Last updated: 2026-03-19
1. Data controller
The data controller for your personal data is Krakow Ride, based in Krakow, Malopolskie, Poland.
Contact details:
2. Data we collect
We collect the following categories of personal data:
- Identity data: full name, email address, phone number
- Trip data: pickup and drop-off addresses, flight numbers, passenger count, vehicle preferences
- Payment data: processed directly by Stripe — we do not store full card numbers
- Technical data: IP address, browser type, operating system, cookie identifiers
- Communication data: contents of emails and contact form submissions
3. Legal basis for processing
We process personal data based on the following legal grounds under the GDPR:
- Contract performance (Art. 6(1)(b) GDPR) — processing necessary to fulfil your booking and provide chauffeur services
- Legitimate interest (Art. 6(1)(f) GDPR) — improving our services, website security, fraud prevention
- Consent (Art. 6(1)(a) GDPR) — analytics, marketing communications (you may withdraw consent at any time)
- Legal obligation (Art. 6(1)(c) GDPR) — retention of invoices and tax documentation
4. Purpose of processing
- Booking fulfilment and chauffeur service delivery
- Booking-related communication (confirmations, reminders, changes)
- Invoicing and accounting documentation
- Website analytics and performance improvement
- Marketing communications (only with your consent)
- Fraud prevention and website security
5. Data retention
- Booking data and invoices: 5 years from the end of the tax year (required by Polish tax law)
- Analytics data (Google Analytics): 26 months
- Cookies: per each cookie’s expiration period (details in our cookies policy)
- Email correspondence: 2 years from last contact, unless related to an active booking
6. Data sharing
We never sell your personal data. We share data only with the following categories of partners, to the extent necessary for service delivery:
- Stripe \u2014 payment processing (card data, transaction amount)
- Google Maps / Places \u2014 routing and address autocomplete
- Google Analytics \u2014 anonymous website traffic analytics (with your consent)
- Resend / SMTP \u2014 transactional email delivery (booking confirmations)
7. International data transfers
Some of our sub-processors (Stripe, Google) process data in the United States. These transfers are safeguarded by Standard Contractual Clauses (SCCs) approved by the European Commission or an adequacy decision under the EU–US Data Privacy Framework.
8. Your rights
Under the GDPR, you have the following rights:
- Right of access to your personal data
- Right to rectification of inaccurate data
- Right to erasure (“right to be forgotten”)
- Right to data portability
- Right to restriction of processing
- Right to object to processing
- Right to withdraw consent at any time
To exercise any of these rights, contact us at service@krakowride.com. We will respond within 30 days.
You also have the right to lodge a complaint with a supervisory authority \u2014 in Poland this is UODO (President of the Personal Data Protection Office), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.
9. Children’s data
Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from a child, we will promptly delete it.
10. Cookies
Our website uses cookies. For full details on the types, purposes, and how to manage them, please see our cookies policy.
11. Changes to this policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date. For material changes, we will notify you by email if we have your address on file.
12. Contact
For any questions about your personal data or this privacy policy, contact us: