Privacy policy

This document explains how Hifo Taxi (the „Controller") processes its customers' personal data under Regulation (EU) 2016/679 („GDPR") and Slovak Act No. 18/2018 on Personal Data Protection.

1. Controller

Hifo Taxi
Námestie SNP 2, 036 01 Martin, Slovakia
Company ID: [to be added]
Email: hifotaxi@gmail.com
Phone: +421 902 740 140

2. Personal data we process

• Identification data: first and last name.
• Contact data: phone number, email.
• Ride data: pick-up location, destination, date and time, number of passengers.
• Billing data: when invoices are issued — company address and IDs.
• Payment data: handled directly by the payment gateway; the Controller does not store card details.
• Technical data: when using the mobile app or website — IP address, device type, browser, access time.

3. Purposes and legal basis

4. Retention period

• Booking and ride data: for the duration of the relationship and 3 years thereafter for potential claims.
• Accounting and tax documents: 10 years, per Slovak tax and accounting law.
• Complaints: 4 years from resolution.
• Marketing data: until consent withdrawal, max. 5 years.
• Website data: typically 13 months (analytics cookies); technical cookies for the duration of the session.

5. Recipients of personal data

Your personal data may be shared with the following categories of recipients:

• Hifo Taxi drivers (only as needed for the ride).
• External accountant / accounting firm.
• Payment gateway provider (for card payments).
• Hosting and IT service providers (server, email, app).
• Public authorities in legally defined cases.

The Controller has data processing agreements in place with all processors as required by Art. 28 GDPR.

6. Transfer to third countries

Personal data is processed within the European Economic Area. Transfers to third countries do not take place, except where strictly necessary and secured by appropriate safeguards under the GDPR (e.g. Standard Contractual Clauses).

7. Your rights

As a data subject, you have the right to:

• Access your personal data (Art. 15 GDPR).
• Rectification of inaccurate or incomplete data (Art. 16).
• Erasure („right to be forgotten", Art. 17).
• Restriction of processing (Art. 18).
• Data portability in a structured, machine-readable format (Art. 20).
• Object to processing based on legitimate interest or for marketing purposes (Art. 21).
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with the supervisory authority – the Slovak Data Protection Office (Hraničná 12, 820 07 Bratislava, www.dataprotection.gov.sk).

You can exercise these rights in writing to the Controller's registered address or by email to hifotaxi@gmail.com. Requests will be handled without undue delay, no later than 30 days.

8. Cookies

Our website uses cookies — small text files stored in your browser.

• Strictly necessary cookies – required for basic site functionality. No consent needed.
• Functional cookies – remember your preferences (e.g. selected language).
• Analytics cookies – help us measure traffic and improve services. Used only with your consent.

You can delete or block cookies at any time in your browser settings. Some site features may not work correctly without them.

9. Data security

The Controller has implemented appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access (HTTPS-encrypted communication, access controls, regular backups, staff training).

10. Automated decision-making

No automated decision-making, including profiling under Art. 22 GDPR, takes place during the processing of personal data.

11. Changes to this document

This document may be updated periodically due to changes in legislation or services. The current version is always published at www.hifotaxi.sk with the date of the last update.

12. Contact

For any questions regarding personal data processing, contact us at hifotaxi@gmail.com or call +421 902 740 140.