Privacy Policy

The operator of transferletisko.sk and of the airport transfer service is Tomáš Lovnianský (“we”). We handle your personal data in line with the GDPR and Slovak Act No. 18/2018 Coll. on the protection of personal data. This English text is a translation for our international customers; in case of any discrepancy, the Slovak version prevails.

Operator

Tomáš Lovnianský

Registered address

Vodárenská 4607/92, 921 01 Piešťany

Company ID (IČO)

45416605

Tax ID (DIČ)

1081827527

VAT ID

SK1081827527 (registered under Sec. 7a – not a VAT payer)

Taxi service licence

OU-TT-OCDPK-2026/096513 (issued by Okresný úrad Trnava, odbor cestnej dopravy a pozemných komunikácií)

Supervisory authority

Inšpektorát SOI pre Trnavský kraj, Pekárska 23, 917 01 Trnava

What we process, why and on what legal basis

• Your booking and the ride itself – name and surname, e-mail, phone, pick-up address and exact pick-up point, destination, date and time of the ride and of the return trip, number of passengers, flight number (including the return flight), note and, if requested, company invoicing details. During the ride we record its progress (driver on the way, at the pick-up point, plane landed, ride completed). Legal basis: performance of the transport contract (Art. 6(1)(b) GDPR). Providing the data is voluntary, but without it we cannot provide the ride.
• Messages between you and the driver – the texts you exchange on your booking page and the e-mail notifications about new messages. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
• Payments and post-ride charges – payments are processed by Stripe Payments Europe, Ltd. (Ireland) as a separate controller. Your card number never reaches us; we only record the amount, the payment status and the order identifier. If a surcharge arises after the ride (extra waiting, vehicle cleaning), we e-mail you a payment link. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
• Accounting and invoicing records – amount, date, what was paid for and the details on the receipt or invoice. Legal basis: compliance with a legal obligation under the Slovak Accounting Act No. 431/2002 Coll. (Art. 6(1)(c) GDPR).
• The map in the booking form – the booking form with its map is part of the homepage itself, so Google map services load together with the homepage, even if you do not fill in the form. Google receives your IP address and technical browser data, and, when you search, the address you type. Legal basis: our legitimate interest in showing the route and the final price right on the page (Art. 6(1)(f) GDPR).
• Cookie-free visitor statistics – aggregate visitor numbers via Vercel Web Analytics (no cookies, no visitor profile). Legal basis: our legitimate interest in knowing how the website is used (Art. 6(1)(f) GDPR).
• Security, fraud prevention, complaints and repeat bookings – technical records created while running the website (e.g. IP address and time of a request) and the data of completed rides until they are anonymised. Legal basis: our legitimate interest in protecting the website and bookings against misuse, handling complaints and making your next booking easier (Art. 6(1)(f) GDPR).

We do not use automated decision-making or profiling.

Who we share it with

The driver who carries out your ride sees only the data needed for it in the crew app (name, phone, e-mail, addresses, time, flight number, note and messages). The following companies also process the data:

• Vercel Inc. (USA) – hosting of the website and the crew app, cookie-free aggregate visitor statistics (Vercel Web Analytics).
• Neon Inc. (USA) – the booking and message database (Neon Postgres, data stored in an EU region).
• Resend (USA) – sending booking e-mails (confirmation, ride status, messages, payment links).
• Google Ireland Ltd. – map services (map, address search and route calculation) on the homepage with the booking form.
• Stripe Payments Europe, Ltd. (Ireland) – online payment processing (card, Apple Pay, Google Pay) as a separate controller.

We do not sell your data or pass it to third parties for marketing purposes.

Transfers outside the EU

Vercel, Neon, Resend, Google and Stripe are companies based in the USA or belong to groups based in the USA, so data may also reach the USA. Such transfers are covered by the European Commission’s adequacy decision for the EU-US Data Privacy Framework where the company is certified under it, and otherwise by standard contractual clauses approved by the European Commission (Art. 45 and 46 GDPR). We will provide a copy of these safeguards on request.

How long we keep it

• Contact and address data from your booking (name, e-mail, phone, addresses, flight number, note) and the messages between you and the driver are anonymised automatically 2 years after the ride. Until then we use them for complaints and repeat bookings.
• Accounting and invoicing records, including amounts, are kept for 10 years as required by the Slovak Accounting Act.
• Visitor statistics contain only aggregate numbers, no personal data.

Your rights

• the right of access to your data and to a copy of it,
• the right to rectification and erasure (unless a legal obligation prevents it),
• the right to restriction of processing and to data portability,
• the right to object to processing based on legitimate interest (Art. 21 GDPR) – after an objection we stop such processing unless we demonstrate compelling legitimate grounds or need it to establish or defend legal claims,
• the right to lodge a complaint with the Slovak Data Protection Authority (uoou.sk).

Write to us at info@transferletisko.sk and we will deal with it without undue delay, within 30 days at the latest.