Privacy policy

1. Who is responsible

The controller for the personal data on this website is:

Taxi Roman, Luzern
Phone +41 76 228 89 55, e-mail info@taxi-roman.ch

For any privacy question, reach us at those details.

2. What data we handle

Booking: name, phone number, pick-up and destination address, preferred time, number of passengers, vehicle preference and your note.

Your location: only if you tap “My location” in the form or pick a suggested address. We then store the coordinates of the pick-up and destination so we can estimate the price and navigate to you. When you send the booking, your browser also asks whether we may determine your location; we store it together with the booking so the driver knows it comes from a person who is really there. You may decline – the booking is sent either way. For the booking the location is read once – your device is not tracked in the process. On the tracking page we additionally see exactly where you are waiting, so the driver can find you. This starts either when you tap “Share my location” or on its own if you already allowed location when ordering – the page says so in both cases, and the same button stops it at any time. It runs only while that page is open and ends as soon as you get in.

The vehicle's location: while the driver is on the way to you, their device sends its position so you can see the car on the map. Only the latest position is stored, never a history.

Technical data: like any website, our hosting provider logs the IP address, the time and the page requested. When you send a booking we additionally store a non-readable fingerprint of your IP address – it serves only to stop anyone flooding the form, the address itself cannot be recovered from it, and it is deleted after 24 hours.

Account (optional): if you create one, we keep your e-mail address, your encrypted password and your name and phone if you filled them in. It serves one purpose: so you can see your rides from another phone and need not type the details every time. You can order without an account – then we keep none of this.

3. Why, and on what basis

We need the booking data to agree and carry out the ride – without it we can neither find you nor call you.

Sharing your location is voluntary: without your permission in the browser we receive no location, and without it the sharing on the tracking page does not start either. You can withdraw the permission in your browser settings at any time and simply type the address instead.

4. How long we keep it

Vehicle position and the location you share while waiting: deleted as soon as you get in or the ride ends.

Coordinates of pick-up and destination: 7 days.

The booking (name, phone, route, note): 90 days.

The tracking link works for about 30 minutes and stops as soon as you get in.

Deletion runs automatically every night, not by hand. Invoices and receipts we issue outside this website are subject to the statutory ten-year retention period.

The account lasts until you ask us to delete it. It shows only rides that have not yet been deleted under the periods above, and the “Forget history” button unlinks them from the account at once.

5. Who else sees the data

We do not sell data and do not pass it on for advertising. To run the website we use these services:

Supabase – database of bookings, servers located in EÚ.
MapTiler – map and address search.
Photon (Komoot) – search for places such as stations or airports. The text you type is sent to both.
Telegram – notifying the driver about a new booking.

These providers process the data on our behalf. Data may be transferred abroad, in particular to the EU and the USA.

6. Cookies

This website uses no advertising or analytics cookies and does not track you across other sites.

The only thing kept in your browser is your language choice, so you do not have to pick it every time. It never leaves your device.

After you send an order, your browser also remembers the link to its tracking page for 24 hours, so you can get back to the ride status. Closing the bar with the cross deletes the link; this too stays on your device only.

While you are signed in, your browser keeps a sign-in key – that is what keeps you signed in after you close the page. Signing out deletes it.

7. Your rights

You have the right to access, correct and delete your data, and to object to its processing.

An e-mail to info@taxi-roman.ch or a phone call is enough – no forms needed. You may also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC).

8. Security

All traffic is encrypted (HTTPS). Bookings are visible only to the signed-in driver.

The tracking link contains a random, unguessable key and shows neither your phone number nor your note – only the route, the status and the vehicle's position.

9. Changes

We may adapt this policy as the website changes. The version published here is the one that applies.