Privacy Policy

Controller

The controller for data processing on this website is:

Etwas Anders by Franz Stelzhamerhof e.U.
Kirchenplatz 4, 4920 Schildorn, Austria
Phone: +43 7754 8009
Email: [email protected]
Company register FN 412356g · VAT ATU68513316

One company, two brands. RIED.TAXI is the transfer brand of Etwas Anders by Franz Stelzhamerhof e.U. The same company runs the guest house “Etwas Anders” at etwa.at. The phone and WhatsApp number +43 7754 8009 is used by both. The controller is the same company in either case — your data is not passed to a different company as a result. The privacy policy for the guest house is at etwa.at/impressum.html.

Hosting and server logs

This website runs on a server we manage ourselves and is delivered through the Cloudflare content delivery network (Cloudflare, Inc., USA). Technically necessary log data arises on each request: IP address, timestamp, requested resource, referrer, status code and user agent.

Purpose is operation, delivery and security of the site. The legal basis is our legitimate interest in a secure and functioning service (Art. 6(1)(f) GDPR). This happens regardless of consent because it is required to serve the page at all.

Enquiries: form, phone, email, WhatsApp

Enquiry form. When you submit the form, the details you entered (including name, phone, email, pickup and destination address, date, time, flight number, number of passengers and your notes) are transmitted to our own server and stored there. We assign an internal reference (format RT-YYYYMMDD-XXXX) so we can track your enquiry.

Purpose is handling your enquiry and performing the transfer; the legal basis is pre-contractual measures and performance of the contract (Art. 6(1)(b) GDPR). Data is kept for up to 3 years, without prejudice to statutory retention obligations.

WhatsApp. Using the WhatsApp button takes you off this website. WhatsApp is a service of WhatsApp Ireland Limited (Meta). Your message, phone number and traffic data are processed by Meta under their own terms, possibly including transfer to third countries. We have no control over this. If you would rather it did not, please use the phone, email or the form.

Message history. Messages sent to and from our business number are additionally stored on our own server, so that enquiries and arrangements remain traceable. They are deleted automatically after 180 days at the latest. Legal basis: Art. 6(1)(b) and (f) GDPR.

RiTa – our AI assistant (website chat and WhatsApp)

What she is. Messages in the chat window on this website and to our WhatsApp number are answered first by RiTa, an AI assistant. She quotes prices from our published price list, checks free days and takes down the details of the ride. Every ride is confirmed by a human; RiTa makes no decision with legal effect for you (Art. 22 GDPR).

What is processed. The content of the conversation; in the website chat also a random session ID (in your browser's sessionStorage, it ends with the tab, no cookie), the page you were on, a shortened IP address (abuse protection) and – if you came via an ad – the six-character click code. In the website chat RiTa does not ask for your name, phone number or e-mail; you only enter those if you reserve without WhatsApp.

AI provider. To write the replies, the conversation is sent to the Claude language model by Anthropic. Anthropic acts as our processor (Art. 28 GDPR) and does not use the content to train its models. Processing in the USA is possible; it is covered by the EU Standard Contractual Clauses. Please do not put sensitive data, such as health information, into the chat.

Continue on WhatsApp. Tapping “Continue on WhatsApp” opens WhatsApp with a pre-filled message containing the ride details and a web code. Only when you send that message yourself do we link the website chat to the WhatsApp conversation. The WhatsApp section above applies.

Booking information. In the website chat RiTa only gives information about an existing booking if the booking number and the last four digits of the phone number on file match. Changes and cancellations go via WhatsApp or phone.

Purpose, legal basis, retention. Answering your enquiry and preparing the ride (Art. 6(1)(b) GDPR); abuse protection and improving the assistant (Art. 6(1)(f) GDPR). Website chats without a booking are deleted after 90 days, WhatsApp histories after 180 days at the latest; if a conversation leads to a booking, the retention for bookings applies.

Online booking and availability calendar

What is processed. When you request a booking via /booking we process the details you enter: name, email address, telephone number, optionally a company name, pick-up and destination address, travel date and requested pick-up time, number of passengers, optionally a flight number, a return date, and your note. We issue a booking reference in the format RT-YYMMDD-XXXX.

