Privacy Policy

This is a courtesy translation. The German version of this page is the legally binding one.

This privacy policy explains which personal data is processed when you visit alptaxi.at, use the contact form or the booking form, why this happens and what rights you have. Personal data is any information by which you can be personally identified.

1. Controller

Raya GmbH
Egger-Lienz-Straße 28
6020 Innsbruck
Austria

Phone: +43 660 840 4546
E-mail: office@raya.at

Please use this address for any questions about data protection and to exercise your rights.

2. Hosting and server log files

The website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany (All-Inkl). On every visit the web server automatically stores in log files: the IP address of your device, date and time, the page requested, the previously visited page (referrer), browser and operating system. This data is not merged with other data and serves solely the secure and stable operation of the website; it is deleted after a short time.

The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). A data processing agreement is in place with All-Inkl. Fonts and all other files of the website are served from our own web space; merely visiting the site does not establish a connection to Google Fonts or other content delivery networks. Details: all-inkl.com/datenschutzinformationen.

3. Consent and storage in your browser

On your first visit a notice asks whether you allow statistics and marketing services. We store your choice in your browser's local storage (entry alptaxi-einwilligung) – without transmitting it to us or third parties – until you delete the entry or change your choice. As long as you do not consent, no Google services are loaded and no third-party cookies are set. You can change or withdraw your decision at any time via the "Manage consent" button at the bottom left.

Storing your choice is technically necessary to respect your decision (§ 165(3) Austrian Telecommunications Act 2021; Art. 6(1)(c) and (f) GDPR). Which cookies the services you consented to set is listed in the cookie policy.

4. Contact form, e-mail and phone

When you write to us via the contact form, we transmit your name, e-mail address and message as an e-mail via All-Inkl's mail server to our mailbox. To be able to trace abuse, this e-mail also contains the IP address from which the message was sent and the time. The details are not stored on the web server itself. An invisible form field protects against automated submissions; we do not use Google reCAPTCHA or similar services.

Enquiries by e-mail or phone are stored together with the resulting data (name, contact details, request) in order to process them. The legal basis is the initiation or performance of a contract (Art. 6(1)(b) GDPR) or our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). The data remains with us until your request has been dealt with and no statutory retention obligations remain.

5. Requests via the booking form

The search box and the booking form on this website are part of our own booking system at app.alptaxi.at, operated by Raya GmbH. On pages with the booking form your browser connects to app.alptaxi.at, transmitting your IP address. This is technically necessary to display the form (Art. 6(1)(f) GDPR).

For a request or booking we collect: pick-up and destination including address, date and time, outbound and return journey, number of passengers and pieces of luggage, flight number, requested vehicle class, preferred payment method (cash or card in the vehicle), your name, e-mail address, phone number and remarks. We use this data to check your request, prepare a quote, carry out the transfer, reach you in case of changes and invoice the journey. The legal basis is the initiation and performance of the transport contract (Art. 6(1)(b) GDPR). Confirmations and queries are sent by e-mail via All-Inkl's mail server.

The booking system runs at Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. Booking data is stored in a database of Supabase Inc., 970 Toa Payoh North #07-04, Singapore; the database server is located in a data centre in Stockholm, Sweden (Amazon Web Services, region eu-north-1). Data processing agreements with EU standard contractual clauses are in place with both providers.

Payment is made in the vehicle, in cash or by card. If, by exception, we agree on advance payment, we send you a payment link from Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland; you then enter your payment details directly with Stripe and we only receive confirmation of the payment. Details: stripe.com/privacy.

After a request has been submitted, the booking system tells the website only the reference number, fare, route and vehicle class – no names or contact details. We use this information solely for the conversion measurement described under section 7, provided you have consented to it.

We delete booking data once the journey has been completed and the statutory retention periods under tax and company law (generally seven years in Austria) have expired. Price requests that do not lead to a booking are deleted after twelve months at the latest.

6. Encryption

The website, contact form and booking system are delivered exclusively over encrypted HTTPS connections (TLS), recognisable by the padlock symbol in your browser's address bar. Data you send to us cannot be read by third parties in transit.

7. Google Ads conversion tracking

Only if you have allowed "Marketing" in the consent notice do we load the Google tag (gtag.js, ID AW-17654701545) of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It lets Google recognise whether you came to us via a Google Ads advertisement and sets cookies for this purpose (including _gcl_au, lifetime 90 days). If you then submit a booking request, we report a "conversion" to Google with the fare and reference number – without name, e-mail or phone number. This allows us to measure which advertisements lead to requests and to manage our advertising accordingly.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 165(3) Austrian Telecommunications Act 2021), which you can withdraw at any time via "Manage consent". Google also processes the data in the USA; Google LLC is certified under the EU-US Data Privacy Framework. Details: policies.google.com/privacy and policies.google.com/technologies/ads.

8. Disclosure of data

We only pass on personal data where necessary to carry out the transfer (e.g. to the driver who picks you up), where we are legally obliged to do so, or to the service providers named in this policy, who work on our instructions under a data processing agreement. Transfers to countries outside the EU take place only with Google and – in the case of a payment link – with Stripe, each on the basis stated above.

9. Your rights

You have the right to obtain information about the data we store about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may withdraw any consent you have given at any time with effect for the future. You may object, on grounds relating to your particular situation, to processing based on our legitimate interests (Art. 21 GDPR). Simply write to office@raya.at.

If you believe that the processing of your data infringes data protection law, you can lodge a complaint with a supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at.

Last updated: September 2026