Privacy notice

1. Introduction

DUNA -TELE 4 TAXI Bt. - hereinafter Taxitársaság - through the publication of this data protection information, fulfills the prior information obligation of the data subjects regarding the processing of personal data, as prescribed by REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL - hereinafter GDPR -, according to which each information must be made available to those affected by data management in a concise, transparent, comprehensible and easily accessible form, clearly and comprehensibly worded.

In order to protect the personal data of our dedicated customers, partners and employees, our taxi company considers it of utmost importance to respect the right of information self-determination of natural persons involved in data management. In this spirit, it treats personal data confidentially and ensures the security of this data with technical and organizational measures

As a data controller, we recognize the content of this legal notice as binding on us, and we hereby undertake that all data management and data processing related to our activities meet the requirements set out in this information sheet and the applicable legislation.

The data protection guidelines arising in connection with activities involving personal data management are continuously available on the company's website, online service interfaces, mobile taxi and order applications and all other online interfaces we use (e.g.: Facebook, etc.).

At the same time, we reserve the right to change the content of this data management information as necessary, but in accordance with the laws in force at the time.

We will notify our customers and visitors of the online content of the changes to the extent necessary.
If you would like more information about this brochure, write to our e-mail address below, and we will send you our answer in writing in the same way.

By reading the data management information, user interaction on the online and application interfaces, and consenting in other verifiable ways, you acknowledge and accept the contents of the data management information.

2. Presentation and data of the taxi company

Our company provides transport organization activities based on passenger transport by taxi. Contact with customers is carried out by our independent dispatch service under the trademark of our company, in such a way that it relays the passenger transport requests from passengers to the taxi passenger transport companies that have a contractual relationship with our company.

The operation of our company, the transport organization activity, the rules for the use and performance of the passenger taxi service, and the remuneration are contained in the General Terms and Conditions (GTC) document.

More important data of our company

Name : DUNA-TELE 4 TAXI Freight Organizer and Transport Service Limited Company
Headquarters : 9021 Győr, Árpád út 51. b. intact.
Tax number : 22409706-2-08
Company no. number : 08-06-001436
e-mail : dunatele4@taxigyor.hu

The person responsible for data protection tasks

Name : Csilla Udvardi
Address : 9021 Győr, Árpád út 51 b. intact.
e-mail : dunatele4@taxigyor.hu
phone : +36 96 444-444

3. Purpose and scope of the data protection information

The purpose of this information sheet is to record the data protection, data management, data processing and data transfer principles applied by the taxi company, which the company, as a data controller, recognizes as binding on itself.

Its purpose is also that, on the basis of these, the data subjects can receive adequate information about the data managed and processed by the taxi company, their source, the purpose, legal basis and duration of the data management, the names, addresses and activities related to the data management of the external data controllers and data processors involved in the data management, and - the data subject in case of transmission of your personal data - about the legal basis and recipient of the data transmission.

This information is valid until withdrawn.

4. Definitions

5. Information on the use of cookies

In accordance with common internet practice, our website also uses cookies to optimize performance and help users.

An HTTP cookie (usually simply a cookie, or cookie according to its English original) is a packet of information that the server sends to the web browser, and then the browser sends back to the server for every request directed to the server. Cookies are created by the web server itself using the browser on the user's computer, where they are stored in a separate directory. A cookie is therefore a small file that is placed on your computer when you visit a website.

The cookie can contain any information specified by the server, its purpose is to introduce the user status to the connection between the browser and the server. In the absence of cookies, the retrieval of each website would be an isolated event, so for example, if the user logs in to a page protected with a username and password and views content, then navigates to another subpage, the username/password pair would have to be requested again.

The purpose of cookies is therefore to facilitate the use of websites and to store information related to the user's session, but it is also suitable for collecting other information related to the use of the site.

Our taxi company uses cookies on its website exclusively for two purposes, which are not suitable for identifying users. We do not use advertising cookies, so we do not burden you with unwanted advertisements when browsing the pages.

Cookies to help use

These provide us with the opportunity to remember the function language and other usage-related choices on our website.

