This policy explains what personal data OhridAirportTaxi collects when you book a ride, message us or use the TaxiGo Rider app, the legal grounds we rely on, how long we keep it, who we share it with, and the rights you can exercise. Last updated 28 August 2026.
Data controller
OhridAirportTaxi is the data controller for personal data processed on ohridairporttaxi.com, through phone, WhatsApp or Viber bookings, and in the TaxiGo Rider app. That means OhridAirportTaxi decides why and how this information is used.
- Controller
- OhridAirportTaxi
- Address
- Ohrid, North Macedonia
- Phone
- +389 74 605 769
Contact the controller at the email or phone above for privacy questions and data-subject requests. Dispatch is available 24 hours a day, every day.
Data and privacy
- Why do we collect your name and phone number?
- We use your name so drivers can identify you at pickup. Your phone number helps verify your account and allows direct contact during an active ride.
- Is my information safe?
- OhridAirportTaxi stores account and trip data in Firebase. Drivers only need access to contact details when a ride is active.
Legal grounds for processing
We process personal data under these GDPR legal bases (Article 6). The basis depends on why we use the information.
- Contract (Art. 6(1)(b))
- Bookings, rider accounts, trip records, and contact details needed to arrange a taxi, assign a driver, and communicate about your ride, including when you book by website, phone, WhatsApp, or Viber.
- Legal obligation (Art. 6(1)(c))
- Records we must keep where accounting, tax, or other law requires it.
- Legitimate interests (Art. 6(1)(f))
- Running a secure website (including Cloudflare), remembering your language, measuring site use with Google Analytics, showing Google AdSense ads on some pages, handling complaints, and defending legal claims. You can object to processing based on legitimate interests.
- Consent (Art. 6(1)(a))
- Where you choose to share a page on Facebook or X, or to message us on WhatsApp or Viber, those platforms process data under their own terms. You can withdraw that choice by not using those buttons or apps.
How long we keep your data
We keep personal data only as long as needed for the purpose it was collected, or as required to handle complaints, accounting, and legal obligations. When it is no longer needed, we delete it or store it in a form that no longer identifies you. You can ask us to erase your data as described under Your GDPR rights.
- Website bookings and messages
- Name, phone, pickup, destination, and message details from the website or contact form are kept to arrange the ride and follow up if needed. We then keep them only as long as necessary for service quality, complaints, or legal claims, and remove them when those needs end or when a valid erasure request applies.
- Rider accounts and trips
- Account and trip records in Firebase are kept while your account is active so we can provide rides, history, and support. After you ask us to delete your account, we remove personal data we no longer need, except information we must keep for legal, safety, or accounting reasons.
- Analytics and ads
- Google Analytics and AdSense store visitor data according to Google’s own retention settings and policies. We use analytics for aggregated website statistics, not to identify you for bookings.
- Language setting
- Your language choice stays in your browser (localStorage) until you clear site data.
Who we share data with
We do not sell your personal data. We share it only with people and providers who need it to run the taxi service or the website.
- Assigned drivers
- The driver for your ride receives the contact and location details needed for pickup and drop-off. Drivers only need access to those details while the ride is active.
- Dispatch and support
- OhridAirportTaxi dispatch staff use your booking details to confirm the ride, assign a driver, and answer your request.
- Service providers
- Google Firebase stores accounts, trips, website bookings, and messages. Cloudflare delivers and protects the website. Mapbox provides maps and location search on some pages. Website booking alerts may be sent to dispatch through Telegram. If you message us on WhatsApp or Viber, Meta processes that conversation on their platforms. Pingdom helps us measure website performance.
- Analytics and advertising
- Google Analytics receives page-view and basic device or browser information. On some pages Google AdSense and its advertising partners may process data to show ads, as described in Google’s advertising policies. The privacy and terms pages themselves do not display ads.
Security measures
Security measures protecting personal data include the technical and organisational measures (GDPR Article 32) described below, appropriate to a small taxi operator, against unauthorised access, loss, or misuse.