Purpose and legal basis. The data is used to check availability, to prepare an offer and to carry out the transfer. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures and performance of a contract). A booking request is not yet a confirmation; we confirm separately.

Price. The price valid at the time of your request is stored with the record, so that later price changes do not alter your booking.

Availability calendar. The calendar shows only whether a day is available or unavailable. No data belonging to other customers is ever displayed — no names, addresses, times, prices or booking references. Before you submit the first step, only a check for a single date chosen by you is possible.

Booking session. After the first step we set a strictly necessary cookie (rt_bs, 45 minutes, HttpOnly). It contains only a random identifier and no personal data.

Retention. Booking records are kept for up to 3 years; tax and commercial retention obligations remain unaffected. Cancelled or abandoned requests are removed by the regular deletion routine.

How you found us. The booking form includes the optional question "How did you find us?", with a list to choose from and an optional free-text box. The answer is stored with the booking record. It is voluntary — the booking works exactly the same without it.

Where the visit came from. We also store the landing page you arrived on, the campaign parameters in the address bar (utm_source, utm_medium, utm_campaign) and, where present, the hostname of the referring site — for example google.com. The full referring URL is not stored: it can contain search terms or session identifiers that we neither need nor want. The purpose is to judge which channels work; the legal basis is Art. 6(1)(f) GDPR (legitimate interest in the effectiveness of our own advertising).

Not shared. None of this leaves our infrastructure. Neither the answer to the question nor the free text, your name, your telephone number or your email address is transmitted to Google, Meta, OpenAI or any other service.

Reporting back to the ad network. There is one exception, and it is narrow: if you came to us from an ad (Google Ads, or an ad shown in ChatGPT by OpenAI), the ad platform appends a click identifier to the link (gclid or oppref). If that click leads to an enquiry or a confirmed transfer, our server reports exactly two things back to that platform: the click identifier and the fare. No names, addresses, telephone numbers, email addresses, travel details or hashes of them. No script from the platform is loaded on ried.taxi for this. The purpose is to learn which ads lead to journeys and to keep only those running; the legal basis is Art. 6(1)(f) GDPR. The identifier is used for at most 60 days after the click.

Abuse protection. To defend against automated submissions we store a truncated IP address (last octet removed) and a short checksum of the browser identification with each record. Neither allows you to be identified.

Email delivery (processor)

For the acknowledgement email about your booking request and for our internal notification we use Brevo (Brevo SAS, France) as a processor under Art. 28 GDPR. Only the details required for delivery are transmitted: your email address, your name and the key facts of your request (booking reference, date, pick-up location, price).

Advertising and attribution data — click identifiers, campaigns, lead identifiers — is not transmitted. Processing takes place on servers within the EU. The legal basis is Art. 6(1)(b) GDPR.

Calendar and contacts (processor: Apple)

Why. So that your journey happens on the right day at the right time, we keep it in an electronic calendar. That calendar is hosted by Apple (Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland) and is synchronised to the driver’s device via iCloud.

What is transmitted. For each confirmed journey: booking reference, date and pick-up time, pick-up and destination address, your name, your telephone number, the number of passengers and — where given — the flight number and your note. We also store your name and telephone number as a contact, so that a call from you on the day of travel can be recognised.

Not transmitted: advertising and attribution data (click identifiers, campaigns, lead identifiers, referral origin) and the truncated IP address.

Legal basis. Art. 6(1)(b) GDPR (performance of a contract) — without scheduling, the journey cannot be carried out. Apple acts as a processor under Art. 28 GDPR. Transfer to the USA cannot be excluded; Apple relies on Standard Contractual Clauses and the EU-US Data Privacy Framework.

Retention. The booking retention periods stated above apply. Contact entries are kept for the duration of the business relationship so that we recognise you on a repeat booking; we delete them on request at any time.