Performance cookies

We use Google Analytics cookies to collect information about how our visitors use our website. These cookies cannot identify you personally, they only collect information such as which page a visitor viewed, which part of the website they clicked on, how many pages they visited, and how long each page was viewed.

Avoiding the use of cookies

As we wrote earlier, the cookies used on our website do not store personally identifiable information, acceptance and authorization of the use of cookies is not mandatory, regardless of the functionality of our website, you will not suffer any damage if you reject the use of cookies. It is usually possible to manage cookies in the Tools/Settings menu of browsers under the Data Protection settings, under the name cookie or cookie.

6. General purpose of data management

In order to perform the transport organization and passenger transport service, the exercise of the rights and obligations arising from the service contract (Terms and Conditions) and the business contract concluded with the taxi passenger transport companies, the performance of the passenger transport service.

7. Legal basis of data management

Fulfillment of contractual obligations, consent of the data subject, legitimate interest of the data controller, legal obligation, as follows:

8. Duration of data management

31/2013 of the Municipality of the Capital City, the transport data directly related to the organization of the transport and the use of the service, provided by the natural person who uses the passenger transport service, compulsorily or as a result of his voluntary activity. taxi decree, as well as Government 176/2015. (VII.07-e) Govt. on the basis of the regulation on road passenger transport for a fee, our company is required to keep it for a period of 3 months.

For reasons of quality assurance, in order to provide faster, better and more modern service to passengers, data directly related to the transport organization will be kept beyond the mandatory data retention period, for 1 year as active data, and for another 1 year as archived data, if the person concerned does not request the deletion of the data.

We retain data not directly related to the organization of transport for the period prescribed by the relevant legislation or regulated by the contracts. The exact duration of the various data managements can be found in "9. They were recorded in the "Scope of processed personal data" chapter.

9. Scope of processed personal data

During phone calls

176/2015, our company (VII. 7.) Govt. decree on road passenger transport by private car for a fee maintains a dispatcher service authorized by law in order to increase the quality of the transport organization service.

Calls to the central telephone number of the dispatch service are not recorded, so no data processing takes place in this regard.

Data management related to freight organization

During the passenger taxi transport organization activity, our dispatch service receives transport requests from passengers and forwards them in an organized, automatic or manual form to the passenger taxis, which are contracted partnerships or sole proprietors using the taxi company's image elements.

During data processing, the dispatch service, as well as the online and mobile application interfaces suitable for ordering transport, request the data from private individuals requiring transport, which are necessary in order to be able to perform the service requested by them.

Delivery requests are received by the company as follows

Data from these individuals will be forwarded to the passenger transport companies in order to fulfill the transport

Method of transmission:

General legal basis and duration of data management

The mandatory duration of data storage and preservation is the following legislation

based on a minimum period of 100 days. In the absence of a request from the users to delete the data, the data related to the transport organization will be archived and then deleted after 1 + 1 year.

Passenger transport

Direct personal data processing for taxi passenger carriers under contract with our company - when waiting at a taxi station or other place with a free signal, or by stopping or waving down a taxi with a free signal - boarding is usually not done, or only if the passenger

Scope of data registered and processed in the above cases
Purpose of data management

Exercising the rights and obligations arising from the service, check or discount card usage contract concluded with partner companies or private individuals, the performance of the passenger transport service

Legal basis for data management

The exercise of rights and obligations arising from service contracts or GTC, the performance of the passenger transport service, the legitimate interest of the data controller, and the consent of the data subject.

Data processed during data recording following a telephone taxi order

Our company operates a dispatch service for the organization of transport, which receives transport requests from passengers and forwards them to passenger taxis in an organized, automatic or manual form.

One of the currently most common ways of receiving transport requests is for passengers to call the central telephone number of the taxi company and communicate information about their travel needs to the dispatch service. The dispatch service records the data related to the transport organization in the HolaTaxi system.

Scope of registered and managed data
Purpose of data management

Recording, transmission and preservation of data related to transport organization for the purpose of service performance and legal obligations.

