Privacy Policy

1. Data Controller

The data controller responsible for processing your personal information under this policy is:
TourlyTransfer
Rennbahnweg 27/21, 1220 Wien
UID: ATU79435924
Email: booking@tourlytransfer.com
Phone: +43 676 6663733

2. Personal Data We Collect

We collect and process the following types of personal information to provide our premium ground transport services:

• Contact Information: Full name, email address, telephone number.
• Booking Details: Date and time of transfer, pickup address, dropoff address, flight numbers (for arrival tracking), hours requested, and optional special passenger requirements.
• Corporate Account Data: Company name, tax ID (UID), corporate billing addresses, and representative contact information.
• Billing & Payment Information: Payment card details and transactions (processed securely via accredited third-party payment gateways; we do not store raw card credentials on our servers).
• Technical Data: IP address, browser type, device information, and interaction logs captured via cookies when you use our website.

3. Legal Bases & Purpose of Processing

We process your personal data under the following legal bases in accordance with GDPR Article 6:

• Performance of a Contract (Art. 6(1)(b) GDPR): To manage, calculate, and fulfill ground transport bookings, dispatch drivers, and issue booking confirmations.
• Legal Obligation (Art. 6(1)(c) GDPR): To comply with Austrian tax laws, commercial bookkeeping regulations (UGB), and passenger transport operating licenses.
• Legitimate Interests (Art. 6(1)(f) GDPR): To monitor and improve our website performance, conduct fraud prevention checks, and maintain communication with our corporate accounts.
• Consent (Art. 6(1)(a) GDPR): For any optional communications or tracking cookies that you explicitly opt into.

4. Data Disclosure & Sharing

We treat your personal data with absolute confidentiality. We only share information with third parties when necessary to fulfill transport services or comply with law:

• Chauffeurs & Dispatchers: The assigned driver receives only the passenger name, phone number, pickup/dropoff addresses, and flight details necessary for completing the ride.
• Payment Processors: Transaction data is securely transmitted to certified payment providers to process billing.
• IT & Software Providers: Web hosting, CRM databases, and analytics services operating under strictly executed Data Processing Agreements (DPAs).

5. Data Retention Periods

We store personal data only as long as necessary to complete the purposes outlined in this policy. Under Austrian tax and commercial bookkeeping codes, financial contracts, billing invoices, and related booking records must be archived for a statutory period of 7 years. General client inquiries without bookings are deleted after 6 months.

6. Your Rights Under GDPR

As a European Union data subject, you hold the following statutory rights regarding your personal information:

• Right of Access (Art. 15): Request a copy of the personal data we store about you.
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal records.
• Right to Erasure (Art. 17): Request deletion of your data when retention is no longer legally required.
• Right to Restrict Processing (Art. 18): Request limits on how we process your information.
• Right to Data Portability (Art. 20): Request your data be transferred in a structured, machine-readable format.
• Right to Object (Art. 21): Object to processing carried out under our legitimate business interests.

To exercise any of these rights, email us at booking@tourlytransfer.com. If you believe your data has been processed unlawfully, you have the right to file a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna).

7. Updates to This Policy

We may update this Privacy Policy from time to time to adapt to changes in our ground logistics processes or modifications to EU regulations. Any revisions will be posted on this page with an updated "last modified" timestamp.