This privacy policy explains which personal data SchipholRide processes, why, on which legal basis, with whom we share data and which rights you have. We process personal data in accordance with the General Data Protection Regulation (GDPR/AVG).
This is an English translation of our Dutch privacy policy (privacybeleid), provided for convenience. In the event of any discrepancy, the Dutch version prevails.
1. Who we are
SchipholRide is a sole proprietorship (eenmanszaak) located at Boeing Avenue 1-19, 1119 PC Schiphol-Rijk, registered with the Dutch Chamber of Commerce (KvK) under number 82488703 (VAT number NL005046135B64) and trading under the name "SchipholRide".
SchipholRide operates an online booking platform that connects travellers with independent, pre-selected carriers (taxi companies and their drivers). For the personal data we collect and use via our platform as described in this policy, we are the data controller.
Contact about privacy:
- Email: info@schipholride.nl
- Phone: +31 85 060 2543
2. Which data we process
To process your booking and manage our platform, we process:
- First and last name, email address and phone number
- Pickup address, destination and any intermediate stops
- Flight details (flight number, scheduled arrival or departure time)
- Number of passengers and luggage requirements
- Any special requests you provide yourself (e.g. child seat, wheelchair, extra luggage)
- Payment details (processed by our payment service provider; we do not store card details ourselves)
- For business bookings: company name, Chamber of Commerce number, VAT number and billing address
- Correspondence with our customer service (email, phone, WhatsApp)
- Technical data: IP address, browser type and page visits (analytics only with cookie consent)
- Origin of your visit: which ad, campaign or website brought you to us (the sr_attr cookie, see 3 and 6)
In principle, we do not process special categories of personal data. Therefore, do not provide more sensitive information than is necessary for your ride.
3. Purposes and legal bases
- Concluding and performing your booking, passing on ride details to the selected carrier, invoicing and flight monitoringLegal basis (GDPR): Performance of the contract (Art. 6(1)(b))
- Fiscal and administrative retention obligationsLegal basis (GDPR): Legal obligation (Art. 6(1)(c))
- Customer service, quality monitoring, fraud prevention and the security of our platformLegal basis (GDPR): Legitimate interest (Art. 6(1)(f))
- Reminder emails about a booking you started yourself but did not complete (with an unsubscribe link in every email)Legal basis (GDPR): Legitimate interest (Art. 6(1)(f))
- An email invitation after your ride to review your experience, and at most one reminder (with an unsubscribe link in every email)Legal basis (GDPR): Legitimate interest (Art. 6(1)(f))
- After a one-way ride to Schiphol, one email to arrange the ride back from Schiphol, also without the marketing email checkbox; not if a ride back with us has already taken place or been booked after the departure (with an unsubscribe link in the email). You can refuse this email when you book by ticking “Don't send me a return-trip email”, and later with the unsubscribe link.Legal basis (GDPR): Legitimate interest (Art. 6(1)(f)); email to our own customers about a similar service (Art. 11.7 Dutch Telecommunications Act)
- Origin of your booking (ad, campaign or website): the click ID of your first ad click, the campaign details (utm) of your most recent campaign visit, the first page you viewed and the website you came from at that time. We store this in the sr_attr cookie, even if you decline cookies, so we can see which ad or campaign a booking came from. If you book, this data is sent along with your booking and stored with it (see our cookie policy)Legal basis (GDPR): Legitimate interest (Art. 6(1)(f))
- Marketing emails (only if you tick the checkbox with your booking; you can unsubscribe at any time via the link in the email or via info@schipholride.nl) and non-essential (analytics/tracking) cookiesLegal basis (GDPR): Consent (Art. 6(1)(a))
Reminder for an incomplete booking. If you start a booking yourself and do not complete the payment, we may send you a limited number of reminders about it by email, only within 7 days of starting your booking. These emails are only about that one booking (no newsletter, no other offers) and each contains an unsubscribe link. If you no longer want reminders, you can unsubscribe via that link (and then confirm with a button) or via the unsubscribe button in your email app; we respect that choice immediately. You can also always object to this processing (Art. 21 GDPR) via info@schipholride.nl.
Review invitation after your ride. After your ride, we may invite you by email to review your experience, and remind you about it at most once. These emails are only about your ride (no newsletter, no other offers) and each contains an unsubscribe link. If you no longer wish to receive review invitations, you can unsubscribe via that link (and then confirm with a button) or via the unsubscribe button in your email app; we respect that choice immediately. You can also always object to this processing (Art. 21 GDPR) via info@schipholride.nl.
