Privacy Policy

The controller responsible for personal data processed through cabsalzburg.com and our direct transfer services is:

Please use the subject “Data protection request” when contacting us about your rights.

Depending on how you use our services, we may process:

• Identity and contact data: name, email address, telephone number, billing details and passenger contact details.
• Journey and booking data: pickup, destination, date, time, passenger count, vehicle choice, flight or train number, luggage, child-seat requests, notes, booking reference and service history.
• Payment and transaction data: payment status, amount, currency, invoice information, refunds and transaction references. Full card details are handled by the payment provider and are not stored by Cab Salzburg.
• Communications: enquiries, email, contact-form messages, complaints, feedback and support communications.
• Technical data: IP address, browser and device type, operating system, timestamps, requested pages, referral information, security logs and cookie preferences.
• Special requests: information you provide about mobility, accessibility, assistance animals or requirements needed to perform the journey safely.

We usually receive this information directly from you, from the person booking for you or through our booking and payment providers.

Where processing relies on legitimate interests, we balance those interests against your rights and reasonable expectations. You may object as described below.

Name, contact details, journey information, passenger count and information needed to arrange payment are normally required for a quote or booking. Without required data, we may be unable to confirm or perform the service.

The external booking service is hosted at book.cabsalzburg.com. When you permit and load it, information entered there is processed to calculate a quote, create and manage the reservation, process payment and communicate journey details. Payment providers process card or wallet information under their own privacy and security terms.

If you provide another passenger's information, you must be entitled to do so and should make this policy available to them.

Accessibility or mobility requests can reveal health-related information. Provide only what is necessary to arrange a safe and suitable journey. Where special-category rules apply, voluntarily supplied information is processed on the basis of explicit consent or another basis permitted by Article 9 GDPR.

This information is shared only with personnel or drivers who need it for the transfer. Withdrawing consent before travel may mean the requested assistance cannot be provided.

We disclose only the information reasonably needed to:

• Cab Salzburg personnel, dispatchers and assigned drivers;
• booking, hosting, email, IT-support, communications and cloud-service providers;
• payment processors, banks, accountants, insurers and professional advisers;
• replacement or specialist transport providers needed for an agreed journey;
• public authorities, courts or law-enforcement bodies where legally required.

Providers acting for us are required to process data only for the agreed purpose and with appropriate confidentiality and security.

Some technology providers may process data outside the European Economic Area. Where a country has no EU adequacy decision, an appropriate transfer mechanism such as the European Commission's Standard Contractual Clauses and supplementary safeguards is used where required.

Contact us for more information about safeguards relevant to your data.

• Booking, contract and complaint records are kept as needed to provide the service and establish, exercise or defend legal claims.
• Invoices and accounting-relevant records are generally retained for seven years after the relevant calendar year, or longer where legally required.
• Unsuccessful enquiries are deleted or anonymised when no longer needed for follow-up or legitimate operations.
• Technical and security logs are kept for a limited period appropriate to security, troubleshooting and abuse prevention.
• The cookie-consent record stored on your device lasts up to 180 days unless deleted sooner.

Retention may be extended for an active dispute, investigation, legal hold or authority request. Data is deleted or anonymised when the reason ends.

Subject to applicable conditions and exceptions, you may request access, correction, erasure, restriction, eligible data portability or withdrawal of consent, and may object to processing based on legitimate interests.

We do not use personal data for solely automated decisions that produce legal or similarly significant effects. Automated calculations may display transfer prices or availability.

We use one essential first-party cookie to remember your privacy choice. The booking form and Google Maps load only after you permit functional services. Those providers may receive technical connection data and set their own cookies or similar storage.

This website does not currently load analytics or advertising cookies. See the Cookie Policy for the current inventory and consent controls.

Links to third-party websites connect only when you select them. The destination website's privacy policy then applies.

We use proportionate technical and organisational safeguards designed to prevent unauthorised access, loss, alteration or disclosure. Access is limited to people who need the information for their work. No online transmission or storage method can be guaranteed completely secure.

The website is intended for adults arranging transport. A parent, guardian or responsible adult should make bookings involving minors.

Send requests to [email protected]. We may request information needed to confirm your identity and protect your data. We normally respond within one month, subject to GDPR-permitted extensions.

You may also complain to the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, Austria, at [email protected].

We may update this policy when services, providers or legal obligations change. The revised version will appear here with a new “Last updated” date.