Privacy Policy

1. Scope of Application

With this privacy policy, Platinum Shuttle Chauffeurservice, owner Kay Schaller (hereinafter referred to as "Platinum Shuttle"), informs you about how your personal data is handled. We take the protection of your personal data very seriously and safeguard your privacy during processing in accordance with applicable data protection regulations.

This privacy policy informs you as a visitor to the Platinum Shuttle websites, as a user or customer of the Platinum Shuttle online platform, the customer portal, a Platinum Shuttle app or other Platinum Shuttle services (collectively also "Platinum Shuttle Services") about which personal data is processed by Platinum Shuttle and for what purpose. The Platinum Shuttle Services are not directed at minors.

2. Name and Contact Details of the Data Controller

The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

For further information about Platinum Shuttle, please see our Imprint.

3. Contact for Data Protection Enquiries

For all questions concerning data protection and the exercise of your rights as a data subject, you can contact us at any time — confidentially by post at the above address or by email:

4. Data Security

Platinum Shuttle implements appropriate technical and organisational security measures, taking into account the state of the art, the costs of implementation and the nature, scope, circumstances and purposes of the processing, as well as the varying likelihood and severity of the risk, in order to ensure a level of protection appropriate to the risk for personal data. These measures are reviewed regularly and developed further.

The transmission of personal data between your device and Platinum Shuttle is encrypted (TLS encryption). You can recognise an encrypted connection by the lock symbol in the address bar of your browser.

5. Provision of the Websites, Hosting and Log Files

The Platinum Shuttle websites and the booking system are operated on servers managed by us in a data centre in Germany.

When using the Platinum Shuttle websites, data about your usage is automatically collected via your browser (hereinafter "browsing data"). This includes your IP address, status code, the Platinum Shuttle pages visited, date and time of the server request, browser type and version, referrer (previously visited page), files transferred and data volume.

This browsing data is processed to establish and maintain the technical connection, to ensure the stability and security of our systems, and to identify and resolve technical faults. It is not disclosed to third parties beyond the service providers described in this privacy policy (e.g. analytics only with your consent, see Section 7).

Your data is also used by Platinum Shuttle in anonymised form to:

• analyse the use of our websites and to design and improve our service according to demand,
• identify and resolve technical or process-related disruptions and problems,
• prevent unlawful use of our service (e.g. fraudulent bookings, cyber attacks).

Stored log files are deleted or anonymised as soon as they are no longer required. Platinum Shuttle retains log files beyond this period only insofar as you have consented or statutory retention obligations apply.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and stable provision of our websites).

6. Cookies and Consent Management

The Platinum Shuttle websites use cookies. Cookies are small text files that are stored on your device. We distinguish between cookies that are technically necessary and services that are only used with your consent.

Technically necessary cookies are used for:

• your identification and authentication (e.g. login status in the customer portal),
• storing user preferences and settings (e.g. language settings),
• storing your cookie consent decision,
• security-related functions.

When you first visit our website, a consent banner appears in which you can decide whether you additionally allow the categories "Analytics" (Section 7) and "External Media" (Section 8). No optional services are loaded without your consent. You can change or withdraw your decision at any time with effect for the future via the "Cookie Settings" link in the footer of the website.

You can also prevent the storage of cookies in your browser settings and delete existing cookies at any time. However, this may result in individual functions not being available or being available only to a limited extent.

Legal basis: For technically necessary cookies: Section 25(2) TDDDG and Art. 6(1)(f) GDPR (legitimate interest). For optional services: Section 25(1) TDDDG and Art. 6(1)(a) GDPR (consent).

7. Google Analytics 4

Only if you have given your consent via the cookie banner ("Analytics" category), we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies and similar technologies that enable an analysis of your use of the website. IP addresses are not stored by Google Analytics 4; they are truncated and used only for a rough geographic classification.

In the course of this processing, data may be transferred to servers of Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; in addition, standard contractual clauses (Art. 46 GDPR) have been concluded.

You can withdraw your consent at any time with effect for the future via the "Cookie Settings" link in the footer.

Legal basis: Art. 6(1)(a) GDPR and Section 25(1) TDDDG (consent).

8. Google Maps and Address Search

For route display in the booking process we use the map service Google Maps of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The interactive map is only loaded once you have given your consent via the cookie banner ("External Media" category); until then, a neutral placeholder is displayed. When the map is loaded, your IP address is transmitted to Google. In the logged-in customer portal, the map is an integral part of the booking function.

For the address suggestions in our booking and enquiry forms we use the Google Places service. Your address input is transmitted to Google via our servers to retrieve suitable suggestions; your IP address is not passed on to Google in this process.

