itself and mailbox access only for the people who need to handle your request. No security is completely watertight; we therefore keep our measures up to date.

16. Complaints to the Dutch Data Protection Authority

Are you unhappy with how we handle your data? Let us know; we would be glad to find a solution together. You also always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

17. Changes

We may amend this privacy statement, for example if our website or the law changes. The current version is always available on this page; the date at the top shows when the text was last changed.

18. Contact

For questions about this statement or about your data, you can contact us:

Taxi Voorne aan Zee
't Woud 49e, 3232 LN Brielle
[email protected]
0181-708780