Privacy Policy

GDPR-compliant · Last updated: 2026-01-01

1. Data controller

SamiGo Taxi (KvK XXXXXXX), Malden, Netherlands, is the data controller for personal information processed through samigo.net. Contact: info@samigo.net.

2. What we collect

Account data: name, email, phone, password hash
Booking data: pickup/dropoff addresses, scheduled time, price
Driver data: license, taxipas, vehicle details, BSN, IBAN, uploaded documents
Payment data: processed by Mollie B.V. — we only store transaction IDs
Technical data: IP, browser, language preference
Optional: Google Analytics 4 (anonymized) if you accept cookies

3. Why we process it (legal basis)

Contract: to deliver the ride you booked (Art. 6(1)(b) GDPR)
Legal obligation: tax records, BTW invoicing (Art. 6(1)(c))
Legitimate interest: fraud prevention, service improvement (Art. 6(1)(f))
Consent: marketing emails, analytics cookies (Art. 6(1)(a))

4. How long we keep it

Account data: until you delete your account
Booking and invoice data: 7 years (Dutch tax law)
Driver application documents: until rejected + 6 months, or while active
Analytics data: 14 months (Google Analytics default)

5. Who we share with

Drivers: name, phone, pickup/dropoff for the rides they accept
Mollie B.V. (Amsterdam): payment processing
Resend Inc.: transactional emails
Google: Maps, Calendar, Analytics (with consent)
Hostinger International: VPS hosting (data stays in EU)
Dutch tax authorities, when legally required

We do not sell your data to third parties for marketing.

6. Your rights

You have the right to:

Access your data (Art. 15)
Correct inaccurate data (Art. 16)
Delete your data (Art. 17 — "right to be forgotten")
Export your data in machine-readable format (Art. 20)
Object to processing (Art. 21)
Withdraw consent at any time

To exercise any right, email info@samigo.net. We respond within 30 days.

7. Cookies

We use a minimum of cookies needed to operate the site (session, language). Analytics and marketing cookies require your explicit consent (Cookie banner).

8. Security

We use HTTPS everywhere, hashed passwords (bcrypt), database backups, and restrict admin access to authorized personnel. No system is 100% secure — report suspected breaches to info@samigo.net.

9. Complaints

If you believe we mishandled your data, you can file a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) at autoriteitpersoonsgegevens.nl.