Privacy policy

FirstRide Taxi – Informationen zur Verarbeitung personenbezogener Daten.

1. Controller

FirstRide Taxi
Owner: Dragan Lukic
Address: Seitenstettengasse 5/37, 1010 Wien

E-Mail: info@firstride.at
Phone: +43 676 646 70 18

2. Collection and Processing of Personal Data

We process personal data only to the extent necessary for providing a functional website, as well as our services and customer support.
The data we may collect includes:

  • Name, e-mail address, phone number (via contact or booking forms)

  • Travel details (pickup location, destination, date, time, number of passengers, luggage information)

  • Technical data (IP address, browser type, access time, referrer URL)

3. Purpose of Data Processing

Data is processed for the following purposes:

  • Handling inquiries and bookings

  • Fulfilling contractual obligations (passenger transport services)

  • Communication with customers (e.g., confirmations, changes, support)

  • Improving our website and user experience

  • Compliance with legal obligations (e.g., retention requirements)

4. Legal Basis

Processing is based on the following legal grounds:

  • Art. 6 (1) (b) GDPR – performance of a contract

  • Art. 6 (1) (c) GDPR – legal obligation (e.g. tax retention)

  • Art. 6 (1) (f) GDPR – legitimate interest (secure operation of the website)

  • Art. 6 (1) (a) GDPR – consent (e.g., cookies and analytics tools)

5. Cookies

Our website uses a consent banner. Non-essential cookies and third-party services (Google Analytics, Google Ads, Google Fonts) are loaded only after you click Accept. If you click Reject, these services are not loaded. You can change your choice at any time via “Cookie settings” in the footer. Essential site functions work without consent.

6. Google Services (Fonts, Analytics, Ads)

  • Google Fonts: used for consistent typography – only after consent.

  • Google Analytics / Google Ads: used to measure website traffic and advertising – only after consent.

Legal basis: Art. 6 (1) (a) GDPR. These services are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

7. Recipients / Processors

Data is shared only where necessary for contract performance, technical operation or legal obligations. Recipients / categories of recipients include in particular:

  • Hosting provider for the website, booking system and server operation

  • E-mail/SMTP service (including mail.firstride.at) for booking confirmations, system and contact messages

  • FirstRide booking and dispatch system for managing rides, customer data and communication

  • Drivers / assistants to perform the booked transport (only data needed for the ride)

  • Google Ireland Limited where consent has been given (Fonts, Analytics, Ads)

  • where applicable, tax advisors / accounting and authorities based on legal duties

Where required, we conclude processor agreements pursuant to Art. 28 GDPR.

8. Data Retention

We store personal data only as long as necessary for the respective purpose or as required by law:

  • Booking and contract data (including invoice/receipt data): generally 7 years under Austrian tax and commercial retention rules (UGB/BAO)

  • Contact inquiries without a subsequent booking: generally 6 months after final handling

  • Technical server/log data: generally up to 30 days, unless a security incident requires longer retention

  • Cookie/consent status: stored locally in your browser (localStorage) until you change or delete it

  • Analytics/ads data (Google): only with consent and according to Google’s retention periods; withdrawal stops further use by us

9. Transfers to third countries

When Google services are used (only after consent), personal data may be transferred to the USA. Google is certified under the EU-US Data Privacy Framework; Standard Contractual Clauses (Art. 46 GDPR) may also apply. Without your consent, these Google services are not loaded by us. Hosting and e-mail sending are generally part of our website/mail operations; we do not intentionally transfer data to unsafe third countries beyond that.

10. Rights of Data Subjects

According to the GDPR, you have in particular the following rights:

  • Right of access (Art. 15 GDPR)

  • Right to rectification (Art. 16 GDPR)

  • Right to erasure (Art. 17 GDPR)

  • Right to restriction of processing (Art. 18 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right to object (Art. 21 GDPR)

  • Right to withdraw consent (Art. 7 (3) GDPR): You may withdraw consent (e.g. cookies/analytics) at any time with effect for the future – via “Cookie settings” in the footer or by e-mail to info@firstride.at. Withdrawal does not affect the lawfulness of processing before withdrawal.

  • Right to lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at)

11. Data Security

We implement technical and organizational measures to protect personal data against loss, misuse, or unauthorized access.

12. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy at any time. The current version is always available on our website.

Last updated: August 2026