Version dated 10 October 2026
This Privacy Policy explains how we process the personal data of users of eurotransfer24.eu, customers, and passengers of Baltic Family Transfer.
We treat personal data as part of our responsibility for your journey. We only request information that is genuinely necessary to respond to an enquiry, arrange a transfer, communicate with the passenger, and comply with applicable legal obligations.

The data controller is:
R. M. W. SERWIS Michał Raszczewski
Trading name / service: Baltic Family Transfer
Address: ul. Zawiejska 139, 80-016 Gdańsk, Poland
NIP: 5833433429
REGON: 389451221
Website: eurotransfer24.eu
Email for personal data enquiries:
taxi.eurotransfer24@gmail.com
In this Privacy Policy, we refer to the above entity as the “Controller”, “we”, or “Baltic Family Transfer”.

The amount of personal data we process depends on how you contact us and on the journey that needs to be arranged.
This may typically include:

• first and last name;
• telephone number;
• email address;
• pickup address or location;
• destination;
• travel date and time;
• flight number or other information necessary to arrange the pickup;
• number of passengers;
• luggage details;
• information about the need for a child seat or booster seat;
• passenger details where the person making the booking and the passenger are different individuals;
• messages and information provided during correspondence;
• information about additional travel requirements voluntarily provided by the user and necessary to fulfil the booking;
• technical data related to the use of the website, such as IP address, device type, browser, cookie information, and activity on the website, to the extent permitted by law and by the user’s consent preferences.

We follow the principle of data minimisation and do not request copies of documents, extensive information about a user’s family, or other information “just in case” unless it is necessary for a specific journey.

Our services may involve journeys with children, elderly passengers, or situations where one person arranges a journey for another.
Where a journey is arranged for a child, the child’s personal data should be provided by a parent, legal guardian, or another person who is authorised to arrange the journey.
If the person making the booking provides personal data relating to another passenger, we assume that they are authorised to provide the information necessary to arrange the journey.
Where a passenger’s personal data has not been obtained directly from that passenger, we provide the required information about the processing of their data in the cases and within the time limits required by the GDPR.
We do not use children’s personal data for advertising profiling or for direct marketing aimed specifically at children.

We do not ask you to provide medical information, diagnoses, or other sensitive personal data unless it is necessary to arrange a specific journey safely.
If you voluntarily provide information about your health or other special categories of personal data and that information is genuinely necessary to arrange the journey, we process it only to the extent required for that purpose.
Where the law requires explicit consent for such processing, the legal basis is Article 9(2)(a) of the GDPR — the explicit consent of the person to whom the data relates.
Such information is not used for marketing or for any other incompatible purpose.

Purpose:

• to respond to your enquiry;
• to check whether the requested journey can be arranged;
• to calculate the price;
• to clarify the route and travel requirements.

Legal basis:
Article 6(1)(b) GDPR — processing necessary to take steps at your request before entering into a contract.

Purpose:

• to confirm the booking;
• to arrange the pickup and the journey;
• to communicate with the person making the booking and with the passenger;
• to provide the driver with the information necessary to carry out the journey;
• to keep the customer informed of any changes;
• to fulfil the agreed travel arrangements.

Legal basis:
Article 6(1)(b) GDPR — processing necessary for the performance of a contract or to take steps necessary before entering into a contract.

We may process personal data where this is necessary to comply with tax, accounting, or other obligations imposed by applicable law.
Legal basis:
Article 6(1)(c) GDPR.

We may retain information relating to a booking, correspondence, the agreed price, confirmations, and the performance of a journey for the purposes of:

• handling complaints and claims;
• preventing misuse or abuse;
• establishing, exercising, or defending legal claims;
• maintaining evidence of the agreed arrangements and their performance.

Legal basis:
Article 6(1)(f) GDPR — our legitimate interest in protecting our rights, safeguarding the business, and resolving disputes.

