Privacy statement

1. Introduction

Sneleentaxi B.V. processes personal data in connection with its digital platform and services for booking, planning, carrying out, tracking and administratively handling taxi rides and related transport services. In this privacy statement, we explain which personal data we process, for what purposes, on which legal bases we rely, with which parties we share data, how long we retain personal data, and which rights data subjects have.

Sneleentaxi acts in accordance with the General Data Protection Regulation, the Dutch GDPR Implementation Act, the Telecommunications Act and other applicable laws and regulations.

2. Who is responsible for the processing

Sneleentaxi B.V., having its registered office at Atoomweg 63, 3542 AA Utrecht, and registered with the Dutch Chamber of Commerce under number 67175376, is, in principle, the controller for the personal data processed through its platform and services.

For privacy related questions or requests concerning personal data, you can contact us at support@sneleentaxi.nl.

3. Who this privacy statement applies to

This privacy statement applies to individuals whose personal data sneleentaxi processes in connection with its services, including customers, passengers, contact persons at business clients, drivers, transport providers, website visitors and people who contact sneleentaxi.

4. Which personal data we process

Depending on the relationship with sneleentaxi and the purpose of the processing, we may process, among other things, the following categories of personal data.

• Identity and contact details, such as name, email address, telephone number, company name and job title.

• Ride and travel details, such as pickup address, destination, intermediate stops, date, time, flight information, booking reference, preferences or special requests relevant to carrying out the ride.

• Location data, such as a driver's current location while available in the application or while carrying out a ride, and ride progress shown to the customer or client.

• Financial and administrative data, such as invoice details, payment status, transaction references, transport providers' bank account numbers, and data required for self-billing or other administrative processing.

• Technical and usage data, such as IP address, device data, browser data, log files, session data and information about the use of the platform or website.

• Quality and performance data, such as punctuality, no-show records, reports, ratings, complaints, incidents and other data relevant to quality assurance, dispute handling and fraud prevention.

• Communication data, such as messages sent by email, telephone, chat, forms or customer service channels.

5. How we obtain personal data

We obtain personal data directly from the data subject, for example when someone books a ride, creates an account, contacts us or uses our website or application.

We may also receive personal data through business clients, transport providers, drivers, payment service providers, technical service providers, partners or other third parties insofar as this is necessary for providing the services, administration, security, quality monitoring or compliance with legal obligations.

Where personal data is not obtained directly from the data subject, we only process data that is relevant and necessary for the specific purpose concerned.

6. The purposes for which we process personal data

Sneleentaxi processes personal data for the following purposes.

• Entering into, planning, carrying out and completing transport agreements and rides.

• Matching rides with available drivers or transport providers and supporting the operational delivery of transport services.

• Displaying ride status, progress and relevant travel information to customers, passengers or clients.

• Processing payments, invoicing, self-billing, administration and financial control.

• Providing customer service, answering questions and handling complaints, claims, incidents and disputes.

• Safeguarding and improving the quality of our services, including analyses of performance, punctuality, no-show situations and service quality.

• Protecting the safety of passengers, drivers, transport providers, staff and systems.

• Preventing, detecting, investigating and combating fraud, abuse, improper use and security incidents.

• Complying with legal obligations, including tax obligations, lawful requests from competent authorities and other compliance obligations.

• Managing, securing, testing, maintaining and improving the platform, website, applications and IT infrastructure.

• Maintaining business relationships, collaborations and tender procedures.

• Making efficient use of our own marketing and advertising budget, including compiling audience lists with advertising platforms.

• Sending marketing communications or placing non-functional cookies where consent is required and has been given.

We do not further process personal data in a manner that is incompatible with the purposes for which the data was collected.

7. The legal bases on which we process personal data

Sneleentaxi processes personal data solely on the basis of one or more legal bases under the GDPR.

Processing may be necessary for the performance of an agreement or for taking steps at the request of the data subject prior to entering into an agreement. This applies, for example, to booking, planning and carrying out rides and to their administrative handling.

