Protecting your personal data matters to us. This privacy policy explains, in line with Articles 13 and 14 of the General Data Protection Regulation (GDPR), what personal data we process on this website, how, and why — in particular in connection with our online booking form.
Data Controller
TOP TAXI e.U. Thumersbacherstr. 5 / 14, A-5700 Zell am See (Thumersbach), Austria Email: info@taxi-zellamsee.at Phone: +43 (0)6542 / 73232
Data Processed Through the Booking Form
When you use our online booking form (on the Booking page), we collect and process the following data:
- Type of service requested (airport transfer, taxi ride, courier, or train station transfer)
- Pickup and destination location for the requested trip
- Pickup date and time
- Number of passengers and pieces of luggage
- Whether a return trip is requested, and if so, the return date and time
- First and last name
- Email address
- Phone number (a plain text field — there is no separate country-code selector)
- Flight number (optional, mainly used for airport transfers)
- Free-text message / special requests (for example, a child seat, ski or snowboard equipment, or a return flight/train number — this free-text field is exactly where these details belong)
- Your consent to this privacy policy (checkbox)
Purpose of processing: to process and confirm your taxi or transfer booking, to contact you to coordinate the details, and to carry out the trip you’ve booked.
Legal basis: processing takes place under Art. 6(1)(b) GDPR, for the performance of a contract or to take steps at your request prior to entering into one.
How it’s technically handled: the booking form is a custom feature built directly into our website theme — not a third-party form plugin. Submissions are handled server-side via WordPress’s own AJAX interface (admin-ajax.php), same-origin, with no data routed through an external form provider.
Recipients: submitting the form sends a notification to our booking inbox at info@taxi-zellamsee.at. You also automatically receive a confirmation email with a copy of your request, sent to the email address you provided. We do not share your data with any other third parties.
Retention period: your booking data is kept only as long as needed to carry out the trip and to meet any legal retention obligations (for example, under tax law). After that, the data is deleted unless a legal retention requirement requires us to keep it longer.
Abuse Protection (Spam Prevention) on the Booking Form
To protect the booking form from automated abuse and spam submissions, each time the form is submitted we temporarily store a hash generated from your IP address (never the IP address itself in plain text) in a WordPress transient (a short-lived, technical cache entry) under the key tz_booking_rl_{hash of the IP address}. This value is used to count how many submissions come from the same IP address within a set period — currently a maximum of 5 submissions per hour — so we can detect and block automated bulk submissions (spam).
Purpose of processing: protecting the form against abuse, spam and automated attacks.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in preventing abuse and keeping the booking system functional).
Retention period: the counter is automatically deleted after 1 hour (the technical expiry of the WordPress transient). We do not store the IP address beyond this.
The form also uses a signed timestamp token and a simple arithmetic check (for example, “3 + 5”) as additional automated spam defenses; neither of these stores any personal data beyond what’s already listed above.
Contact Form
If you use our contact form on the Contact page, we process the data you enter there (name, email address, mobile number, message) solely to respond to your enquiry, again under Art. 6(1)(b) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).
Hosting
This website is hosted by the following provider:
World4You Internet Services GmbH Wolfgang-Pauli-Straße 2, BT3, 4020 Linz, Austria Company Register No. FN 232485s, Regional Court Linz (Landesgericht Linz)
Hosting is carried out as order processing (Auftragsverarbeitung) under Art. 28 GDPR; a corresponding data processing agreement (Auftragsverarbeitungsvertrag / AV-Vertrag) with the hosting provider is in place or is to be concluded. When you visit the site, the hosting provider automatically records technical connection data (such as IP address, date and time of access, browser type, referrer URL) in server log files. This is done to ensure stable operation and system security (Art. 6(1)(f) GDPR, legitimate interest).
Caching (LiteSpeed)
To speed up the website, server-side LiteSpeed caching may be used. This caches static page content to reduce load times. No additional personal data is stored permanently as a result — caching only applies to the HTML delivery of pages, not to the content submitted through the booking form.
Cookies
This website uses only strictly necessary cookies, to the extent required for the site to function (for example, form security and session handling). We do not use third-party tracking or marketing cookies unless separately enabled with your consent.
Your Rights
Under the GDPR, you have the following rights regarding your personal data held by us:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to lodge a complaint with a supervisory authority — in Austria, the Datenschutzbehörde (www.dsb.gv.at)
To exercise any of these rights, please contact: info@taxi-zellamsee.at
Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in the law or in how we provide our services or process data.
