CITY-EGER TAXI SZEMÉLYSZÁLLÍTÓK EGYESÜLETE – hereinafter Taxi Company - fulfils its prior information obligation on the processing of personal data of data subjects pursuant to REGULATION 2016/679 OF THE EUROPEAN PARLIAMENT AND EUROPEAN COUNCIL - hereinafter GDPR - by publishing this Privacy Policy. Each piece of information in accordance with the relevant Articles of this Policy shall be made available to data subjects in concise, transparent, comprehensible, and easily accessible form, in a clear and comprehensible manner.
Our taxi company is committed to the protection of the personal data of its customers, partners, and employees, and considers it extremely important to respect the right to informational self-determination of the natural persons involved in data processing. In this spirit, it treats personal data confidentially and ensures security of this data through technical and organizational measures.
As data controller, we acknowledge that the content of this legal notice is binding on us, and we undertake to ensure that all data processing and data processing related to its activities comply with the requirements set out in this brief.
The privacy policy arising in connection with activities related to personal data processing are constantly available on the company’s website, online service interfaces, smart phone taxi and ordering applications and all other online interfaces we use (e. g. Facebook).
At the same time, we reserve the right to change the content of this privacy policy as necessary, but in accordance with the applicable legislation. We will notify our customers and visitors of our online content as necessary.
If you would like more information about this brief, please reach out to us via e-mail on the address below, and we will send you a written answer.
By reading this Privacy Policy, by interacting with users online and in the APIs, or by consenting in any other verifiable manner, you acknowledge and agree to this Privacy Policy.
Our company performs transport organization based on taxi transportation. Contact with customers is handled by our dispatcher service, which is endowed with independent competence, under the trademark of our company, in such a way that it forwards passenger transport claims from passengers to taxi transportation companies with a contractual relationship with our company.
The operation of our company, the transport organization activity, the system of rules for the use and performance of the taxi service, and remuneration are included in the General Terms and Conditions (GTC) document.
Important information of our Company
Name : CITY-EGER TAXI SZEMÉLYSZÁLLÍTÓK EGYESÜLETE
Registered Office : Petőfi Sándor street 19. Eger 3300
TAX Number : 18582217-1-10
e-mail : citytaxieger@gmail.com
Person responsible for data protection tasks
Name : Csaba Molnár
Address : Petőfi Sándor street 19. Eger 3300
e-mail : citytaxieger@gmail.com
Phone Number : +36 36 555 555
The purpose of this brief is to set out the principles of data protection, data processing, data management and data transmission applied by the taxi company, which the company, as a data controller, recognizes as compulsory for itself
It also aims to provide data subjects with adequate information on the data managed or processed by the taxi company, their source, the purpose, legal basis, duration of data processing, the external data controllers involved in the data processing, as well as the names, addresses and data processing activities of the data processors and, in the case of transmission of personal data of the data subject, the legal basis and the recipient of the transfer.
This brief is valid until revoked
In accordance with common Internet practice, our website also uses cookies to optimize performance and help users.
An HTTP-cookie is a packet of information that a server sends to a web browser, and then the browser sends it back to the server each time a request is made to the server. Cookies are created by the web server itself using a browser on the user’s computer, where they are stored in a separate library. So, a cookie is a small file that is placed on your computer when you visit a website
A cookie can carry content of any information specified by the server for the purpose of introducing user status into the relation between the browser and the server. Lacking cookies, retrieving each web page would be an isolated event, so for example, if a user logs in to a username – and password – protected page and views content and then navigates to another subpage, they would have to request the username/password pair again
The purpose of cookies is therefore to facilitate the use of websites and to store information about the user’s session, but also to collect information related to the use of the website
Our taxi company uses cookies on its website for two purposes only, which are suitable for identifying users. We do not use marketing cookies, so we do not burden you with unwanted advertisements when you browse the pages.
These give us the opportunity to remember your choice of functional language and other usage choices on our website
We use Google Analytics cookies to collect information about how our visitors use our website. These cookies do not personally identify you, they only collect information about which page a visitor viewed, which part of the website they clicked on, how many pages they visited, and how long each page was viewed
As written above, the cookies used on our website do not store personally identifiable information, the acceptance or authorization of the use of cookies is not obligatory, however, you will not suffer any damage to the functionality of our website if you reject the use of cookies. Cookies can be usually managed in the Tools/Settings menu of browsers under ‘Privacy Settings’ under the name of ‘cookie(s)’
In order to perform the transport organization and transportation service, the exercise of the rights arising from the service contract (GTC) and the business contract concluded with the taxi transportation companies, the fulfilment of the obligations and the passenger transport service
Fulfillment of contractual obligations, consent of the data subject, legitimate interest of the data controller, legal obligation, as follows
Taxi Decree No. 31/2013 of the Budapest City Council provides transport data directly related to the organization of transport and the use of service, provided by the natural person using the passenger transport service, either compulsory or as a result of their voluntary activity. Respectively, according to the Government Decree 176/2015. (VII. 07.) on the provision of passenger transport by car for a fee, our company is obliged to keep it for a period of three months
For quality assurance reasons, in order to serve passengers faster, better and more up-to-date, data directly related to the transport organization will be kept beyond the mandatory data retention period for one year as active data or one year as archive data unless the data subject requests deletion
Data not directly related to the organization of the transport will be kept for the period prescribed by the relevant legislation or regulated by the contracts. The exact duration of the different data processing operations is recorded in Chapter 9 ‘Scope of Personal Data Processed’.