Optional analytics and advertising technologies are used only where the required user consent has been obtained.
Legal basis:
Article 6(1)(a) GDPR — consent, together with the applicable provisions of Polish law governing the storage of information on, or access to information from, a user’s device.
You may refuse the use of these technologies without losing access to the core functionality of the website.

Marketing messages, offers relating to future journeys, and promotional communications sent by email, telephone, or messaging services are sent only where there is a valid legal basis and, where required, the user’s prior consent.
Refusing marketing communications does not affect your ability to book a transfer.
You may withdraw your marketing consent at any time.

Providing the basic personal data necessary to calculate and arrange a transfer is voluntary. However, without this information, we may be unable to:

• calculate the journey;
• contact the passenger;
• determine the pickup location and time;
• complete the booking or perform the contract.

Providing personal data for advertising and analytics purposes is voluntary and is not a condition of booking the core service.

This website is built using the Tilda platform.
When you use forms on the website, your personal data may be technically processed through Tilda’s infrastructure as part of the technology services it provides.
For personal data collected through our website forms, Baltic Family Transfer determines the purposes and means of processing, while the platform provider processes the data within the scope of the services provided and the applicable contractual terms.
As the platform provider’s infrastructure may involve processing personal data outside the European Economic Area, any such transfers are subject to the safeguards required by applicable law, including the European Commission’s Standard Contractual Clauses where applicable.

Our website may use cookies and similar technologies.
Cookiebot / Usercentrics is used to manage consent for non-essential cookies.
Cookies may fall into the following categories:
Strictly necessary cookies — used to ensure the website functions properly, maintain security, and preserve essential technical settings. Where a cookie is strictly necessary to provide a service requested by the user, separate consent may not be required in the cases provided for by law.
Functional cookies — help provide additional website features and improve usability.
Analytics cookies — help us understand how visitors use the website.
Marketing cookies — may be used to measure advertising performance and conversions, support remarketing, or personalise advertising content.
Analytics, marketing, and other non-essential technologies are activated only in accordance with the user’s choices where consent is required by law.
You can change or withdraw your consent at any time through the “Cookie Settings” tool available on the website.
Withdrawing consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
The current list of cookies used on the website, including their providers, purposes, and retention periods, is available in the cookie declaration generated by Cookiebot.

Where the user has provided the required consent, the website may use Google services for the following purposes:

• analysing website traffic;
• measuring the performance of advertising campaigns;
• identifying the source of a website visit;
• measuring conversions;
• limiting the frequency of repeated advertising;
• personalising advertising where the user has separately consented to this.

Depending on the website configuration, Google Consent Mode may be used to communicate the user’s consent status to Google.
Without the required consent, non-essential advertising and analytics cookies should not be set.
Recipients of personal data processed through Google services may include Google Ireland Limited. Certain processing activities may also be carried out by other companies within the Google group or by its service providers, subject to the applicable safeguards for international transfers of personal data.
Здесь limiting the frequency of repeated advertising лучше, чем буквальное limiting repeat advertising, а identifying the source of a website visit естественнее для англоязычной Privacy Policy.

You may contact us directly through WhatsApp, Telegram, Viber, imo, or another available messaging service.
In that case, we process the personal data you provide through the chosen communication channel in order to respond to your enquiry and arrange the journey.
At the same time, the operator of the relevant messaging service may independently process:

• your telephone number;
• account information;
• technical data;
• the content and metadata of messages, to the extent determined by the rules of the relevant platform.

Such processing is also subject to the privacy policy of the operator of the messaging service you choose.
We recommend that you do not send copies of passports, medical records, or other sensitive documents through messaging services unless this is genuinely necessary.

Where necessary, personal data may be shared with:

• the driver or transport partner assigned to perform a specific journey;
• providers of hosting, website, form, and IT infrastructure services;
• Tilda;
• the provider of the cookie consent management system, Cookiebot / Usercentrics;
• providers of analytics and advertising services, including Google, where the user has provided the required consent;
• the email service provider;
• the operator of the messaging service chosen by the user;
• an accountant, legal adviser, or other professional adviser where necessary;
• public authorities, but only where disclosure is required or permitted by law.