Legal basis for data management

Data management during orders placed on the mobile application

Our taxi company uses the HolaTaxi system created and provided by Mobile LBS Kft., which includes the "DunaTaxi" transport ordering application for the most common mobile platforms (Android and iOS) for the IT service and support of transport organization activities.

The application can be downloaded free of charge from the respective application stores, however, its actual use (ordering the transport) is subject to prior registration. During registration, based on the contractual conditions contained in the General Terms and Conditions, the passenger must record their name, telephone number and e-mail address, and actively (by reading and user interaction) accept our General Terms and Conditions and this Privacy Policy. By accepting these, the passenger gives his consent to the processing of the data listed below. During the actual taxi order, the passenger consents to the processing of additional data

Scope of registered and managed data

During registration

When the transport is ordered, and thereafter until the end of the journey

Location data provided by the mobile appointment application application

When entering the mobile application, the passenger is informed that the application collects the location data of his device in order to:

The passenger receives the same information when placing the actual order, and permission is requested whether or not the passenger consents to the disclosure of their location data. The permission can be granted or refused based on the passenger's own decision and choice, regardless of his decision, he is entitled to use the service. By refusing the location data service, you must do without the application functions based on it - listed above.

Purpose of data management

Recording, transmission and preservation of data related to transport organization for the purpose of service performance and legal obligations.

Legal basis for data management

Data management applied when ordering from online interfaces and by e-mail

Our company accepts taxi orders from customers in other electronic forms, in addition to the traditional telephone and app bookings.

Scope of registered and managed data
Purpose of data management

Recording, transmission and preservation of data related to transport organization for the purpose of service performance and legal obligations.

Legal basis for data management

Data management related to taxi passenger transport contractors

The actual passenger transport is carried out by taxi passenger companies that have a contractual relationship with our taxi company.

In the course of the transport organization activity, our dispatch service receives transport requests from passengers and forwards them to the passenger taxi operators in an organized, automatic or manual form.

The taxi contractors are equipped with Android mobile communication devices, on which they run the LBS DunaTaxi application of the company's HolaTaxi system for the IT support of transport organization during their shift.

When this mobile application is on:

Scope of registered and managed data

In connection with the contract concluded with taxi passenger transport companies

In connection with the organization of transport and the fulfillment of deliveries

Location data provided by the mobile taxi application

When concluding a contract with the taxi company, the taxi driver accepts, in addition to other obligations included in the contract, that he must use the LBS DunaTaxi mobile application during the validity of the contract, including during the entire time spent in the shift . Together with the contract, you accept the taxi company's information on data management, which sets out the purpose and legal basis of data management, as well as the scope of the data recorded about it.

In addition, when entering the application, you will be informed that the application collects your device's location data both in the foreground and in the background in order to:

The taxi driver can grant or refuse the permit based on his own decision and choice, but at the same time, due to his obligations contained in the contract, he cannot participate in the passenger transport if the permit is not granted.

Purpose of data management

In order to ensure efficient transport management, updating the status and availability of taxis at all times, forwarding data related to transport management to the taxi drivers providing the service for the purpose of service performance and legal obligations.

Legal basis for data management

10. Transfer of data, additional data managers and processors

to data processors Our company uses additional data controllers and data processors in order to provide services and facilitate our own data management activities, as well as to fulfill the contract concluded with the party involved in data management or the legal requirements.

The reason for this is that we can ensure the security of some of our services, the IT processes that support them, and the operation only by using content, IT solutions, or their infrastructure provided by external service providers.

When using external data managers and data processors, we strive to ensure that only those data managers and data processors who provide contractual guarantees to comply with the requirements of data management contained in national and member state legislation and to implement appropriate technical and organizational measures to ensure the protection of the rights of the data subjects can participate.

Based on the above, private taxi contractors providing taxi passenger transport are also considered external data controllers and data processors.

By accepting this data management information, the natural person also accepts that the transfer of their data is necessary for the use of the given service, so if they do not agree to the transfer of their data, we cannot provide them with the relevant service.

