Privacy Policy

1. Data controller and contact

KRK Ride (krkride.com) is the data controller.

Contact: , phone .

2. Data categories

• booking data: route, pickup date and time, passenger count, flight details, selected vehicle,
• contact data: full name, email, phone number, message content,
• billing data: payment status and accounting-required records,
• technical data: basic security and operational logs.

3. Purposes and legal bases

• booking intake and service delivery (Art. 6(1)(b) GDPR),
• payments and legal accounting obligations (Art. 6(1)(c) GDPR),
• operational communication and service quality (Art. 6(1)(b) and (f) GDPR),
• platform security and claims handling (Art. 6(1)(f) GDPR).

4. Data recipients

• online payment provider (Stripe),
• hosting, email, and IT infrastructure providers,
• maps and address-autocomplete provider (Google Maps / Places),
• accounting, legal advisors, and authorities where required by law.

5. Retention periods

• booking and billing data: as required by tax and accounting regulations,
• contact form data: for inquiry handling and claims limitation periods,
• consent-based data: until consent withdrawal.

6. Your rights

• right of access and copy of your data,
• right to rectification, erasure, and restriction,
• right to data portability and objection,
• right to lodge a complaint with the competent supervisory authority.

7. Transfers and security

If a technology provider processes data outside the EEA, we apply GDPR-compliant safeguards (for example standard contractual clauses).

We use technical and organizational measures appropriate to risk, including access controls and encrypted transmission.

8. Policy updates

This policy may be updated due to legal, technical, or service-scope changes. The current version is always published on this page.