Skip to content
BoRaSiToLimousine Service
DE

Legal

Privacy policy

As of: October 2026

1. Controller

The controller for the processing of personal data on this website and when handling your ride is:

BoRaSiTo Limousine Service
Owner: Todor Georgiev
Borkumer Straße 17, 65199 Wiesbaden, Germany
Phone: +49 176 3123 1011
E-mail: borasito.tesla.trans@gmail.com

2. In brief

  • This website sets no cookies and uses no analytics or advertising services.
  • Fonts, scripts and images are part of the website. No fonts, maps or scripts are loaded from other providers.
  • When you submit the request form, your details are transmitted encrypted and stored in a database so that we can process your request (see section 4).
  • We use your data only to answer your request and to carry out and bill your ride. We administer it ourselves, collect only what is necessary and delete it within the periods in section 7.

3. Hosting and server log files

This website is provided through the Lovable service (Lovable Labs AB, Regeringsgatan 25, 111 53 Stockholm, Sweden). When pages are called up, the provider processes technically necessary data, such as the IP address, date and time of the request, the page requested, the amount of data transferred, the status code and information about browser and operating system, in order to deliver the pages and ensure security. The pages may be delivered to your device through servers and delivery networks of the provider and its sub-processors.

The legal basis is Art. 6 (1)(f) GDPR. Our legitimate interest is the secure and stable operation of the website. The provider determines how long this access data is stored; details are in its privacy information (lovable.dev/privacy).

The provider's terms of service apply to the service; there is currently no separate data processing agreement under Art. 28 GDPR. Insofar as the provider processes data, such as access and security data, under its own responsibility for its own purposes, the provider is itself responsible for that processing. Transfers to countries outside the European Economic Area take place on the basis of standard contractual clauses under Art. 44 et seq. GDPR or an adequacy decision of the EU Commission.

The requests from the form are stored in a database of Lovable Cloud. The storage location is in the European Union (Ireland). Access is restricted to us and protected by a login. We retrieve the data through a non-public administration area. We are responsible for this data (section 1).

4. Contact and ride requests

Request form

When you use the request form, we store the details you enter: name, e-mail address, phone number, preferred way of contact, type of ride, pickup and destination address, date and time, return ride and flight number if applicable, number of passengers, luggage, whether you would like a child seat, and your notes. We also store a reference number, the time of receipt, the time at which you acknowledged this privacy policy, and the processing status. The transmission is encrypted (HTTPS). Please do not enter sensitive information, such as health information, in the notes.

Protection against abuse

When you submit the form, we compute a check value (hash) from your IP address with a secret key, which cannot be reversed, and store it with the time for 24 hours in order to limit automated mass requests. We do not store your IP address itself. The legal basis is Art. 6 (1)(f) GDPR. Our legitimate interest is the security of the form.

Reply by e-mail

If you would like to be contacted by e-mail, we reply by e-mail (quote, confirmation or decline). We use the e-mail sending of the Lovable platform for this. Your e-mail address and the content of our message are processed in the course of this. In the database we store only which type of message was sent and when (without the text and without the recipient address), in order to be able to prove that it was sent. We do not send advertising and we use neither tracking pixels nor link tracking.

E-mail to us

If you write to us by e-mail, we process the information you give us.

We receive and manage e-mails through Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Gmail). There is no separate data processing agreement for this account; the provider's privacy terms apply. Insofar as data is transferred to countries outside the European Economic Area, this happens only on the basis of an adequacy decision of the EU Commission (for example the EU-US Data Privacy Framework for certified providers) or standard contractual clauses under Art. 44 et seq. GDPR.

Note: e-mails are often transmitted unencrypted. Please do not send us particularly sensitive information by e-mail.

Phone

If you call us, we receive your phone number and the content you tell us and process them only to answer your request.

Purpose and legal basis

We process this data to answer your request, to make a quote and to prepare the ride. The legal basis is Art. 6 (1)(b) GDPR (pre-contractual measures and performance of a contract). If the request does not concern a contract, it is Art. 6 (1)(f) GDPR. Our legitimate interest is then answering your request.

5. Carrying out the ride

To carry out and bill a booked ride we process name, contact details, pickup and destination address, ride time, flight number if applicable, number of passengers, luggage and special requests (for example a child seat) and, for payment by bank transfer, the payment details required for it.

With the flight number we check the status of your flight through publicly available flight information in order to adjust the pickup for delays. We do not pass on your personal data in doing so.

The legal bases are Art. 6 (1)(b) GDPR (performance of a contract) and Art. 6 (1)(c) GDPR (legal obligations, for example recording and retention duties under the Passenger Transport Act and under commercial and tax law).

Under Section 49 (4) PBefG we also document in an order book when a ride order was received by us (with name, pickup and destination, pickup time and agreed price) and keep this record for one year.

The provision of this data is necessary for a booking. Without it we cannot carry out the ride.

6. Recipients of your data

We do not pass on your data for advertising purposes. Recipients may be:

  • Lovable and its sub-processors as operators of the technical platform (hosting, database, e-mail sending, see sections 3 and 4),
  • drivers whom we assign to your ride; they receive the information needed for the ride (time, pickup address, destination, number of passengers, luggage, notes and contact detail),
  • other service providers who support us, for example tax advisers and bookkeeping, and our e-mail provider (see above),
  • banks for payments by bank transfer,
  • authorities, insofar as we are legally obliged to, for example during inspections of hire-car services.

There is no automated decision-making, including profiling.

7. Storage period

Requests that do not lead to a ride (unanswered, declined, cancelled or without acceptance of our quote) are deleted by us at the latest six months after receipt, automatically in the database.

If a ride comes about, we keep the request and the order book (name, contact details, addresses, price) in the database for one year from receipt of the order, because the Passenger Transport Act requires this record (Section 49 (4) PBefG). The data is then deleted automatically. Invoices and booking records that we need for accounting and tax are kept separately outside this database and for as long as commercial and tax law requires: six years (for example for business letters), eight years (for booking records such as invoices) or ten years (for books and annual accounts); the periods begin at the end of the calendar year.

The check value used for protection against abuse (section 4) is deleted after 24 hours. Deleted data may remain in database backups for a short time (according to the provider, about 14 days). The provider deletes the server access data according to its own periods (section 3).

8. Cookies and local storage

This website sets no cookies and stores no information in your browser or device beyond what is technically necessary. Consent under Section 25 of the German TDDDG is therefore not required, and we show no cookie banner. A non-public administration area that only we use stores technically necessary session data in the browser after login. Visitors to this website are not affected.

9. Your rights

You have the following rights against us regarding your personal data:

  • access (Art. 15 GDPR),
  • rectification (Art. 16 GDPR),
  • erasure (Art. 17 GDPR),
  • restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR).

Right to object: Insofar as we process data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). Please use the contact details above.

If you have given us consent, you can withdraw it at any time with effect for the future. Please use the contact details above.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information, Postfach 3163, 65021 Wiesbaden, Germany (datenschutz.hessen.de).

10. Other

We will adapt this privacy policy if our offer or the legal situation changes. The version published here applies.