Privacy policy
1. Data controller
SveLinks AB, org. no. 559426-9648, Ekhagegatan 10, 214 59 Malmö, is the data controller for the personal data we process about you.
Contact: info@copenhagenairporttaxi.se or 072-766 36 19.
2. What we process
- When you book: name, mobile number, email, address, flight number, date and time, number of passengers, luggage, extras (such as a child seat), your message to the driver, language and price.
- When you write to us or ask for a quote: name, contact details and your message.
- To stop spam: an encrypted (hashed) value of your IP address, deleted after at most one day.
We never ask for a personal ID number or sensitive information. Please don't put sensitive details, such as health information, in your message. If you need help, such as space for a wheelchair, just tell us what we need to know.
3. Why, and our legal basis
- To drive your trip, send confirmations, reminders and changes by email and text message, and contact you about the trip. Legal basis: our contract with you (Article 6(1)(b) of the GDPR).
- To answer enquiries and give quotes: Article 6(1)(b) (before a contract).
- To keep accounts of the trips: our legal obligation under the Swedish Bookkeeping Act (Article 6(1)(c)).
- To protect the website and bookings against spam and misuse, and to keep a log of changes to bookings: our legitimate interest in running a secure service (Article 6(1)(f)).
We don't use your data for marketing, send no newsletters and make no automated decisions about you.
4. Who receives your data
The driver of your trip gets the details needed for the trip. We only share data with authorities when the law requires it, and we never sell it.
These providers process data on our behalf as data processors, under a data processing agreement, and may only use it to provide their service to us:
- Vercel Inc. (USA): runs the website. Bookings and forms are processed on servers in Stockholm (EU).
- Supabase Inc. (USA): the database with bookings and enquiries. Data is stored on servers in the EU.
- Resend Inc. (USA): sends emails such as confirmations and changes.
- Cloudflare Inc. (USA): spam protection (Turnstile) on the booking and the forms.
5. Maps and addresses
When you use these features, your browser loads them directly from another company, which then receives your IP address and what you search for. That company is itself responsible for this data:
- OpenStreetMap Foundation (United Kingdom): the map on the contact page, only after you click “Show map”.
6. Transfers outside the EU/EEA
Some of these providers are US companies. Transfers to the USA are based on the European Commission's standard contractual clauses and, where the provider is certified, the EU-US Data Privacy Framework (Commission decision of 10 July 2023). For the United Kingdom, the Commission's adequacy decision applies. Write to us if you'd like to see the safeguards.
7. How long we keep your data
- Bookings: until the end of the seventh year after the calendar year in which the financial year ended, as the Swedish Bookkeeping Act requires (chapter 7, section 2). Then we delete them.
- Enquiries and quotes that don't lead to a trip: no more than 12 months after our last contact.
- The encrypted IP value used against spam: at most one day.
- The booking draft in your own browser: until the booking is sent or you delete it (see the cookie policy).
8. Your rights
You have the right to see the data we hold about you and to have incorrect data corrected. You can also ask for erasure, for restriction of processing and to receive your data (data portability). You can object to processing based on our legitimate interest.
Some data must be kept under the Bookkeeping Act even if you ask for erasure. Write to info@copenhagenairporttaxi.se. We reply within one month.
9. Complaints to the Swedish Authority for Privacy Protection
You can complain about how we handle your data to Integritetsskyddsmyndigheten (IMY, the Swedish Authority for Privacy Protection), Box 8114, 104 20 Stockholm, Sweden, imy@imy.se, imy.se.
10. Changes
We update this page when we change how we handle data, for example if we change provider. The date at the top shows the latest change.