Important. If there is any conflict between this English summary and the German Datenschutzerklärung, the German version prevails. For all formal data-protection requests (Art. 15–22 GDPR) please refer to the German notice or contact us directly.
1. Data controller
T&M Limousinen Service GmbH, trading as Buskontakt Hamburg
Sportallee 74, 22335 Hamburg, Germany
Phone: +49 40 500 18-20
E-mail: anfrage@buskontakt-hamburg.de
The full legal information (managing director, commercial register, VAT ID) is published in the Impressum.
2. What we collect and why
- Server logs. When you visit our website, the hosting provider (Host Europe GmbH, Cologne, Germany) automatically logs the date, IP address, requested resource, status code, referrer and user-agent string. Logs are kept for a short period for security and abuse prevention. Lawful basis: Art. 6 (1) f GDPR (legitimate interest in operating a secure website).
- Contact form. When you submit the enquiry form on contact.html, we receive the fields you fill in (name, e-mail, optional phone, occasion, passenger count, date, route, message). We use this data exclusively to prepare a quote and reply to your enquiry. Lawful basis: Art. 6 (1) b GDPR (pre-contractual measures) and your consent to the privacy notice. Data is forwarded to our outbound e-mail relay Brevo (Sendinblue SAS, Paris, France) as data processor under a GDPR Art. 28 contract. Mail receipt is hosted on Microsoft 365 (Microsoft Ireland Operations Ltd., Dublin) under EU Data Boundary.
- Cookie consent. Your decision in the cookie banner is stored locally in your browser (
localStorage, keybuskontakt_consent_v1). No personal data leaves your device through this mechanism. Lawful basis: Art. 6 (1) c GDPR (compliance with our duty under § 25 TDDDG). - Web analytics (optional, requires consent). Currently inactive. If activated in the future and you grant consent through the cookie banner, anonymised usage statistics may be collected via Google Analytics 4 (Google Ireland Ltd.). No tracking happens before consent.
3. Cookies and similar technologies
The website uses no third-party tracking cookies by default. We use only the strictly necessary localStorage entry described above to remember your consent decision. If web analytics is activated and you grant consent, additional cookies may be set by Google Analytics; these can be revoked at any time by clearing the consent in your browser or via the „Revoke consent“ option below.
4. Recipients and third countries
- Brevo (Sendinblue SAS, France — EU/EEA). Transactional e-mail relay for the contact form. GDPR Art. 28 data-processing agreement in place.
- Microsoft Ireland Operations Ltd. (Ireland — EU/EEA). Inbound mailbox for
anfrage@buskontakt-hamburg.de. EU Data Boundary applies. - Host Europe GmbH (Cologne, Germany — EU/EEA). Hosting and DNS.
- Google Ireland Ltd. Only if web analytics is activated and you have granted consent. Data may be transferred to Google LLC (USA) under the EU-US Data Privacy Framework.
5. Retention
Enquiry data is retained for the duration of contract handling and afterwards in line with German commercial and tax retention obligations (typically 6 to 10 years for tax-relevant records under §§ 147 AO, 257 HGB). Server logs are kept for a short period (typically 7–14 days) before being purged or anonymised.
6. Your rights
Under GDPR you have the right to:
- access the data we hold about you (Art. 15);
- have inaccurate data rectified (Art. 16);
- request erasure (Art. 17);
- request restriction of processing (Art. 18);
- receive your data in a portable format (Art. 20);
- object to processing based on legitimate interests (Art. 21);
- withdraw any consent you have given, with effect for the future (Art. 7 (3));
- lodge a complaint with a supervisory authority. The competent authority for our seat is the Hamburg Commissioner for Data Protection and Freedom of Information (datenschutz-hamburg.de).
To exercise any of these rights, please contact us at anfrage@buskontakt-hamburg.de. We respond within one month as required by Art. 12 (3) GDPR.
7. Security
The website is delivered over HTTPS. The contact form is protected by a honeypot field, header-injection checks, IP-hashed abuse logging and an origin / referer check against cross-site form spam.
8. Updates
This notice was last updated on 25 May 2026. Substantive changes are mirrored to the binding German Datenschutzerklärung. Please consult the German version for the authoritative current text.