You can withdraw consent at any time; this does not affect processing that took place before withdrawal.
4. With whom we share data
Independent carriers. To carry out your ride, we pass on the necessary data to the carrier we have selected (usually: name, pickup address and destination, phone number, flight information and relevant special requests). The carrier is an independent company and is itself the data controller for this data as regards the performance and insurance of the ride. We do not share more than is necessary for the ride concerned.
Processors and service providers who process data on our behalf, under a data processing agreement, including:
- A payment service provider for processing payments
- Email and messaging services for confirmations, reminders and status updates (email, SMS, WhatsApp)
- A flight-data service for tracking flight status
- A maps/routing service for route calculation
- Analytics and advertising services (including Google Analytics, Microsoft Clarity, which records sessions with masked input fields, and Google Ads), for measuring website usage and the effectiveness of our advertising
Measuring email delivery and usage. To know whether our emails (such as booking confirmations, reminders, the email about your ride back from Schiphol and, only with your consent, travel emails) arrive and are useful, our email service measures whether an email has been delivered, opened and whether a link has been clicked. For this purpose, links in our emails pass through our own address links.schipholride.nl before you reach the destination. We use this measurement exclusively to improve our emails and clean up bounces (legitimate interest); for travel emails you can always unsubscribe via the link at the bottom of the email.
Measuring completed bookings (server-side). When a booking has been successfully paid, we also measure that conversion server-side: we send a notification of the completed booking (with a pseudonymous statistics identifier and your email address/phone number in encrypted, hashed form) to Google (Analytics and Ads) to determine which advertisement or source led to the booking. This conversion measurement is linked to the transaction and can take place independently of your cookie choice. In doing so, we do not share any payment or ride details for advertising purposes and we never sell your data. You can object to this via info@schipholride.nl.
Authorities. We provide data to competent authorities (such as the Dutch Tax Administration, police or supervisory authorities) when we are legally obliged to do so.
We never sell your data to third parties.
5. Transfers outside the EEA
Some of our service providers process data (partly) outside the European Economic Area, for example in the United States. In that case, we ensure appropriate safeguards such as an adequacy decision of the European Commission, participation in the EU-US Data Privacy Framework or standard contractual clauses (SCCs). You can request a copy or further explanation of the safeguards used from us.
6. Retention periods
- Booking and invoice data: 7 years (fiscal retention obligation)
- Checkout data from incomplete bookings: reminders stop no later than 7 days after you started your booking; the email address in this checkout log is anonymised after 90 days at the latest (we keep a record of your opt-out as proof of your objection)
- Customer service correspondence: 2 years after the last contact
- Marketing emails: until you unsubscribe
- Analytics data: a maximum of 14 months
- Origin cookie sr_attr: the cookie 90 days after the last change, the copy in localStorage until you clear your browser data (see our cookie policy); origin data sent along with a booking as long as the booking data
- Cookies: see our cookie policy
After the retention period expires, we delete or anonymise the data.
7. Automated decision-making
When assigning a ride to a carrier, we use automated tools (for example based on availability and region). This does not involve automated decision-making that produces legal effects or similarly significantly affects you within the meaning of Article 22 GDPR.
8. Your rights
Under the GDPR you have the right to:
- access your personal data (Art. 15);
- have incorrect data corrected (Art. 16);
- have data deleted insofar as legally possible (Art. 17);
- have processing restricted (Art. 18);
- have your data transferred (Art. 20);
- object to processing based on legitimate interest (Art. 21);
- withdraw consent you have given (Art. 7).
Send a request to info@schipholride.nl. We respond within one month. You also always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
9. Security
We take appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), restricting access to our system to authorised persons and not storing card details ourselves. No method is 100% secure; in the event of a data breach with a likely risk to you, we will report it in accordance with the law.
10. Cookies
Our platform uses functional, analytical and (after consent) marketing/tracking cookies, and one first-party origin cookie (sr_attr) that we set even without consent. More information and your settings can be found in our cookie policy.
11. Changes
We may amend this privacy policy. The current version is always available on this page with the date of the last change at the top. In the event of substantial changes, we will inform you in advance, for example by email.