We provide the person carrying out the journey only with the information that is necessary for the relevant stage of providing the service.

Some technology providers may process personal data outside Poland or the European Economic Area (EEA).
Where personal data is transferred internationally, such transfers are made only where an appropriate legal mechanism is in place, for example:

• an adequacy decision adopted by the European Commission;
• the European Commission’s Standard Contractual Clauses;
• other safeguards permitted under the GDPR.

You may contact us for further information about the safeguards or transfer mechanism applicable to your personal data.

We do not retain personal data for longer than is necessary for the purpose for which it was collected.
Data relating to an enquiry that does not result in a booking may be retained for as long as necessary to manage the correspondence and protect against repeated or disputed enquiries. It is then deleted or anonymised unless another lawful basis requires further retention.
Booking information and correspondence relating to a journey may be retained for the duration of the contract and, after the journey has been completed, for as long as necessary to handle possible complaints and to establish, exercise, or defend legal claims.
Personal data contained in accounting or tax records is retained for the period required by applicable law.
Personal data processed solely on the basis of consent is retained until that consent is withdrawn or until the purpose of the processing no longer applies, unless another lawful basis requires certain data to be retained for longer.
Evidence of consent and its withdrawal may be retained for as long as necessary to demonstrate compliance with applicable legal requirements.
The specific retention periods for cookies are set out in the current Cookiebot cookie declaration.

We implement appropriate organisational and technical measures designed to protect personal data against:

• unauthorised access;
• accidental loss;
• unlawful alteration;
• unauthorised disclosure;
• destruction.

Access to personal data is limited to persons who need that information in order to perform the relevant task.
We aim to avoid sending sensitive personal data unless it is genuinely necessary, and we do not retain unnecessary information once the purpose for which it was collected no longer applies.

Subject to the conditions set out in the GDPR, you have the right to:

• obtain confirmation as to whether we process your personal data;
• access your personal data;
• request the correction of inaccurate or incomplete personal data;
• request the erasure of your personal data;
• request the restriction of processing;
• object to processing based on legitimate interests;
• receive your personal data in a portable format where provided for by law;
• withdraw your consent at any time where processing is based on consent;
• object to direct marketing;
• lodge a complaint with a supervisory authority.

To exercise your rights, you may contact us at:
taxi.eurotransfer24@gmail.com
Before responding to your request, we may ask you to provide information reasonably necessary to verify your identity.

If you believe that your personal data is being processed in breach of applicable law, you have the right to lodge a complaint with the Polish supervisory authority:
Prezes Urzędu Ochrony Danych Osobowych / Urząd Ochrony Danych Osobowych
ul. Stanisława Moniuszki 1A
00-014 Warsaw
Poland
Lodging a complaint does not affect any other legal remedies available to you under applicable law.

Where processing is based on consent, you may withdraw that consent at any time.
The withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
You can change or withdraw your consent to cookies through the Cookiebot settings available on the website.
You can withdraw your consent to marketing communications by contacting us or by using the unsubscribe or opt-out method provided in the relevant message.

Baltic Family Transfer does not make decisions about customers that produce legal or similarly significant effects and are based solely on automated processing within the meaning of Article 22 GDPR.
Where advertising platforms are used, advertising profiling may take place in accordance with the user’s consent settings and the rules of the relevant service provider.

The website may contain links or buttons that direct you to third-party websites or applications.
Once you leave our website and access a third-party service, the processing of your personal data may be carried out by the operator of that service in accordance with its own privacy policy.
We recommend reviewing the privacy information and terms of the relevant third-party service before providing it with personal data.

We may update this Privacy Policy where necessary, including where there are changes to:

• applicable law;
• the structure of the website;
• booking methods;
• the technology services we use;
• the categories of personal data we process.

The current version of this Privacy Policy will always be available on eurotransfer24.eu.
Where there is a material change to the way we process personal data, we will update the relevant information before the new processing begins, where required by law.
Last updated: 10 October 2026