Privacy Policy Chaufmen

The term Chaufmen or 'us' or 'we' refers to the owner of the website whose registered office is 7 Wharf Ln, Solihull, B91 2LE.

We collect and store the minimum information possible to provide the services you've requested (i.e. to process your order). We may also use this information for auditing, research and analysis to operate and improve our technologies and services.

The term 'you' refers to the user or viewer of our website.

Where required to fulfil your transfer, we may pass selected information to third parties.

We may update this policy from time to time by publishing a new version on our website.

You should check this page occasionally to ensure you are happy with any changes to this policy.

The processing required within this context serves our legitimate interest as well as that of our customers in the continuous improvement of our customer service (Art. 6 para. 1 lit. f GDPR). In this Section we set out:

• • the categories of personal data that we may process;
• • the reason why we may process personal data;
• • the legal basis for processing this data;
• • when we provide your personal data to others;
• • the steps we take to protect your personal data.

We may collect and process data about your use of our website ('analytics data'). The analytics data may include any of the following: your IP address; approximate location, internet browser type and version, your PC's operating system, the source of referral, length of your visit, and website navigation paths, as well as information about the frequency, and pattern of your visits. We gather this data through the Google Analytics service. The legal basis for the processing of this data is our legitimate interests in improving our website and service. The use of Google Analytics is based on your consent (Art. 6 para. 1 lit. a GDPR).

We collect and process data relating to Customer Profiles ('Customer Data'). This data includes: your full name, email address, phone number & billing address). You will be required to provide this data during the process of booking our service. The legal basis for processing this data is for the performance of the contract, in particular for us to be able to reliably communicate with you regarding your bookings as well as organise and provide the service you have requested. The processing that takes place in connection with this is based on Art. 6 para. 1 lit. b GDPR. To the extent necessary, we will transfer your data to the body responsible for the tour or activity. If a transfer to a third country outside the European Economic Area is necessary, this is based on Art. 49 para. 2 lit. b, c GDPR.

We may collect and process personal data relating to Journeys or Transfers ('Journey Data'). This data includes: head passenger name, passenger mobile telephone number, the route of your journey, flight / service numbers & the date and time of your travel. The legal basis for processing this data is for the performance of the contract. Some of the journey data, where required to fulfil your transfer, may be passed to third-parties, for example independent taxi drivers. If a transfer to a third country outside the European Economic Area is necessary, this is based on Art. 49 para. 2 lit. b, c GDPR. Where possible, without impacting the quality of service, this sharing of data is restricted to un-identifiable information, for example when checking the availability of a third-party only the date, time, waypoint postcodes, number of passengers and type of vehicle are provided.

We do not collect and process data relating to the payment of services through our website or customer service agents ('Transaction Data'). We do not store/save the financial details i.e. credit/debit card details of the customers and thus have no knowledge of or access to these information at any stage of the payment process. All payments are actioned, authorised and processed by STRIPE or PAYPAL via its secure server(s). Transaction data includes: card number, card expiry date & card security code, as well as some customer data: billing address and card holder's name. Transaction data is stored by third-party service, Stripe or PayPal. The transaction data may be processed for supplying the purchased services and keeping proper records of those transactions.

We may process information contained in or relating to any communication that you send to or have with us ('correspondence data'). The correspondence data may include: email content, online chat transcripts, call recordings and metadata associated with the communication. The correspondence data may be processed for the purposes of communicating with you. Where possible we avoid collecting transaction data in correspondence data, this is done via warning notices on emails and pausing call recordings during the payment. In the unlikely event transaction data is captured in correspondence data records are deleted and purged from our system. The legal basis for this processing is in the performance of a contract, namely to organize and supply the purchased services. We may process your personal data where necessary, for use in the defence of legal claims in court or another legal proceeding. The legal basis for this is to protect and assert our legal rights, the rights of our customers or the rights of others. We may process any of your personal data where such processing is necessary to comply with a legal obligation to which we are subject, or to protect your interests or the interests of another person.

We may collect non-personal identification information about Users whenever they interact with our Site. Non-personal identification information may include the browser name, the type of computer and technical information about Users means of connection to our Site, such as the operating system and the Internet service provider utilized and other similar information. This data is collated by our log analysis tool as part of our web site visitor statistics. You are not personally identifiable. All websites will perform this type of visitor logging.

We use so-called "cookies" to offer certain functions of our website and to optimise the use of our website. "Cookies" are small files that are stored on your device with the help of your internet browser. Specifically, we use (unless other cookies are specified elsewhere in this privacy policy or our cookie consent) the following cookies: Session cookies: These cookies are needed to store certain technical data during your visit to our website, e.g. to determine whether you have logged in. Persistent cookies: These cookies are needed to store data beyond a browser session if you wish to do so. The legal basis for the use of these cookies is § 15 para. 1 of the German Telemedia Act (TMG) or Art. 6 para. 1 b GDPR, insofar as they are necessary for the use of our website and the functions you have accessed.

How we use cookies Chaufmen uses temporary cookies (small text files stored on a computer). We use them to identify you in a coded form, not using your personal information, to enhance the experience when you browse the site and to make future improvements to the site.