WhatsApp notifications (optional)

Only with your consent. In the booking form you can tick a box to receive messages about your trip on WhatsApp. The box is not ticked by default. Without it we send you no WhatsApp message at all — the booking works fully without it.

Which messages. Acknowledgement of your request, confirmation of the booking, a reminder two days before the trip, and a short follow-up afterwards asking whether everything was alright. Nothing else. We do not send advertising for other services.

What is transmitted. Your telephone number and the details contained in the message itself: first name, booking reference, date, pick-up time, pick-up address and price. Not transmitted: your email address, your note, and all advertising and attribution data (click identifiers, campaigns, lead identifiers).

Recipients. Delivery runs technically through the WhatsApp Business Platform operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. Meta processes your telephone number and the message content as its own controller under the WhatsApp terms. A transfer to the USA cannot be excluded; Meta relies on the EU-US Data Privacy Framework and standard contractual clauses.

Legal basis. Art. 6(1)(a) GDPR (consent). You may withdraw it at any time — informally by email, by telephone, or by writing "STOP" in the WhatsApp chat. Withdrawal takes effect for the future; the lawfulness of processing carried out beforehand is unaffected. Your booking is not affected either.

If you would rather not use WhatsApp. Simply leave the box unticked. You receive all of the messages listed above by email regardless.

Consent and Google Consent Mode

Analytics and marketing services load only after you have explicitly consented in the cookie notice. Before consent, every consent-dependent signal is set to denied and no analytics or advertising data is sent to Google. We use Google Consent Mode v2 with the signals analytics_storage, ad_storage, ad_user_data and ad_personalization.

Your choice is stored locally in your browser and can be changed or withdrawn at any time via Cookie settings in the footer. Withdrawing is as easy as giving consent and takes effect for the future. Legal basis: your consent (Art. 6(1)(a) GDPR and § 165(3) Austrian TKG 2021).

Google Analytics 4

After you consent to the Analytics category we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Processed data includes pages viewed, time and duration of use, approximate location derived from the IP address, device and browser, and the source you arrived from. Transfer to Google servers in third countries including the USA is possible; Google relies on the EU-US Data Privacy Framework and standard contractual clauses.

Google Ads and conversion measurement

After you consent to the Marketing category we measure with Google Ads whether an ad led to an enquiry.

If you arrive from a Google ad, the landing page address carries a click identifier (gclid, gbraid or wbraid). If you then send an enquiry, we store that identifier with the record so advertising can be evaluated. Google may additionally set a _gcl_au cookie.

Offline conversions. When we confirm a booking we send Google Ads the click identifier stored with your enquiry, the time of confirmation, our booking reference and the order value. This lets an ad be matched to a trip that actually took place. It happens only if you consented to the Marketing category. The legal basis is your consent (Art. 6(1)(a) GDPR).

Not transmitted: your name, email address, telephone number, flight number, pick-up and destination address, or your note. We do not use Enhanced Conversions — no email addresses or phone numbers are sent to Google, not even hashed.

No other third parties

This website loads no external fonts, maps, videos or other embedded services. Every asset is served from our own server.

The exceptions are the email delivery via Brevo described above, the scheduling via Apple, and — if you consented — the WhatsApp delivery via Meta. All three happen only after you submit a booking request and embed nothing in this website: loading these pages opens no connection to Brevo, Apple or Meta.

Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). You may withdraw consent at any time with effect for the future.

Please contact [email protected]. You also have the right to lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, [email protected].

Bookings via ChatGPT

You can also book RIED.TAXI through the RIED.TAXI app in ChatGPT (OpenAI). ChatGPT then sends the details you enter there – name, phone number, optional email, pickup and destination address, date and time, passengers, luggage, flight number, notes – to our own server. We use them only to check price and availability and to carry out your ride; legal basis is Art. 6(1)(b) GDPR (contract). Storage and deletion follow the same rules as bookings made on this website. For looking up, changing or cancelling you receive an access code, of which we store only a hash.

ChatGPT is a service by OpenAI that you use yourself; OpenAI processes your input under its own terms and privacy policy. We do not pass any of this data to advertising platforms.

Version: 2026-08-31