This is a non-binding English translation for your convenience. The German version above the language switch is legally authoritative.
1. Data controller
The party responsible for data processing on this website is:
MG GROUP Muhammad Ijaz-Ud-Din Ghumman Im Bangert 20 63450 Hanau Germany
Phone: +49 155 68652551 Email: ijazghumman97@gmail.com
2. General information on data processing
We process our users' personal data only to the extent necessary to provide a functioning website and our content and services. Processing generally only takes place with the user's consent or on the basis of a legal permission, in particular Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest).
3. Hosting
This website is hosted on our own, self-operated server infrastructure. We do not use external third-party website builders or hosting platforms to serve the website itself.
4. Server log files
When you access this website, our server automatically collects information transmitted by your browser (e.g. IP address, date and time of the request, browser type, referrer URL). This data is used to ensure the technically error-free provision and security of the website (Art. 6(1)(f) GDPR) and is not combined with other data sources.
5. Cookies
This website uses one technically necessary cookie to store your language selection (German/English) and, if you install the website as a web app, local storage functionality (a service worker) to serve the homepage while offline. These functions are necessary for the operation of the website and do not require separate consent (§ 25(2) TTDSG). We do not currently use any analytics, marketing, or tracking cookies (e.g. Google Analytics or comparable services).
6. Booking requests
When you request a ride through our booking form, we collect the data you enter (name, email address, phone number, pickup and drop-off address, date/time, number of passengers, and any further details such as luggage or notes). We process this data to handle and carry out your booking and to communicate with you, on the legal basis of Art. 6(1)(b) GDPR. This data is deleted once it is no longer required to fulfil the transport contract, unless statutory retention periods apply (e.g. commercial and tax-law retention periods of up to 10 years).
7. Contact form and business enquiries
If you contact us via a contact or business-enquiry form, we process the data you provide (including name, email, phone number, company, and message) to handle your enquiry, on the legal basis of Art. 6(1)(b) or (f) GDPR.
8. Reviews / testimonials
If you submit a review for a completed ride through our website, we process the booking reference, email address (for verification), rating, and text you provide, along with the name given at the time of booking. Published reviews appear with your name and a short trip description on our website. The legal basis is your voluntary submission of the review together with our legitimate interest in presenting authentic customer experiences (Art. 6(1)(f) GDPR). Reviews are published only after we have reviewed them.
9. Google Maps Platform
For address entry (address suggestions) and calculating distance and travel time, we use the Google Maps Platform (Places and Distance Matrix services) provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). When you enter an address, data (including your IP address and the search text entered) may be transmitted to Google's servers, including outside the European Union. The legal basis is our legitimate interest in reliable, convenient address entry and accurate fare calculation (Art. 6(1)(f) GDPR). Further information on how Google handles user data is available in Google's privacy policy: https://policies.google.com/privacy.
10. Sending emails
We send booking confirmations and other transactional emails via the email delivery service Resend. The data required for each email (including name, email address, and booking details) is transmitted to this provider for that purpose. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). Where legally required, we enter into data processing agreements with our service providers pursuant to Art. 28 GDPR.
11. Online payment
For paying bookings (e.g. the booking fee or the fare), we offer an online payment option via the payment service provider Stripe, operated by Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland ("Stripe"). When you pay online, we transmit the data required for this (including name, email address, payment amount, booking reference) to Stripe; your actual payment details (e.g. card data) are processed directly by Stripe and do not reach our servers. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). Further information on how Stripe handles your data can be found in Stripe's privacy policy: https://stripe.com/privacy. You may alternatively continue to pay in cash or by invoice directly with the driver.
12. Recipients of data
Your data is only transferred to third parties where necessary to carry out the contract (e.g. to the technical service providers named above) or where we are legally obliged to do so. We do not sell your data to third parties.
13. Storage period
Unless a more specific storage period is stated in this policy, your personal data is deleted once it is no longer required for the relevant processing purpose, unless statutory retention obligations apply.
14. Your rights
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to withdraw any consent given at any time, with effect for the future (Art. 7(3) GDPR)
You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. The competent authority is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit Postfach 3163, 65021 Wiesbaden, Germany https://datenschutz.hessen.de
15. Data protection officer
Given its size, MG GROUP is not currently subject to a statutory obligation to appoint a data protection officer.
16. Changes to this privacy policy
We reserve the right to update this privacy policy as the legal situation, this website, or our data processing changes. The version published on this page at any given time applies.