Data managers and data processors related to the transport organization and the services provided

Mobile LBS Kft

We use the HolaTaxi system developed by Mobile LBS Kft and provided as a monthly fee service for the IT support of transport organization activities and service provision.

Activity performed by a data processor

The operation of the HolaTaxi automatic transport management system and the implementation of the necessary improvements, as well as the provision of the background IT infrastructure.

Data processor data

Google Inc.

We use the company's Google mail system for written contact with customers, and the document management system provided by the company for office applications, and Android systems on our mobile devices

Activity performed by a data processor

Provision of GMail mail account and related services.

Data processor data

11. Data security

Basic principles of implementing data protection

Protection of IT-based records

Our company implements the following necessary measures for the implementation of data security with regard to its IT records

Protection of paper-based records

In order to protect paper-based records, our company takes the necessary measures, especially in terms of physical security and fire protection. These measures may be published in separate regulations

12. Legal enforcement and remedies

Our company ensures the recognition, enforcement and legal remedy of rights related to personal data as follows. Access to personal data and requests related to the enforcement of the rights of the data subject described below can be initiated by the data subject in the following ways at the contact details provided in Chapter 2:

When submitting the application - regardless of its form - you must prove that you are entitled to exercise the data subject's rights on your own or on behalf of your legal representative.

In relation to the submitted legal remedy requests, we undertake to inform the person concerned of the measures taken based on the request without delay, within a maximum of 30 days from the date of receipt. The 30-day administrative deadline can be extended by 2 months - if necessary and justified. We will inform the data subject of the extension of the deadline, indicating the reasons for the delay, within 30 days of receiving the request.

If, based on your request, we do not take measures within the specified deadline, we will inform you as soon as possible, but no later than within 30 days, of the reasons for not taking action. If you do not agree with our legal remedial activity following your submitted request, you can file a complaint with the National Data Protection and Freedom of Information Authority, or in the case of illegal data processing, you can apply for legal redress to the competent court according to your place of residence or residence.

National Data Protection and Freedom of Information Authority

1125 Budapest, Szilágyi Erzsébet fasor 22/C.

Mailing address: 1530 Budapest, PO Box: 5.

Phone: +36 -1-391-1400

E-mail: ugyfelszolgalat@naih.hu

The right to withdraw data processing consent

The data subject has the right to withdraw the previously given consent to data processing at any time, but this cannot be retroactive, i.e. it does not affect the legality of the data processing carried out on the basis of consent prior to the withdrawal of consent.

The right to information

At the written request of the data subject, we provide information about the data we manage or process, their source, the purpose, legal basis, duration of the data management, the name, address (headquarters) of the data controller and/or data processor and their activities related to data management, and - forwarding the data subject's personal data in the case of - about who and for what purpose the data is or was received. We will provide this information in writing within 30 days of submitting the application.

Right to correct or delete data

The right of the natural person concerned, the request for the correction of his personal data, and its fulfillment by us. Our company is obliged to correct personal data that does not correspond to reality.

We delete the personal data we manage if:

In addition to the above, the condition for deletion is that the deletion of data is not precluded by any law or other legislation

We would like to draw your attention to the fact that the Hungarian State may limit the data subject's rights to information, correction and deletion by law.

Our company is obliged to take action within 30 days regarding the modification or deletion of data. We will provide information in writing within the same 30 days. If we cannot fulfill the data subject's request for correction or deletion due to the reasons listed above, we will also inform the data subject in writing within 30 days

The right to restrict data processing

The data subject is entitled to limit data processing at his request if one of the following is met:

The right to data portability

The data subject is entitled to receive the personal data concerning him/her in a format that is clearly understandable, widespread and readable by a computer program, and is also entitled to transfer this data to another data controller without restriction, and is also entitled to - if this is technically feasible - request the direct transfer of personal data between data controllers.

The right to protest

The data subject has the right to object to the processing of his personal data at any time if the processing of personal data is carried out for the purpose of obtaining direct business. If the data subject objects to the processing of personal data for the purpose of direct business acquisition, then the personal data may no longer be processed for this purpose.