Processing may be necessary to comply with a legal obligation to which sneleentaxi is subject. This applies, for example, to tax administration, compliance with supervisory or enforcement obligations, and responding to lawful requests from competent authorities.

Processing may be necessary for the purposes of the legitimate interests pursued by sneleentaxi or third parties, such as system security, quality assurance, fraud and abuse prevention, internal control, dispute handling, incident investigations and service improvement. In such cases, sneleentaxi carries out a balancing test that takes the privacy interests of data subjects into account.

The legitimate interests of sneleentaxi also include making efficient use of its marketing and advertising budget. For that purpose, sneleentaxi provides encrypted contact details to advertising platforms and uses the resulting audience lists to exclude existing customers from advertisements aimed at new customers. Sneleentaxi has documented a balancing test for this processing. Data subjects may object to this processing at any time via support@sneleentaxi.nl. Sneleentaxi will then remove the data subject from the audience lists concerned.

Where processing cannot be based on another legal basis and consent is legally required, sneleentaxi processes personal data on the basis of prior consent. Consent given may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

8. Location data and tracking

For drivers and ride execution, location data may be processed for ride allocation, navigation support, progress display, safety, quality monitoring, dispute handling and fraud prevention.

Drivers are tracked only where this is necessary for the operation of the platform, for example when a driver is actively available in the application or carrying out a ride. Outside that context, sneleentaxi does not process location data without a valid legal basis.

9. Automated decision making

Sneleentaxi may use automated systems for, among other things, ride matching, pricing logic, capacity allocation, anomaly detection and quality monitoring.

Where automated processing is used to support operational or quality processes, decisions that produce legal effects or otherwise significantly affect data subjects are not taken solely by automated means. In such cases, a human review takes place before any measure is taken, such as temporary suspension, restricted access or termination of platform use.

10. Sharing personal data

Sneleentaxi shares personal data only insofar as this is necessary for providing the services, for business operations or to comply with a legal obligation.

• Transport providers and drivers, where necessary to carry out a ride.

• Payment service providers, accounting or self-billing parties, hosting and cloud providers, IT administrators, software providers, communication and support providers, and navigation or mapping services.

• Advertising and marketing platforms, including social media platforms and search engines, and the providers of advertising technology and measurement and analytics services connected to them. Sneleentaxi may provide these parties with an encrypted (hashed) email address or telephone number in order to compile an audience list.

• Business clients, where necessary for carrying out and administratively handling transport performed on their instructions.

• Advisers, accountants, insurers and lawyers, where necessary for business operations, accountability, insurance or the handling of a claim or dispute.

• Competent authorities, insofar as sneleentaxi is legally obliged to do so or receives a lawful request to that effect.

Sneleentaxi does not provide ride data, location data, health data or payment data to advertising and marketing platforms. Data relating to customers of healthcare and target group transport, including Wmo transport, PGB transport, school transport and medical transport, is not provided for that purpose.

Where parties act on behalf of sneleentaxi as processors, sneleentaxi enters into data processing agreements with them where legally required. These agreements include arrangements on confidentiality, security, instructions, subprocessors and the protection of personal data.

Sneleentaxi does not sell personal data.

11. The role of transport providers, platforms and other partners

For processing activities that take place within the platform and the central services, sneleentaxi generally acts as the controller.

Transport providers, drivers and other partners may act as independent controllers for their own legal, operational or administrative processes. This may include, for example, their own obligations in the areas of taxation, insurance, transport law, claims handling or personnel administration.

Only where sneleentaxi and another party jointly determine the purpose and essential means of a specific processing activity will supplementary arrangements be made in accordance with the GDPR. Where necessary, the essence of such arrangement will be made available on request.

When compiling an audience list with an advertising platform, sneleentaxi and the platform concerned jointly determine the purpose and essential means of that processing activity. For that processing activity, sneleentaxi and the platform are joint controllers within the meaning of Article 26 GDPR. The essence of the arrangements made in that regard will be made available on request via support@sneleentaxi.nl.

12. Transfers outside the European Economic Area

Sneleentaxi processes personal data, in principle, within the European Economic Area.

