Privacy policy

The controller for data processing on this website, in the web app and in the mobile app “Triplandoo” is:

• Christoph Pölzleitner
• Grenzweg 2, 8974 Mandling, Austria
• Email: info@triplandoo.com

You can find further details in the legal notice.

Triplandoo is software for transfer companies. This policy applies to the website www.triplandoo.com, the web app app.triplandoo.com and the Triplandoo mobile app for Android and iOS.

Transfer companies use Triplandoo to manage their customers’ bookings, such as names, contact details, pickup and drop-off addresses, flight numbers and the assignment of drivers. The booking form on transfer companies’ websites also records, using a random session identifier, which steps were reached, so the company can see where bookings are abandoned.

The respective transfer company is the controller for this data. Triplandoo processes it only on that company’s behalf under a data processing agreement pursuant to Art. 28 GDPR. If you booked as a passenger through a transfer company, please contact that company with questions about your data.

• User account: first and last name, email address, password (stored only as a hash), country, language, role, company membership and sign-in times. If you sign in with Google, we also store your Google account identifier. The purpose is to provide your account and our service (Art. 6(1)(b) GDPR).
• Conclusion of contract: when you accept our terms and conditions, we store the time, IP address and browser identifier as proof (Art. 6(1)(c) and (f) GDPR).
• Payments: payments are processed by Stripe. You enter card and account details directly with Stripe; we only receive information about the payment status (Art. 6(1)(b) GDPR).
• Contact and support: when you write to us via the contact form, by email or through a support ticket, we process your details and your message to handle your request (Art. 6(1)(b) and (f) GDPR).
• Technical operation: when you open our pages, the server processes technically necessary data such as your IP address, the time and the requested address, to deliver the content and to protect the service, for example against abusive sign-in attempts (Art. 6(1)(f) GDPR).

• Location: only if you allow it, the app reads your location while it is open and shows it in the app. Your location is currently neither transmitted to us nor stored. You can revoke the permission at any time in your device settings. On Android devices, location is determined through Google Play services.
• Sign-in: the app stores your sign-in cookie and your appearance setting on your device so you stay signed in. It retrieves your transfers and bookings from our server.
• The app contains no advertising and no analytics or tracking tools.

We only use technically necessary cookies and no cookies for advertising or analytics. That is why we do not ask for consent for them.

• TMSSESSION: keeps you signed in. Valid until 12 hours after your last activity, or up to 30 days if you choose “Stay signed in”.
• NEXT_LOCALE: remembers your chosen language for one year.
• Your browser’s local storage: keeps entries in the booking form for the current session and interface settings.

We only share data where this is necessary to run our service:

• easyname (Austria): hosting of our servers in data centres in Vienna and sending of emails.
• Stripe: payment processing.
• Google: only for “Sign in with Google”. The sign-in and registration pages load a script from Google for this, which gives Google your IP address.
• OpenStreetMap (Nominatim): converts addresses from bookings into coordinates.
• OpenSky Network: provides flight status based on the flight number.
• OpenFreeMap: provides map tiles for maps in the web app, which transmits your IP address.
• A backup storage provider, on whose server a daily data backup is stored.

Where recipients process data outside the EU or EEA, this is based on an adequacy decision of the European Commission or on the EU standard contractual clauses.

We store account data for as long as your account exists. After that we delete it unless statutory retention obligations apply, for example seven years for invoices and accounting records under § 132 of the Austrian Federal Fiscal Code (BAO).

We keep daily backups on our server for 14 days.

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw any consent you have given at any time.

To have your account deleted or to exercise your rights, write to us at info@triplandoo.com. How deletion works is described at www.triplandoo.com/delete-account.

You can also lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde): Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

We update this policy when our service or the legal situation changes. The version published here applies.