Stockholm Chauffeur AB ("we", "us", "our") is the data controller for personal data processed through stockholmchauffeur.com. This policy explains what we collect, why, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR) and the Swedish Data Protection Act.
1. Data we collect
When you request a quote or book a transfer we collect:
- Identity & contact data — name, email, phone number.
- Trip details — pickup and drop-off address, date, time, passenger count, flight number, vehicle preference, notes.
- Communications — emails, SMS and call logs related to your booking.
- Technical data — IP address, browser, device, anonymised page views (essential cookies only — see our cookie policy).
We do not collect special-category data (health, religion, etc.) and we do not buy personal data from third parties.
2. Why we process it (legal basis)
- Contract (GDPR Art. 6.1.b) — to give you a quote, perform the transfer and handle invoicing.
- Legal obligation (Art. 6.1.c) — Swedish bookkeeping law (Bokföringslagen) requires us to retain accounting records for 7 years.
- Legitimate interest (Art. 6.1.f) — operating the website, preventing fraud, improving service quality.
- Consent (Art. 6.1.a) — only when you explicitly opt in to marketing emails. You can withdraw consent at any time.
3. Who we share data with
We share only what is strictly necessary, with these processor categories:
- Our cloud infrastructure and database provider (EU/EEA region).
- Transactional email provider, used to send booking confirmations.
- Google Maps Platform, for address autocomplete inside the booking form.
- The chauffeur or partner operator assigned to your trip — name, phone and trip details only.
- Our accountant and tax authorities, as required by Swedish law.
We do not sell personal data and we do not use it for automated decision-making or profiling.
4. International transfers
Our primary processors are based in the EU/EEA. Where a sub-processor is located outside the EEA (e.g. certain Google services), transfers rely on the European Commission's Standard Contractual Clauses and adequacy decisions where applicable.
5. How long we keep it
- Quote requests that do not become bookings: up to 12 months, then deleted.
- Booking and invoicing records: 7 years (Swedish Bookkeeping Act).
- Marketing subscribers: until you unsubscribe — link in every email.
- Server logs: 30 days for security and abuse prevention.
6. Your rights under GDPR
You have the right to:
- Access the personal data we hold about you (Art. 15).
- Have inaccurate data corrected (Art. 16).
- Have your data erased where there's no overriding legal basis (Art. 17).
- Restrict or object to processing (Art. 18 & 21).
- Receive your data in a portable format (Art. 20).
- Withdraw consent at any time without affecting prior processing.
To exercise any of these rights, email booking@stockholmchauffeur.com. We respond within 30 days. You can also lodge a complaint with the Swedish data protection authority Integritetsskyddsmyndigheten (IMY).
7. Security
Data is stored on EU/EEA servers with encryption in transit (TLS) and at rest. Access is restricted to staff who need it to fulfil your booking. We regularly review our access logs and processor agreements.
8. Contact
Stockholm Chauffeur AB
Email: booking@stockholmchauffeur.com
Phone: +46 76 276 62 54