Our company maintains a dispatcher service authorized by law in accordance with Government Decree 176/2015. (VII. 07.) on the transportation of passengers by road for a fee in order to increase the quality of the transport organization service. Pursuant to Section 16 (3) of the same Decree, for the purposes of quality assurance and the investigation of possible complaints, audio recordings shall be made of calls received to the central telephone number of the dispatching service. The caller is informed of the fact of the voice recording by the automatic information text of the voice recording system, failing which the telephone dispatcher providing the service will inform them.
The purpose of the data processing is to comply with the relevant legislation and for quality assurance purposes, its legal basis is in addition to the legislation referred to above, to inform the caller and to verbally accept the fact of the voice recording
Quality assurance and complaint handling
The duration of data processing, i.e., the storage of audio materials, is 90 days. Audio beyond 90 days will be irretrievably deleted
During the taxi transport organization activity, our dispatcher service receives transport requests from passengers and forwards them in an organized, automatic or manual form to taxis, which are contracted social or individual contractors using the image elements of the taxi company.
In the process of data management, the dispatcher service and mobile application interfaces suitable for transport orders request data from individuals who require transport in order to be able to perform the service they have requested
Transportation requests will arrive at the company as follows
Data from these individuals is passed on to contractors with our company to complete transportation.
The method of transmission is:
The mandatory period of storage and retention of data is determined on the basis of the following legal acts in a minimum period of 100 days
In the absence of a request from users to delete the data, the data related to the transport organization will be archived and deleted after 1 + 1 year
When boarding a taxi in contract with our company directly – by stopping at a taxi station or other place, or by waving a taxi with a vacancy sign – personal data processing is usually not carried out, or only in a case if the passenger
Exercise of rights, obligations, performance of the passenger transport service arising from the service, cheque or discount card usage contract concluded with partner companies or individuals
Exercise of rights arising from service contracts or GTC, obligations, performance of the passenger transport service, legitimate interest of the data controller and the consent of the data subject.
Our company operates a dispatcher service for transport organization, which receives transport requests from passengers and forwards them to taxis in an organized, automatic or manual form
One of the most common ways of receiving transport requests today is for passengers to call the taxi company’s central telephone number and provide information about their travel needs to the dispatcher service. The dispatcher service records the data related to the transport organization in the ‘HolaTaxi’ system
Recording, transmitting and storing data relating to the organization of transport for the purpose of providing the service and complying with legal obligations
Our taxi company uses the ‘HolaTaxi’ system made and provided by Mobile LBS Kft. for the IT service and support of the transportation organization activity. This includes the “CityTaxi Eger” transportation ordering application for the most common mobile platforms (Android and iOS).
The application can be downloaded free of charge from the competent application stores, however, for its actual use (ordering a taxi) a pre-registration is needed. During the registration, the passenger must record their name, phone number and e-mail address on the basis of the terms and conditions included in the GTC, and actively accept (by reading, and by user interaction) our General Terms and Conditions and this Privacy Policy. By accepting these, the passenger consents to the processing of the data listed below. During the actual taxi order, the passenger agrees to handle additional data.
During Registration
At the time of Ordering a Taxi and Until the End of the Ride
When opening the smart phone application, the passenger is informed that the application collects location data from their device in order for
The passenger will receive the same information when the actual order is placed, or a request will be made as to whether or not the passenger consents to the communication of their details. The passenger may grant or refuse the permit at their own discretion or choice and is entitled to use the service regardless of their decision. By denying the location data service, only the application features based on it would not be accessible
Recording, transmitting and storing data relating to the organization of transport for the purpose of providing the service and complying with legal obligations
The actual passenger transport is performed by taxi contractors in a contractual relation with our taxi company.
During the transport organization activity, our dispatcher service receives the transport requests from the passengers and forwards them to the passenger taxi operators in an organized, automatic or manual form
Taxi contractors are equipped with Android mobile communication devices, on which the company runs the application of the LBS City Taxi Eger, which is systematized at the company to support the transport organization, during the time spent in the shift.
