Legal

Privacy policy

Protecting your personal data matters to us. This policy explains which data we process when you visit this website, for what purpose, and which rights you have.

1. Controller

We have not appointed a data protection officer, as the legal requirements for doing so are not met. If you have any questions about data protection, please contact us directly using the details above.

2. Overview

This website works without tracking: we use no analytics or advertising services and store no cookies on your device. Fonts, images and videos are loaded directly from our own web space.

We only process personal data where this is necessary to operate the website, to handle your requests or – with your consent – to display the Google Maps map. We rely on the following legal bases of the General Data Protection Regulation (GDPR):

• Art. 6(1)(a) GDPR – consent
• Art. 6(1)(b) GDPR – performance of a contract and pre-contractual measures
• Art. 6(1)(c) GDPR – legal obligation
• Art. 6(1)(f) GDPR – legitimate interests

3. Hosting & server log files

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. We have concluded a data processing agreement with IONOS pursuant to Art. 28 GDPR; IONOS processes the data solely on our instructions.

Each time the website is accessed, the server automatically records information transmitted by your browser (server log files):

• IP address of the requesting device
• date and time of access
• page or file requested and amount of data transferred
• referrer URL (previously visited page)
• browser type and version, operating system

This data is technically required to deliver the website and serves its stability and security, for example to fend off attacks. It is not combined with other data sources. The legal basis is our legitimate interest in the secure and error-free operation of the website (Art. 6(1)(f) GDPR). Log files are stored only for as long as necessary for these purposes and are then deleted.

4. Encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in the address bar and the padlock symbol in your browser. Data you send to us via the website cannot be read by third parties.

5. Contact by phone & email

If you contact us by phone or email, we process your details (e.g. name, phone number, email address, content of your request) in order to handle your enquiry and respond to you. If your enquiry concerns a ride or a quote, the legal basis is Art. 6(1)(b) GDPR; for other enquiries, it is our legitimate interest in responding (Art. 6(1)(f) GDPR). Your data is not passed on to third parties.

6. Request form

You can use the request form to enquire about a ride without obligation. In doing so, we process the data you enter:

• name, phone number and email address
• requested service, date and time
• pick-up location and destination
• your message (e.g. number of passengers, luggage, special requests)

Your details are sent by email via our web server to our mailbox and are used solely to handle your request and prepare a quote. In addition, you will receive an automatic confirmation of receipt with a summary of your request at the email address you provided. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures taken at your request). To protect against spam, we use an invisible check field; no external services such as captcha providers are used. To prevent the form from being misused to send large numbers of confirmation emails, we store an encrypted, non-reversible checksum of your email address for no more than one hour (Art. 6(1)(f) GDPR); it is then deleted automatically.

7. Google Maps

On our website you can choose to display a map from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Only when you load the map does your browser connect to Google’s servers. In particular, your IP address, the date and time of access, information about your browser and device, and the address of our website are transmitted to Google. Google may also use cookies or similar technologies on your device. We have no influence over which data Google processes.

The legal basis is your consent (Art. 6(1)(a) GDPR and § 25(1) of the German Telecommunications Digital Services Data Protection Act, TDDDG), which you give by clicking “Load map”. Your consent applies only to the current page view; you can withdraw it at any time with effect for the future by reloading or leaving the page.

Data may be transferred to Google LLC in the USA. An adequacy decision of the European Commission (EU-US Data Privacy Framework) exists for the USA, under which Google LLC is certified. For more information, please see Google’s privacy policy: policies.google.com/privacy.

8. Google reviews

Our website shows excerpts from public reviews that customers have posted about us on Google. The texts are embedded directly in our website; no data is transmitted to Google when you visit the page.

For each review we state the first name and, where applicable, the initial of the last name, as published by the author on Google. The legal basis is our legitimate interest in showing prospective customers genuine customer feedback (Art. 6(1)(f) GDPR). If you wrote a review and do not want to be named on our website, a short message to us is enough – we will remove the entry promptly.

9. External links

Our website contains simple links to services of other providers, such as our Instagram profile (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland), the Google Maps route planner and our review profile on Google. These are not embedded content: data is only transmitted once you click a link and open the respective provider’s page. From that point on, that provider’s privacy policy applies.

10. Fonts & media

The fonts used on this website and all images and videos are stored locally on our web space and loaded from there. No connection is made to Google Fonts servers or other third-party providers.

11. Retention period

We store personal data only for as long as necessary for the respective purpose. Enquiries that do not result in a booking are deleted once communication has ended. If a booking is made, we retain the related documents in accordance with statutory retention periods (in particular § 257 HGB and § 147 AO of German commercial and tax law: up to six or ten years). The legal basis for this is Art. 6(1)(c) GDPR.

12. Your rights

Within the scope of the statutory provisions, you have the right at any time to:

• access the data we hold about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure of your data (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• withdraw any consent given, with effect for the future (Art. 7(3) GDPR)

To exercise your rights, an informal message to info@nbs-shuttle.de is sufficient.

13. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

14. Other information

Providing your data is not required by law or contract. Without your contact details, however, we cannot respond to your request. No automated decision-making, including profiling (Art. 22 GDPR), takes place.

We will update this privacy policy whenever our website or the legal requirements change. The version published here applies.

Last updated: October 2026 · This English version is provided for convenience; the German version is legally binding.