Any transfer to Google LLC in the USA is safeguarded by the EU-US Data Privacy Framework and standard contractual clauses (Art. 46 GDPR).

Legal basis: For the embedded map: Art. 6(1)(a) GDPR and Section 25(1) TDDDG (consent). For address suggestions and the map in the customer portal: Art. 6(1)(b) GDPR (performance of contract and pre-contractual measures).

9. Data Processing for Bookings and Use of the Services

Platinum Shuttle processes the following personal data provided during a booking, an enquiry or the use of the customer portal ("Customer Data"):

• Personal master data: Salutation, title, first name, last name, company, address, postal code, city, country
• Contact data: Telephone number, mobile number, email address
• Journey-related data: Pick-up location, destination, intermediate stops, times, flight or train number, passenger names, notes for the chauffeur
• Customer history: Previous journeys, offers and orders
• Billing and payment data: Invoices, status, billing address, chosen payment method. Credit card data is never stored by Platinum Shuttle (see Section 10).

Customer Data is used to process your enquiries and bookings, to prepare and perform the transport contract, and for the associated communication. Bookings are possible without creating an account; for the customer portal, see Section 13.

If you provide a flight or train number, we retrieve status data for that flight or train (e.g. delays, changed arrival times) from specialised data providers in order to plan your journey reliably. Only the flight or train number is transmitted to these providers — no personal data.

Where journeys are carried out by chauffeurs or cooperation partners, they receive only the data necessary to perform the journey (in particular passenger name, times, pick-up and destination address, flight data). Should personal data be transferred to service providers in a third country in individual cases, this only takes place with appropriate safeguards (Art. 44 et seq. GDPR) and reduced to the necessary minimum.

Legal basis: Art. 6(1)(b) GDPR (performance of contract and pre-contractual measures). For voluntary information: Art. 6(1)(a) GDPR (consent) and Art. 6(1)(f) GDPR (legitimate interest).

10. Payment Processing and Accounting

10.1 Card Payments and Apple Pay

Bookings with Platinum Shuttle can be paid by credit card or, where available, Apple Pay. We use the certified payment provider Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland), whose systems comply with the applicable security standards (PCI-DSS). Payment data is collected and processed directly by Stripe.

Platinum Shuttle itself does not store credit card data at any time and has no access to the full card data held by the provider. Any transfer of data by Stripe to the USA is safeguarded by the EU-US Data Privacy Framework and standard contractual clauses (Art. 46 GDPR).

If you choose Apple Pay, Apple also processes the device, card and transaction information required to provide Apple Pay under its own responsibility. Your full card number is not disclosed to Platinum Shuttle. Further information is available in Apple's Apple Pay privacy notice.

Legal basis: Art. 6(1)(b) GDPR (performance of contract) and Art. 6(1)(f) GDPR (legitimate interest in secure payment processing).

10.2 Accounting and Invoicing

For invoicing, accounting and document management, we use Lexware Office (formerly lexoffice). The processor is Haufe Service Center GmbH, Munzinger Straße 9, 79111 Freiburg, Germany, with whom we have concluded a data processing agreement pursuant to Art. 28 GDPR.

In particular, customer master data, billing addresses, invoice and payment data, as well as the service details required for the respective accounting document, are processed.

Legal basis: Art. 6(1)(b) GDPR (performance of contract) and Art. 6(1)(c) GDPR (compliance with commercial and tax retention obligations).

11. Communication with Platinum Shuttle

If you contact Platinum Shuttle (e.g. by phone, via one of our forms or by email), the data you provide will be processed to handle your enquiry and to respond to your request.

For sending and receiving emails we use established email service providers as processors (currently Google and Mailgun). These providers process the communication data (sender, recipient, content) exclusively for the purpose of delivery on our behalf. Any transfer to third countries is safeguarded by appropriate guarantees (EU-US Data Privacy Framework, standard contractual clauses pursuant to Art. 46 GDPR).

Data from contact enquiries is also used — where possible in pseudonymised or anonymised form — to design and improve our service according to demand.

Legal basis: Art. 6(1)(b) GDPR (performance of contract and pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in efficient communication).

12. SMS Notifications

If you provide your mobile number in the booking or VIP request form, or if you use the customer portal login, we send you transactional SMS messages that relate directly to your request or your account — in particular receipt and booking confirmations, status updates for your journey, and one-time codes for signing in to the customer portal.

These SMS are sent on the basis of your consent, which you give by submitting the relevant form or by using the SMS login. They are service-related messages only; we do not send advertising via this channel.