We need your permission to use cookies and will take your continued use as permission. You may delete and block all cookies from our site by changing your browser settings but this will affect the functionality of our website.

We make use of Google Analytics to track usage of our website. They use cookies to see how often people visit the site, how long they stay, and which pages they use. Cookies help us to provide you with a good experience when you browse our website. They are vital to the basic performance of our website. Cookies enable critical authentication and validation, session management, and fraud prevention in addition to enabling us to remember the settings you may have previously applied, such as language or location. We use this information to make our website better and deliver a better service to our customers.

We operate pages or profiles on various social media platforms. Within this context, personal data is processed as described below. If you interact with us via our social media sites or our posts, we will collect and process the information you provide in connection with this, including your user name and any profile photo, if applicable, for example if you mark a post with "Like", share or "retweet", comment or provide other content. When we include social 'plugins', those sites can use cookies. The cookies they set allow them to monitor use but also lets them know whether you're logged in so you can quickly share content on your networks. The data processing in this regard is regularly carried out on the basis of our legitimate interest in providing the corresponding functions on our social media pages (Art. 6 para. 1 lit. f GDPR) and, if applicable, on the basis of your consent vis-à-vis the operator of the respective network (Art. 6 para. 1 lit. a GDPR) or your contractual relationship with the operator (Art. 6 para. 1 lit. b GDPR). Please also note that this content is published on our relevant social media sites according to your account settings and can be accessed by anyone worldwide.

If we include content from other sites they may use cookies to track how people are using their site.

For more detailed information about cookies please visit www.allaboutcookies.org.

This Section sets out our data retention policies, these are designed to ensure that we comply with our legal obligations in relation to the retention and deletion of personal data and are designed so that we maintain the lowest possible level of risk to our customers.

Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary to fulfil the purchased service and our, or a third-parties, legal obligations.

Google Analytics retains data relating to a visit to our website indefinitely, the data collected is non-identifiable. We collect some identifiable analytics data, this is stored for at most 1 month following a visit to our website, at the end of which period it will be deleted from our systems. Your data will be stored by Google Analytics for a period of 14 months. After this period, the data is deleted and only aggregated statistics are kept.The use of Google Analytics is based on your consent (Art. 6 para. 1 lit. a GDPR).

Customer Data will be retained for 6 years from the end of last tax period following the completion of all booked journeys, at the end of which period it will be deleted from our systems. The data retention period will restart should any additional services be purchased during the data retention period, it is retained for this period to ensure compliance with the Finance Act of 1988, Schedule 18, Part 3, Section 21(2) which requires us to preserve relevant transactional information.

Journey Data will be retained for at most 1 year following the completion of the journey in accordance with our legal obligations as a registered Private Hire Operator, at the end of which period it will be deleted from our systems.

Some Transaction Data will be retained for 6 years from the end of the last company financial year they relate to in accordance to our legal obligations as a limited company, at the end of which period it will be deleted from our systems. Correspondence Data will be retained for at most 18 months following its collection, at the end of which period it will be deleted from our systems. Transactional correspondences issued by us are retained for 6 years from the end of last tax period in order to comply with the Finance Act of 1988, Schedule 18, Part 3, Section 21(2) which requires us to preserve relevant transactional information.?

We may retain your personal data where it is vital for use in defence of legal claims in court or another legal proceeding. We may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.

You have the right to demand that we restrict processing in accordance with Art. 18 GDPR. Request access to and obtain a copy of your personal information (commonly known as a “data subject access request”). Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below);

Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes;

Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it; request the transfer of your personal information to another party. If you wish to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact us at info@chaufmen.com.

You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, the Company may charge a reasonable fee if your request for access is clearly unfounded or excessive.

Where you make a request in respect of your rights we will require proof of identification. We may also ask that you clarify your request.

You have the right to receive from us the personal data relating to you that you have provided to us in a structured, commonly used, machine-readable format in accordance with Art. 20 GDPR.We are legally bound to provide/remove this information free of charge within 30 days. This right however is subject to some limitations:

There may be a legal reason we cannot remove the data.

The data may be integral to providing the service, deleting or removing it would result in the cancellation of service. In this case you would be subject to our normal cancellation fees / procedure.

You will be required to supply proof of your identity, in most circumstances we will accept two forms of ID such as a passport, driving license or a copy of a utility bill showing your address listed. This information must be provided by email or post along with your request to which you will receive confirmation of receipt by us within 5 days.

If the request is complicated the timeframe for rectification can be extended by up to two months.

You have the right to lodge a complaint with a supervisory authority.

You have the right to withdraw consent to our use of this data. In some cases this may result cancellation of your service and any relevant charges.

Request correction of the personal information that we hold about you should any information be incomplete or inaccurate;

You benefit from a number of rights in respect of the personal data we hold about you. We have summarised your rights below, and more information is available from the Information Commissioner’s Office website (https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/). These rights apply for the period in which we process your data.

If you have any questions about this Privacy Policy, the practices of this site, or your dealings with this site, please contact us at:

Chaufmen
7 Wharf Ln, Solihull,
B91 2LE
info@chaufmen.com