This smart phone application, when opened
Regarding the Contract with Taxi Contractors
Regarding the Organization of Transport and Performing Rides
When concluding a contract with a taxi company, the taxi driver accepts, among other obligations included in the contract, that they must use the LBS City Taxi Eger smart phone application during the validity of the contract, including the entire period of their shift. Together with the contract, they accept the data processing information of the taxi company, in which the purpose and legal basis of the data processing and the scope of the data registered about them are recorded
In addition, when opening the application, the user will be informed that the application collects the device’s location data both in the foreground and in the background, in order to
The taxi driver may grant or refuse the permit at their own discretion and choice, however, due to their obligations under the contract, they may not participate in the transportation of passengers in the absence of the permit
In order to organize the transport efficiently, to update the position and occupancy of the taxis at all times, to transmit the data related to the transport organization to the taxi drivers providing the service in order to perform the service and to comply with the legal obligations.
Our company uses additional data controllers and data processors in order to provide the services and to facilitate our own data management activities, as well as in order to fulfil the contract concluded with the party involved in the data management or the legal regulations
The reason for this is that we can only ensure some of our services and the IT processes that support it, the security of operation, by using content, IT solutions or even the infrastructure provided by external service providers
When using external data controllers and processors, we aim to ensure that only data controllers and data processors who provide contractual guarantees to comply with the requirements of data processing under nation and Member State law and to implement appropriate technical and organizational measures to protect the rights of data subjects participate
Based on the above, taxi operators performing taxi passenger transport are also considered external data controllers and processors
By accepting this data processing information, the natural person also accepts that the transmission of their data is necessary for the use of the given service, so if they do not agree to the transmission of their data, we cannot provide the service concerned
We use the ‘HolaTaxi’ system developed by Mobile LBS Kft and providing it as a monthly fee service for the IT support of the transport organization activity and the provision of services.
Operation of ‘HolaTaxi’ automated transport management system and implementation of the necessary improvements, as well as provision of the IT infrastructure serving the background.
We use Google’s e-mail system to communicate with customers in writing, and the document management system it provides for office applications
Providing a Gmail mail account and related services
Our company implements the following necessary measures for the implementation of data security with regard to its IT records
Our company takes the necessary measures to protect paper records, especially with regard to physical security and fire protection. These measures may be published in separate regulations
Our company ensures the knowledge, enforcement and redress of the rights related to personal data as follows. Requests for access to personal data and the enforcement of data subjects’ rights described below can be initiated by the data subject in the following ways at the contact details provided in Chapter 2
When submitting the application, whatever its form, you must prove that you are entitled to exercise the rights of the data subject in their own right or in the capacity of their legal representative. In connection with the submitted appeals, we undertake to inform the data subject without delay, within a maximum of 30 days of receipt, of the action taken on their request. The 30-day administrative period may be extended by two months if necessary and justified. If, on the basis of your request, we do not take action within the given time limit, you will be informed as soon as possible, but not later than 30 days, of the reasons for not taking action. If you do not agree with out redress following your application, you may file a complaint with the Hungarian National Authority for Data Protection and Freedom of Information, and in the event of unlawful data processing, you may appeal, to the court of your location of residence or stay
Hungarian National Authority for Data Protection and Freedom of Information
22/C Szilágyi Erzsébet Alley Budapest 1125
Mailing Address: P. O. B. 5 Budapest 1530
Phone Number: +36 (1) 391 1400
E-mail Address: ugyfelszolgalat@naih.hu
The data subject has the right to withdraw their prior consent to the processing at any time, but this cannot be retroactive, i.e., it does not affect the lawfulness of the data processing carried out on the basis of the consent before the withdrawal of consent
At the written request of the data subject, we provide information on the data we manage or process, their source, the purpose, legal basis, duration of the data processing, the name, address (registered office) of the data controller and/or data processor and the activities related to data processing, as well as the recipients who receive or has received the data and for what purpose. We will provide this information in writing within 30 days of the request.
The right of the natural person concerned, the request for the correction of their personal data and its fulfilment by us. Our company is obliged to correct personal data that does not correspond to reality.
Personal data we process will be deleted if:
In addition to the above, the deletion of the data is not precluded by any law or other legal act.
Please note that the data subject’s rights to information, rectification and erasure may be restricted by law by the Hungarian State
Our company is obliged to take action within 30 days in connection with the modification or deletion of the data. We will provide information in writing within the same 30 days. If we are unable to comply with the data subject’s request for rectification or cancelation for the reasons listed above, we will also inform the data subject in writing within 30 days.
The data subject has the right to restrict the processing of data at their request if one of the following is met:
The data subject shall have the right to receive personal data concerning them in a clearly interpretable, widely used format readable by a computer program, and shall have the right to transfer such data to another controller without restriction and, if technically feasible, request the direct transfer of personal data between data controllers
The data subject has the right to object to the processing of their personal data at any time if the processing of personal data is for the direct acquisition of business. If the data subject objects to the processing of personal data for the purpose of direct business acquisition, the personal data may no longer be processed for this purpose