In accordance with Art. 19 of the Swiss Federal Act on Data Protection (FADP), this policy explains how TAXIZENTER processes personal data when you use the website and the application.
1. Controller
TAXIZENTER, owner Mehmet Besir Oskan, Seilerbahnweg 15, 7000 Chur, Switzerland Email: info@taxizenter.ch Please send privacy requests to this address.
2. Which data we process and why
a) Customers (ordering a taxi)
- Order details: pick-up location, destination, time (immediate or pre-order), requested vehicle, assignment and status data of the ride, final price reported by the taxi company, any price report («Price was wrong»).
- Contact details: name and phone number (mandatory). They are shown to the taxi company only from the moment it accepts the ride, so it can reach you. For pre-orders, all partner dispatch centres see the open pre-order without contact details.
- Location: if you choose «Use my location», your device asks for permission. The location is used only for that order (pick-up point).
- Anonymous customer account: when you order, an anonymous account (technical identifier) is created automatically so you can follow your ride. It contains no email address.
- No coverage: if there is no partner taxi around your pick-up point, we note the request anonymously (municipality, postcode, canton, location rounded to about 1 km, time – not linked to your account, your details or your ride). The municipality is determined through api3.geo.admin.ch (Switzerland).
- Notification (optional): if in this case you leave your email address and expressly consent, we store the address, municipality/postcode and the time and version of your consent in order to inform you once as soon as there are partner taxis in your region. There is no automatic sending; we write to you ourselves. Withdraw at any time: info@taxizenter.ch.
b) Taxi companies, dispatch centres and drivers (partners)
- Partner application: company name, contact person, canton, email, phone, tariff details, consent.
- Login: email address and login link (magic link); role and company membership.
- Vehicle and driver data: vehicle status (free/busy/offline) and – while the driver app is on duty – the vehicle's location (GPS), so that nearby jobs can be offered and shown in the dispatch centre.
- Tariff and price data as well as order and offer history.
c) Technical data when visiting the website
- When you open the site, IP address, time, requested page and browser details are processed as technically necessary (server logs at the hosting providers). We use no analytics, advertising or tracking tools and load no external fonts.
3. Live taxi position and ratings (customers)
- Live position: As soon as a partner taxi has accepted your ride and is on its way to you (trip to the pick-up point), the map shows the current position of that one taxi and the estimated arrival time. The app requests the position every few seconds. Before assignment and once the ride has started, the position is no longer shown; you never see other vehicles. No movement history is created.
- Rating (voluntary): After a completed ride you can give 1 to 5 stars once, plus a comment (at most 500 characters). We store the stars, the comment, the time and the link to the ride and the taxi company; your name and phone number are not stored with the rating. Ratings are not public: only the dispatch centre of the taxi company concerned and we can see them. Please do not write third parties' personal data in the comment.
- Retention: We keep ratings for as long as they are needed for the quality assurance of partners.
4. Partners: proofs, location, subscription and invoices
- Proofs at registration: We record whether a driving licence for professional passenger transport (category B121) is held and its expiry date, the taxi licence (authority and number), the entry «professional passenger transport» in the vehicle registration document, and the licence plate. You also upload three documents (driving licence, taxi licence, vehicle registration document; PDF, JPG or PNG).
- Storage of documents: The documents are kept in private storage in Switzerland (Supabase, Zurich region), are not public and are accessible only to the operator for review (via short-lived links). We use them to verify the requirements and to monitor the expiry date: a warning appears 30 days before expiry, and after expiry the company receives no more jobs. Documents of rejected applications are deleted automatically 90 days after the rejection; for approved partners we keep them for the duration of the cooperation.
- Location and service radius: We store the company's location (municipality or address) and its service radius in order to check whether a partner taxi can reach the area of a pick-up point.
- Subscription and invoices: We store the plan, the payment frequency, optionally the billing address (street, postcode, town) and invoices (number, period, number of vehicles, amount, status). The invoice PDF is generated on our application server (Railway, EU West). We keep invoice data for the statutory retention periods (generally ten years).