For a limited number of processing activities, a transfer to a country outside the European Economic Area may take place, including when advertising platforms are used. Such a transfer only takes place insofar as this is permitted under the GDPR, on the basis of an adequacy decision of the European Commission, standard contractual clauses or another legal basis provided for in the GDPR, and with appropriate additional safeguards where necessary.

Data subjects can request via support@sneleentaxi.nl on which legal basis and with which safeguards a transfer takes place.

13. Cookies and similar technologies

Sneleentaxi uses cookies and similar technologies on its website and platform for functional, analytical and, where applicable, marketing purposes.

• Functional cookies are necessary for the proper operation of the website or platform.

• Analytical cookies may be used to measure and improve the use of the website, insofar as this is done within the applicable legal framework.

• For tracking cookies, marketing cookies and other non-functional technologies that require prior consent, sneleentaxi asks for that consent through the cookie banner or a similar consent mechanism.

• Consent can later be changed or withdrawn.

More information about the cookies used, their purposes, retention periods and any involved third parties is provided through the cookie banner or the separate cookie information on the website.

The consent requested through the cookie banner relates solely to cookies and similar technologies on the user's device. Providing contact details to advertising platforms as described in section 10 is a separate processing activity with its own legal basis and its own right to object.

14. Retention periods

Sneleentaxi does not retain personal data for longer than necessary for the purposes for which it was collected or processed, unless a statutory retention obligation or another legitimate interest requires a longer retention period.

• Data required for financial and tax administration is retained for as long as the applicable statutory retention period applies.

• Ride data, location data, communication data, complaints and incident data are retained for as long as necessary for service delivery, customer service, quality analysis, dispute handling, fraud prevention, evidentiary purposes and compliance with legal obligations. After that, this data is deleted or anonymised, unless further retention is necessary.

• Account data is retained for as long as the account remains active and for a reasonable period thereafter for administrative, security or legal purposes.

• Audience lists held with advertising platforms are refreshed periodically. Data that no longer appears in the list after a refresh is removed from the list at the platform. Sneleentaxi does not retain the list for longer than necessary for the campaign period concerned.

15. Security of personal data

Sneleentaxi takes appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, unauthorised disclosure, alteration or other forms of unlawful processing.

These measures may include access restrictions, logging, encryption where appropriate, network and system security, backup and recovery measures, vendor assessments, internal procedures, confidentiality obligations and periodic evaluation of risks and security measures.

To the extent that sneleentaxi has certifications, audits or other demonstrable security measures in place, these apply only within their defined scope. No security system can guarantee absolute security.

16. Mandatory provision of data

In some cases, providing personal data is necessary in order to book, carry out or administratively process a ride, or to comply with a legal obligation.

If the necessary data is not provided, sneleentaxi may be unable to enter into an agreement, carry out a ride, process a payment, provide customer service or comply with legal obligations.

17. Rights of data subjects

Data subjects have, to the extent provided for by the GDPR, the following rights.

• The right to access the personal data processed by sneleentaxi about them.

• The right to rectify inaccurate or incomplete personal data.

• The right to erasure of personal data, insofar as a legal basis for this exists.

• The right to restriction of processing in the cases referred to in the GDPR.

• The right to data portability, insofar as this right applies.

• The right to object to processing based on legitimate interests or carried out for direct marketing purposes.

• Where processing is based on consent, the right to withdraw that consent at any time.

Requests relating to these rights can be submitted via support@sneleentaxi.nl. Sneleentaxi will assess each request carefully and respond within the statutory period. If necessary to establish the identity of the requester, additional information may be requested.

Data subjects also have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

18. Changes to this privacy statement

Sneleentaxi may amend this privacy statement from time to time, for example where legislation, services, the platform or the way in which personal data is processed changes. The most recent version will be published on the website or platform. In the event of material changes, sneleentaxi may provide additional notice to data subjects.

19. Contact

For questions about this privacy statement or about the processing of personal data by sneleentaxi, please contact

Sneleentaxi B.V.
Atoomweg 63
3542 AA Utrecht
support@sneleentaxi.nl