Privacy policy

This privacy notice explains how personal data is processed when you visit this website and use the online ride-request service.

1. Controller

Taxi Beck
Owner: Willi Beck
Spinnereistr. 2
48607 Ochtrup
Germany
Email: taxi-beck@t-online.de
Phone: 02553 4711

2. Hosting, server logs and IONOS WebAnalytics

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. When the website is accessed, technically necessary connection and log data may be processed, including IP address, time, requested resource and browser/device information. This processing serves secure and reliable delivery, troubleshooting and abuse prevention. The legal basis is Art. 6(1)(f) GDPR. Where IONOS processes data on our behalf, it is used as a processor under Art. 28 GDPR on the basis of the applicable contractual data-protection arrangements.

As part of the web hosting service, IONOS also uses WebAnalytics for statistical evaluation and technical optimisation. Data processed may include the referrer, requested pages or files, browser type and version, operating system, device type, time of access and an anonymised IP address. According to IONOS, the IP address is transmitted when a page is requested and anonymised immediately afterwards. IONOS WebAnalytics does not use cookies. IONOS states that web-hosting visitor data is retained for up to eight weeks. According to IONOS, WebAnalytics data is not disclosed to third parties.

3. Online ride requests

You can submit a ride request directly to Taxi Beck using the online form. Required information includes the data needed to process the request, such as name, phone number, pickup and destination, ride type and requested date/time. Depending on the ride, further organisational information may be necessary, for example passenger count, return ride or mobility aids. Free-text notes are voluntary.

Data required for the ride request is processed to take steps at your request and to provide the requested transport service under Art. 6(1)(b) GDPR. Without fields marked as required, the online request cannot be processed. Necessary internal dispatch notes may be created during processing and are used only to organise the ride.

Personal booking data is stored using application-level encryption. The internal dashboard does not normally display full customer data; complete ride data is decrypted only for an authorised detail view.

4. Medical, therapy and mobility-aid information

Medical, dialysis or therapy rides and information about a walker or wheelchair may reveal health information within the meaning of Art. 9 GDPR. Such information is processed only if you actively provide the specific explicit consent. The legal basis is Art. 9(2)(a) GDPR. You may withdraw consent at any time for the future; processing carried out before withdrawal remains lawful. If health-related information is necessary to organise the selected ride, the corresponding online request may no longer be processable after withdrawal. Please do not enter diagnoses or detailed medical information into free-text fields.

5. Personal status link and optional device storage

After submission you receive a personal status link containing a cryptographically random access token. The token is used only to retrieve the processing status and should not be shared with unauthorised persons. Status requests use HTTPS and are served with technical no-cache controls. Server-side status access is time-limited and ends no later than deletion of the web booking data.

Only if you actively choose this option are the reference, status token and storage time stored in your browser's local storage for up to 24 hours. Name, phone number, pickup, destination and health information are not stored there. This optional storage on the end device is based on your consent under Section 25(1) TDDDG; insofar as the saved status access is personal data, the additional legal basis is Art. 6(1)(a) GDPR. You may withdraw this local storage at any time using “Remove”. Expired local entries are removed the next time the website is opened. Without your choice, the status link is not stored persistently on the device.

6. Cookies, local storage and external content

The Taxi Beck theme and booking system themselves do not use advertising or additional analytics trackers for public visitors and do not load external web fonts. The WebAnalytics processing performed as part of IONOS web hosting is described in section 2. WordPress emoji fallbacks are disabled for Taxi Beck interfaces to avoid unnecessary external resource requests. Optional status-link storage is used only after your active choice. For logged-in staff, WordPress uses technically necessary authentication and security cookies. If additional plugins, analytics tools or external content are introduced later, the processing must be reassessed and this privacy notice updated where necessary.

7. Recipients and access permissions

Personal ride information is accessible only to persons who need it for dispatch or performance of the ride, which may include authorised control-centre staff and drivers assigned to the specific ride. IONOS receives data as part of hosting as a processor. Data is not disclosed for advertising purposes.

8. Security measures

Risk-appropriate technical and organisational measures are used, including HTTPS, application-level encryption of booking data, role-based access permissions, mandatory multi-factor authentication for particularly privileged taxi supervisor accounts, data-minimised dashboards, time-limited sessions, rate limiting and logged detail access. Audit logs do not contain complete customer data. Measures are reviewed and adjusted as necessary.

9. Retention

For booking data stored in the web booking system, a technical maximum deletion deadline is fixed when the request is created: no later than 30 days after the last planned ride. Later status changes cannot extend this maximum and may shorten it. Open requests remain visible until processed; completed or rejected requests remain visible only for a limited operational follow-up period. Audit logs without complete customer data are retained for up to 180 days and are then automatically purged.

If information is required outside the web booking system for performance of a confirmed ride, invoicing or statutory retention obligations, the applicable legal and operational retention rules apply to those records.

10. No automated decision-making or profiling

Acceptance, review, confirmation or rejection of a ride request is not based solely on automated decision-making within the meaning of Art. 22 GDPR. No advertising or scoring profiles are created.

11. Your rights

Subject to the statutory requirements, you have rights including access, rectification, erasure, restriction, data portability and objection. Consent can be withdrawn at any time for the future.

12. Right to complain

You may lodge a complaint with a data-protection supervisory authority. In North Rhine-Westphalia, the competent authority is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

13. Version

29 August 2026