You may object to this use at any time with effect for the future. To do so, reply „STOP“ to any SMS you receive, or contact us using the contact details above; we will then stop sending SMS to your number without undue delay. Security-related login codes may be exempt for as long as you actively use the SMS login.

For delivery we use the service provider Twilio Inc. as a data processor. Your mobile number and the message content are processed for the purpose of delivery; any transfer to third countries is safeguarded by appropriate guarantees (EU-US Data Privacy Framework, standard contractual clauses pursuant to Art. 46 GDPR).

Legal basis: Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR (performance of contract, e.g. status notifications for a booking).

13. Customer Portal and Live Tracking

In the customer portal you can view your bookings, manage saved addresses and place new bookings. You sign in using a one-time code sent to you; a session cookie stores your login status (see Section 6).

For certain journeys we provide a personal, token-protected tracking link through which you can follow the position of your vehicle shortly before and during the journey. The vehicle position is processed solely for the performance and coordination of the journey and is not used to create movement profiles beyond the journey.

Legal basis: Art. 6(1)(b) GDPR (performance of contract).

14. Passenger and Driver Apps

Our passenger app provides mobile access to your customer account, bookings, journey details and live tracking. You sign in with your email address and a one-time code. During login, the device name and operating system version are transmitted to us for session management and security. Access and refresh tokens are stored in the protected iOS Keychain.

To provide an offline fallback, the app stores the most recently retrieved journey data locally on your device for up to 24 hours. This cache is deleted when you sign out. The passenger app does not access the precise location of your device.

For journey-related status updates and Live Activities, the app uses the Apple Push Notification service (APNs). For this purpose, technical device and activity tokens linked to your customer account are processed by Platinum Shuttle and Apple. Visible push notifications are only displayed if you have allowed them in iOS. The passenger app does not contain advertising or analytics SDKs.

A separate driver app is provided for employees and cooperation partners. For the purpose of fulfilling orders, this app transmits, among other things, the guest's name, the date and time of the transfer, flight or train data, and pick-up and destination addresses. After completion of the journey, this data is no longer accessible in the driver app; storage in our order system is governed by Section 17.

Legal basis: Art. 6(1)(b) GDPR (performance of contract) and Art. 6(1)(f) GDPR (secure session management and reliable provision of app functions); for visible push notifications: Art. 6(1)(a) GDPR (consent).

15. Social Media

Platinum Shuttle maintains profiles on social networks, including Instagram and Facebook (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland) and LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland). If you contact us via these platforms, the respective provider processes your data under its own responsibility; detailed information can be found in the provider's privacy policy.

We process messages you send us via these channels to respond to your enquiry.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in customer communication).

16. Data Subject Rights

Where personal data concerning you is processed by Platinum Shuttle, you have the following rights as a data subject (Art. 4 No. 1 GDPR):

16.1 Right of Access (Art. 15 GDPR)

You have the right to obtain confirmation as to whether personal data concerning you is being processed and to obtain information about such data.

16.2 Right to Rectification (Art. 16 GDPR)

You have the right to demand the immediate rectification or completion of inaccurate personal data.

16.3 Right to Erasure (Art. 17 GDPR)

You have the right to demand the erasure of your personal data if the data is no longer necessary, you withdraw your consent, you object or the data has been unlawfully processed.

16.4 Right to Restriction of Processing (Art. 18 GDPR)

You have the right to demand the restriction of processing if the accuracy is disputed or the processing is unlawful.

16.5 Right to Object (Art. 21 GDPR)

Insofar as data processing is based on a legitimate interest or concerns direct marketing, you have the right to object to the processing at any time.

16.6 Right to Data Portability (Art. 20 GDPR)

You have the right to receive the data concerning you in a structured, commonly used and machine-readable format and to transmit it to another controller.

16.7 Right to Withdraw Consent (Art. 7(3) GDPR)

You may withdraw any consent you have given at any time with effect for the future — for cookie-based services via the "Cookie Settings" link in the footer, otherwise using the contact details in Section 3.

17. Data Deletion and Retention Period

We delete your personal data as soon as the legal basis for its processing ceases to apply. In some cases, several legal bases may exist in parallel, or a new legal basis may arise upon the expiry of another. In particular, statutory retention obligations under commercial and tax law (especially six, eight or ten years) may require us to retain booking and invoice data beyond the completion of a journey.

18. Amendment or Update of this Privacy Policy

Platinum Shuttle may update and amend this privacy policy at any time, for example when services or legal requirements change. The current version is always available on this page.

19. Right to Complain to the Competent Supervisory Authority

Without prejudice to any other legal remedy, you have the right to lodge a complaint with the supervisory authority responsible for Platinum Shuttle:

Last updated: July 2026