5. Purposes and legal basis
We process personal data to arrange taxi rides, manage partners, operate the platform securely and reliably, prevent abuse (e.g. limiting orders per customer) and meet legal obligations. The FADP does not require a legal basis for private controllers in the sense of the GDPR; processing follows the principles of Art. 6 FADP (lawfulness, good faith, proportionality, purpose limitation) and, where required, your consent (e.g. location, push notifications).
6. Recipients and service providers
- Taxi companies: receive the data needed for the ride (pick-up, destination, time, and from acceptance name and phone number). The taxi company processes this data under its own responsibility to carry out the ride.
- Supabase (database, authentication, realtime): the TAXIZENTER database is located in Switzerland (Zurich region). The provider is Supabase Inc. (USA); access by the provider from third countries, e.g. for support or operations, cannot be excluded.
- Railway (application server / website hosting): the application runs at Railway Corp. (USA) on servers in the EU West region (Amsterdam, Netherlands). Data you submit via the website (order, login) is technically processed there before it is stored in the Swiss database. As the provider is based in the USA, access from the USA, e.g. for support or operations, cannot be excluded.
- Infomaniak Network AG (Switzerland): sending of emails (login links, invitations) from our sender address info@taxizenter.ch.
- Push notifications (only with your consent, partners only): delivered through the push services of your browser or operating system – Apple (APNs), Google (FCM) or Mozilla. Messages contain minimal information and are transmitted encrypted.
- Address search: entries in the address field are sent to api3.geo.admin.ch (Federal Office of Topography swisstopo, Switzerland); your IP address is transmitted.
- Map tiles: to display maps, tiles are loaded from tile.openstreetmap.org (OpenStreetMap Foundation, United Kingdom); your IP address is transmitted.
- External map links: if you open navigation with Google Maps or Apple Maps from the driver app, the privacy terms of those providers apply.
- Bot protection (Cloudflare Turnstile): Currently not active. When activated (order and partner form), your browser loads a script from Cloudflare, Inc. (USA) and transmits technical data (including the IP address) to tell humans from bots; cookies or local storage may be used. We will update this notice before we switch on bot protection.
7. Disclosure abroad
Some providers (Railway, Supabase, push services, OpenStreetMap) are based or have servers outside Switzerland, in particular in the Netherlands (EU), the USA or the United Kingdom. Where a country does not offer adequate data protection as recognised by the Federal Council, we base the transfer on suitable safeguards (in particular standard contractual clauses) or on exceptions under Art. 17 FADP.
8. Retention and deletion
- Name and phone number of a ride are deleted automatically at the latest 30 days after the ride ends. For pre-orders the period runs from the requested time.
- Ride data without contact details (places, times, prices) is kept for billing, price checks and statistics as long as necessary for these purposes.
- A vehicle's location is kept only as the current position (no movement history) and is deleted when it switches to «offline».
- Push subscriptions are deleted when you revoke them or they become invalid.
- Anonymous demand without partners (municipality, postcode, rounded location, time) is kept for 24 months at most. Notification addresses are deleted as soon as we have informed you, after 12 months at the latest.
- Partner accounts are kept for the duration of the cooperation and deleted afterwards unless statutory retention duties apply.
9. Cookies and local storage
- taxizenter-lang (cookie): remembers your chosen language; set only when you actively change the language.
- Login session cookie (Supabase): keeps your login or anonymous session; technically necessary.
- Browser storage (session/local storage): technically necessary temporary storage, e.g. for the login flow and – in demo mode only – for the demo flow.
- Service worker: enables use as an app (PWA) and receiving push notifications.
No cookies are set for advertising or analytics.
10. Data security
We take appropriate technical and organisational measures: encrypted transmission (HTTPS), access restriction at database level (row level security), separated roles and secrecy of access keys. Complete security cannot be guaranteed for data transmission over the internet.
11. Your rights
Under the FADP you have in particular the right of access, rectification, deletion, restriction of processing, data release or portability, objection to processing and withdrawal of consent (with effect for the future). Contact info@taxizenter.ch. We may require proof of identity. You may also contact the Federal Data Protection and Information Commissioner (FDPIC).
12. Changes
We may amend this policy, e.g. when providers or processes change. The version published at the time applies.