Last updated: 14 July 2026
This policy explains how ROYAL 92 TAXI OG processes personal data under the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
Controller and contact details
The controller responsible for personal data processed through salzburg-taxi.eu and our direct transfer services is:
ROYAL 92 TAXI OGMoserstraße 8, Top 1
5020 Salzburg, Austria
Email: office@salzburg-taxi.eu
Telephone: +43 660 188 8770
Please use the subject “Data protection request” when contacting us about your rights.
Personal data we collect
Depending on how you use our services, we may process:
- Identity and contact data: name, email address, telephone number, billing details, and the contact details of a passenger where the person booking is not travelling.
- Journey and booking data: pickup and destination, date and time, passenger count, vehicle choice, flight or train number, luggage, child-seat requests, notes, booking reference, and service history.
- Payment and transaction data: payment status, amount, currency, invoice information, refunds, and transaction references. Full card details are handled by the payment provider and are not stored by Salzburg Taxi.
- Communications: enquiries, emails, contact-form messages, complaints, feedback, and telephone or driver-support communications.
- Technical data: IP address, browser and device type, operating system, timestamps, requested pages, referral information, security logs, and cookie preferences.
- Special requests: information you choose to provide about mobility, accessibility, assistance animals, or other requirements needed to perform the journey safely.
We usually receive this information directly from you, from the person booking on your behalf, or through our booking and payment providers.
Why we process data and our legal bases
| Purpose | Legal basis |
|---|---|
| Quotes, reservations, transfer performance, payment, refunds, and customer support | Contract or steps requested before entering a contract — Article 6(1)(b) GDPR |
| Invoices, accounting, tax records, regulatory requests, and legal compliance | Legal obligation — Article 6(1)(c) GDPR |
| Website security, fraud prevention, service quality, complaint handling, and legal claims | Legitimate interests — Article 6(1)(f) GDPR |
| Optional third-party embeds and any future non-essential analytics or marketing | Consent — Article 6(1)(a) GDPR |
Where processing is based on legitimate interests, we balance those interests against your rights and reasonable expectations. You may object as explained below.
Bookings, payments, and required information
Name, contact details, journey information, passenger count, and the information needed to arrange payment are normally required to provide a quote or complete a booking. If required data is not provided, we may be unable to confirm or perform the service.
Our website uses an external booking service hosted at book.cabsalzburg.eu. When you allow and load the booking form, information entered there is processed to calculate a quote, create and manage the reservation, process payment, and communicate journey details. Payment providers process card or wallet information under their own security and privacy terms.
If you give us information about another passenger, you must be entitled to provide it and should make this policy available to them.
Accessibility and sensitive information
Accessibility or mobility requests can sometimes reveal health-related information. Please provide only what is necessary for us to arrange a safe and suitable service. We process voluntarily supplied information for the requested journey and, where GDPR special-category rules apply, on the basis of your explicit consent or another legal basis permitted by Article 9 GDPR.
This information is shared only with personnel or drivers who need it to prepare and perform the transfer. You may withdraw consent before the journey, but doing so may mean that the requested assistance cannot be provided.
Who receives personal data
We disclose only the information reasonably needed to:
- Salzburg Taxi personnel, dispatchers, and assigned drivers;
- booking, hosting, email, IT-support, communications, and cloud-service providers;
- payment processors, banks, accountants, insurers, and professional advisers;
- replacement or specialist transport providers where needed to fulfil an agreed journey;
- public authorities, courts, or law-enforcement bodies where disclosure is legally required.
Service providers acting for us are required to process data only for the agreed purpose and with appropriate confidentiality and security protections.
Transfers outside the EEA
We aim to use providers in Austria or the European Economic Area where practical. Some technology providers may process data in countries outside the EEA. Where a country does not have an EU adequacy decision, we use an appropriate transfer mechanism such as the European Commission's Standard Contractual Clauses and supplementary safeguards where required.
You may contact us for more information about the safeguards relevant to your data.
How long we keep personal data
- Booking, contract, and complaint records are kept for as long as needed to provide the service and establish, exercise, or defend legal claims.
- Invoices and accounting-relevant records are generally retained for seven years after the end of the relevant calendar year, or longer where legally required.
- Unsuccessful enquiries are deleted or anonymised when no longer needed for follow-up or legitimate operational purposes.
- Technical and security logs are kept for a limited period appropriate to security, troubleshooting, and abuse prevention.
- The cookie-consent record stored on your device lasts up to 180 days unless you delete it sooner.
Retention may be extended where records are needed for an active dispute, investigation, legal hold, or authority request. Data is then deleted or anonymised when the reason for retention ends.
Your GDPR rights
Subject to the conditions and exceptions in applicable law, you may request:
- access to your personal data and information about its use;
- correction of inaccurate or incomplete data;
- erasure of data that is no longer needed or is processed unlawfully;
- restriction of processing in certain circumstances;
- data portability for eligible data processed by automated means;
- objection to processing based on legitimate interests;
- withdrawal of consent at any time, without affecting earlier lawful processing.
We do not use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects. Automated calculations may be used to display transfer prices or availability.
Security, confidentiality, and children
We use proportionate technical and organisational safeguards designed to prevent unauthorised access, loss, alteration, or disclosure. Access is limited to people who need the information for their work. No online transmission or storage method can be guaranteed completely secure.
Our website is intended for adults arranging transport. A parent, guardian, or responsible adult should make bookings involving minors. If you believe a child has provided personal data without appropriate authorisation, please contact us.
Privacy requests and complaints
Send requests to office@salzburg-taxi.eu. We may ask for information needed to confirm your identity and protect your data. We normally respond within one month, subject to the extensions allowed by GDPR.
You also have the right to complain to the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, Austria, email dsb@dsb.gv.at.
Changes to this policy
We may update this policy when our services, providers, or legal obligations change. The revised version will be published here with a new “Last updated” date. Material changes may also be highlighted on the website.