BFR Handicap GmbH

Privacy

Data Protection Notice

This notice applies to the websites/sections reachable at /taxi-lydia and /bht-transfer. It reflects Swiss data protection law and the EU GDPR for visitors from the EU/EEA.

1) Controller & Contact

The controller for the site you are visiting is the respective company:

If your request concerns multiple sites, please contact Lydia Buyet and we will route it appropriately.

2) Categories of Data & Purposes

a) Website delivery & security (server logs)

Data processed: IP address, date/time, URL, referrer, device/browser data, error codes. Purpose: provide the site, ensure security, troubleshoot (legitimate interests / Art. 6(1)(f) GDPR). Retention: typically 7-30 days.

b) Contact & booking

When you call, email, message via WhatsApp, or submit a form, we process your name, contact details, message and ride details (e.g., pickup/drop-off, assistance needs). Purpose: respond to requests, quotes and perform transport (contract / Art. 6(1)(b) GDPR). Retention: for handling your request and statutory retention (e.g., accounting records up to 10 years).

c) Customer management & billing

We process identity/contact data, ride details, billing/payment info, and any special assistance notes you provide. Purpose: perform the contract, customer service and accounting (Art. 6(1)(b) & (c)). Retention: as required by law/business needs.

d) Cookies, analytics & third-party tools (if used)

We process necessary cookies, for example for the session, based on legitimate interests (Art. 6(1)(f)). On your first visit, a notice offers two buttons: «Decline» and «Accept». We store your choice without any identifier in your browser for 12 months (localStorage, entry cookie_consent_v1). You can change it at any time via «Cookie settings» at the foot of every page.

Statistics with Google Analytics: Only after «Accept» do we load Google Analytics 4 from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The purpose is statistics about how the website is used. Google sets the cookies _ga and _ga_<measurement ID>, and data may be transferred to Google LLC in the USA (EU-US Data Privacy Framework, Swiss-U.S. Data Privacy Framework). We do not use Google Analytics for advertising, the advertising storage is denied. Without «Accept» and after «Decline», Google Analytics is not loaded. You can withdraw your choice at any time via «Cookie settings» at the foot of every page. We use no other services such as advertising or embedded maps.

Spam protection: The contact forms of Taxi Lydia and BHT Transfer are protected by Cloudflare Turnstile. Turnstile checks whether a request comes from a human. To do so it processes IP address and browser data. Provider: Cloudflare Inc., USA. The check is necessary for a working form and runs without consent; the cookies set in the process are technically necessary.

3) Legal Bases

4) Recipients & Transfers

We may share data with IT/hosting providers, email/telephony vendors, payment/invoicing providers, and authorities where required by law. Where data is transferred outside Switzerland/EU/EEA (e.g., to the USA), we use appropriate safeguards such as Standard Contractual Clauses (SCCs) and additional measures where appropriate.

Fill in your host and service providers here (e.g., hosting company, email provider, analytics vendor).

5) Your Rights

You may request access, rectification, deletion, restriction, and portability, and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time (no effect on past processing). EU/EEA residents can lodge a complaint with their supervisory authority; in Switzerland, the FDPIC is competent.

6) Security

We use industry-standard technical and organizational measures (e.g., TLS, access controls, backups). No method is 100% secure, but we continuously improve safeguards.

7) Children

Our services are aimed at adults/guardians arranging transport. If you believe a minor provided data without consent, please contact us.

8) Retention

We keep data only as long as necessary for the purposes described or as required by law (e.g., accounting retention). Then we delete or anonymize it.

9) Changes

We may update this notice; see the date below.

Last updated: 2026-11-07