Privacy Policy
Last updated: 31 July 2026
This policy explains what personal data AlpRoads collects when you use this website or book a transfer with us, why we collect it, who we share it with, and what rights you have. It applies to alproads.com and to the booking system that runs behind it.
Who we are
The controller of your personal data is:
AlpRoads GmbH
Salzmannstraße 152
48159 Münster
Germany
Email: [email protected]
Phone: +371 2020 7474
If you have any question about this policy or about how we handle your data, contact us at the address above and we will respond within 30 days.
What data we collect
When you book a transfer
- Contact details — your name, email address and phone number.
- Journey details — pick-up and drop-off addresses, date and time of travel, number of passengers, luggage and any special requirements such as child seats or ski equipment.
- Flight details — where you provide a flight number, so we can track arrival times and adjust the pick-up.
- Payment details — handled entirely by our payment providers. We receive confirmation that a payment succeeded, the amount, and the last four digits and card type. We never see or store your full card number.
- Notes you send us — anything you write in the booking form, live chat, WhatsApp or email.
When you create an account
Your name, email address, phone number and a password, which is stored only as a cryptographic hash and cannot be read by us or by anyone else. We also keep the history of bookings made on the account.
When you simply browse the site
- Your IP address, browser type and operating system, and the pages you visited, recorded in standard server logs.
- Text you type into the location search boxes, which is sent to Google in order to return address suggestions.
- Where you have given consent, analytics and advertising identifiers. See our Cookie Policy for the detail.
Why we use it, and on what legal basis
| What we do | Legal basis (GDPR Art. 6) |
|---|---|
| Arrange, confirm and carry out your transfer, including passing details to the assigned driver | Performance of a contract |
| Take payment and issue invoices | Performance of a contract |
| Send booking confirmations, reminders and changes to your journey | Performance of a contract |
| Answer your questions by email, phone, WhatsApp or live chat | Legitimate interest in supporting our customers |
| Keep accounting and tax records | Legal obligation |
| Prevent fraud and keep the service secure | Legitimate interest in protecting the business and its customers |
| Analytics, advertising measurement and marketing email | Consent, which you may withdraw at any time |
Who we share it with
We do not sell your personal data. We share it only with the parties below, and only as far as each of them needs it.
- Your driver or partner transport operator — receives your name, phone number, pick-up and drop-off address, time and flight number, so that they can collect you.
- Stripe (Stripe Payments Europe Ltd, Ireland) — card payment processing.
- PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg) — where you choose to pay by PayPal.
- Google (Google Ireland Ltd) — address autocomplete, distance and travel-time calculation, and, subject to your consent, analytics.
- Our email provider — delivery of booking confirmations and other transactional email.
- Our hosting and infrastructure providers — including a content delivery network that terminates connections to this website.
- The provider behind our live chat assistant — receives the content of your chat messages in order to generate a reply. Do not send payment card details or identity-document numbers through chat.
- Professional advisers and authorities — where we are legally required to disclose information.
Some of these providers may process data outside the European Economic Area. Where that happens, the transfer is covered by an adequacy decision of the European Commission or by Standard Contractual Clauses.
How long we keep it
- Booking and invoice records — 10 years, as required by German commercial and tax law.
- Account data — for as long as your account is open, and then deleted within 12 months of closure apart from records we must keep for tax purposes.
- Support correspondence and chat transcripts — 24 months.
- Server logs — 12 months.
- Marketing consent records — until you withdraw consent, and then for a further 3 years as evidence that consent was given and withdrawn.
Your rights
Under the GDPR you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased, where we have no continuing legal reason to keep it;
- ask us to restrict how we use your data, or object to our using it on the basis of legitimate interest;
- receive your data in a portable, machine-readable format;
- withdraw consent at any time, which does not affect anything we did lawfully before you withdrew it; and
- complain to a supervisory authority.
To exercise any of these, email [email protected]. We may ask you to confirm your identity before we act, so that we do not disclose your data to someone else.
The supervisory authority for our region is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (ldi.nrw.de). You may also complain to the authority where you live or work.
Marketing
We send marketing email only to people who have asked for it. Every marketing message carries an unsubscribe link, and unsubscribing takes effect immediately. Booking confirmations, reminders and changes to your journey are not marketing — you will continue to receive those for any booking you hold, because we need them to deliver the service you paid for.
Automated decision-making
We do not make decisions that produce legal or similarly significant effects about you by automated means alone. Our live chat assistant is automated and may answer questions and prepare a quote, but a booking is confirmed and carried out by our team.
Children
Our service is not directed at children, and we do not knowingly collect data from anyone under 16 except as a named passenger on a booking made by an adult. If you believe a child has given us data directly, contact us and we will delete it.
Security
All traffic to this website is encrypted in transit. Passwords are stored only as hashes. Access to booking data is restricted to staff who need it. No system is perfectly secure, and we cannot guarantee absolute security, but we will notify you and the supervisory authority of any breach affecting your data where the law requires it.
Changes to this policy
We will post any change on this page and update the date at the top. Where a change materially affects your rights, we will tell you by email.