Privacy · English Summary

Privacy Notice.
English summary.

This is a courtesy English summary of how Buskontakt Hamburg handles personal data. The legally binding version is the German Datenschutzerklärung, drafted under German law and the EU General Data Protection Regulation (GDPR / DSGVO).

Important. If there is any conflict between this English summary and the German Datenschutzerklärung, the German version prevails. For all formal data-protection requests (Art. 15–22 GDPR) please refer to the German notice or contact us directly.

1. Data controller

T&M Limousinen Service GmbH, trading as Buskontakt Hamburg
Sportallee 74, 22335 Hamburg, Germany
Phone: +49 40 500 18-20
E-mail: anfrage@buskontakt-hamburg.de

The full legal information (managing director, commercial register, VAT ID) is published in the Impressum.

2. What we collect and why

  • Server logs. When you visit our website, the hosting provider (Host Europe GmbH, Cologne, Germany) automatically logs the date, IP address, requested resource, status code, referrer and user-agent string. Logs are kept for a short period for security and abuse prevention. Lawful basis: Art. 6 (1) f GDPR (legitimate interest in operating a secure website).
  • Contact form. When you submit the enquiry form on contact.html, we receive the fields you fill in (name, e-mail, optional phone, occasion, passenger count, date, route, message). We use this data exclusively to prepare a quote and reply to your enquiry. Lawful basis: Art. 6 (1) b GDPR (pre-contractual measures) and your consent to the privacy notice. Data is forwarded to our outbound e-mail relay Brevo (Sendinblue SAS, Paris, France) as data processor under a GDPR Art. 28 contract. Mail receipt is hosted on Microsoft 365 (Microsoft Ireland Operations Ltd., Dublin) under EU Data Boundary.
  • Cookie consent. Your decision in the cookie banner is stored locally in your browser (localStorage, key buskontakt_consent_v2). No personal data leaves your device through this mechanism. Lawful basis: Art. 6 (1) c GDPR (compliance with our duty under § 25 TDDDG).
  • Google services via Google Tag Manager (requires consent). We use Google Tag Manager (Google Ireland Ltd.) to manage the services below. It loads only after you consent to Statistics or Marketing. Before your consent there is no connection to Google at all — no cookies, and no data (not even your IP address) is sent. After consent, Google Consent Mode v2 communicates your granular choice so that only the services you allowed become active.
    • Google Analytics 4 — with your Statistics consent, for pseudonymised usage statistics (IP truncated within the EU/EEA). Lawful basis: Art. 6 (1) a GDPR, § 25 (1) TDDDG.
    • Google Ads (conversion tracking & remarketing) — with your Marketing consent, to measure ad performance and show you Buskontakt ads on other sites. Lawful basis: Art. 6 (1) a GDPR, § 25 (1) TDDDG.

3. Cookies and similar technologies

The website uses no third-party tracking cookies by default. We use only the strictly necessary localStorage entry described above to remember your consent decision. After you consent, Google Analytics and/or Google Ads may set additional cookies; you can change or withdraw your choice at any time via the „Cookie settings“ link in the footer or the button below.

4. Recipients and third countries

  • Brevo (Sendinblue SAS, France — EU/EEA). Transactional e-mail relay for the contact form. GDPR Art. 28 data-processing agreement in place.
  • Microsoft Ireland Operations Ltd. (Ireland — EU/EEA). Inbound mailbox for anfrage@buskontakt-hamburg.de. EU Data Boundary applies.
  • Host Europe GmbH (Cologne, Germany — EU/EEA). Hosting and DNS.
  • Google Ireland Ltd. Google Tag Manager, Google Analytics 4 and Google Ads — only after you have granted the corresponding consent. Data may be transferred to Google LLC (USA) under the EU-US Data Privacy Framework.

5. Retention

Enquiry data is retained for the duration of contract handling and afterwards in line with German commercial and tax retention obligations (typically 6 to 10 years for tax-relevant records under §§ 147 AO, 257 HGB). Server logs are kept for a short period (typically 7–14 days) before being purged or anonymised.

6. Your rights

Under GDPR you have the right to:

  • access the data we hold about you (Art. 15);
  • have inaccurate data rectified (Art. 16);
  • request erasure (Art. 17);
  • request restriction of processing (Art. 18);
  • receive your data in a portable format (Art. 20);
  • object to processing based on legitimate interests (Art. 21);
  • withdraw any consent you have given, with effect for the future (Art. 7 (3));
  • lodge a complaint with a supervisory authority. The competent authority for our seat is the Hamburg Commissioner for Data Protection and Freedom of Information (datenschutz-hamburg.de).

To exercise any of these rights, please contact us at anfrage@buskontakt-hamburg.de. We respond within one month as required by Art. 12 (3) GDPR.

7. Security

The website is delivered over HTTPS. The contact form is protected by a honeypot field, header-injection checks, IP-hashed abuse logging and an origin / referer check against cross-site form spam.

8. Updates

This notice was last updated on 25 May 2026. Substantive changes are mirrored to the binding German Datenschutzerklärung. Please consult the German version for the authoritative current text.

Call Form