- Encryption in transit
- ohridairporttaxi.com is served over HTTPS (TLS 1.2 or higher). Booking and account traffic to Firebase also uses encrypted connections.
- Encryption at rest
- Personal data stored in Google Firebase (accounts, trips, and website messages) is encrypted at rest on Google’s infrastructure. We do not store payment card numbers on this website.
- Access control
- Account and trip data in Firebase is limited to OhridAirportTaxi systems and staff who need it for dispatch. Assigned drivers only receive passenger contact and location details while a ride is active.
- Hosting and network protection
- The website is delivered through Cloudflare (HTTPS, DDoS and bot protection). Public booking and contact forms can use Cloudflare Turnstile to block automated abuse. Google Firebase stores accounts, trips, and website messages with Google’s infrastructure controls.
- Organisational measures
- Dispatch handles passenger data only to arrange rides and answer requests. Staff and drivers follow need-to-know access and may use passenger details only for the assigned trip. We do not sell personal data.
Social media (Facebook and X)
We do not embed Facebook or X widgets, plugins, or tracking pixels on this website. The footer links to our Facebook page, and share buttons open Facebook or X share pages if you choose to share a link.
- If you open our Facebook page or the Facebook share button, Facebook may collect your IP address, browser and device information, cookies, the page you came from, and (if you are logged in) your Facebook profile. Facebook is an independent controller for that processing. Facebook privacy policy
- X
- If you use the X (Twitter) share button, X may collect your IP address, browser and device information, cookies, the page you came from, and (if you are logged in) your X account. X is an independent controller for that processing. X privacy policy
You can avoid this by not clicking those links. We also use Open Graph and Twitter Card tags so a preview can appear when someone shares a page; those tags do not load Facebook or X scripts on our site.
Essential rules for passengers
- Account integrity
- Register with your real name and valid mobile number.
- Zero tolerance
- Verbal or physical abuse toward drivers can result in a permanent ban.
- Punctuality
- Be at the pickup location within 5 minutes of driver arrival.
- Cleanliness
- Damage or excessive mess in the vehicle may result in a cleaning fee.
Website bookings and contact
When you send a booking or contact form on this website, we receive the details you enter (such as name, phone, pickup, destination, or message). We use this information only to respond to your request and arrange your taxi ride.
This website saves your language choice in your browser (localStorage) so you do not have to select it again on your next visit. We also use Google Analytics to understand how visitors use the site (pages viewed and basic device or browser info). Analytics cookies help us improve the website; they are not used to identify you for bookings.
On some pages we show Google AdSense ads. AdSense and its partners may use cookies or similar technologies to serve relevant ads; see Google’s advertising policies for details. The privacy policy page itself does not display ads.
Your GDPR rights
If we process your personal data (for example when you book a taxi, contact us, or create an account), you have the following rights under the EU General Data Protection Regulation (GDPR).
- Access
- You can ask us for a copy of the personal data we hold about you.
- Rectification
- You can ask us to correct inaccurate or incomplete personal data.
- Erasure
- You can ask us to delete your personal data when we no longer have a legal reason to keep it.
- Restriction
- You can ask us to limit how we use your personal data in certain cases.
- Portability
- You can ask to receive your personal data in a structured, commonly used format, or to have it sent to another provider where technically feasible.
- Objection
- You can object to processing of your personal data that is based on our legitimate interests, including direct marketing.
To exercise any of these rights, email privacy@ohridairporttaxi.com or call +389 74 605 769. We will respond within one month. You may also lodge a complaint with your local data protection authority.
Privacy contact
Dedicated privacy contact (DPO email) for privacy-related enquiries and data-subject requests: privacy@ohridairporttaxi.com. The controller handles these requests.
Use this dedicated email or the privacy contact form below. Put “Privacy request” in the subject. We aim to reply within one month. General bookings stay at info@ohridairporttaxi.com.