Privacy Policy
Last updated: September 2026 · Valid for rockettransfer.eu
1. Controller
APELSIN s.r.o., IČO: 52226344, DIČ: 2120955518, IČ DPH: SK2120955518, Koceľova 9, 82108 Bratislava, Slovak Republic.
Contact: office@rockettransfer.eu
2. What data we collect
When you submit a booking or an enquiry, we collect: your name, phone number, email address or messenger contact (WhatsApp, Viber, Telegram, iMessage, SMS) and trip details (route, pickup and drop-off addresses, date, time, flight number, number of passengers, luggage, child seats and your message). If you pay online, the payment is processed by Stripe: you enter your card details in Stripe's secure form, we never see or store them, and we only receive the payment status and amount. Our hosting provider also records technical data such as your IP address in server logs.
3. Purpose & legal basis
We use your data to answer your request, prepare and perform the transfer and take payment (Article 6(1)(b) GDPR — contract or steps before entering into a contract); to keep accounting and tax records (Article 6(1)(c) — legal obligation); and to keep the website secure, prevent fraud and defend legal claims (Article 6(1)(f) — our legitimate interest).
4. Data retention
Booking and enquiry data are kept for no longer than 3 years after your last request. Accounting and tax documents are kept for the period required by law (in Slovakia typically up to 10 years). Technical logs are kept by our hosting provider only for a limited period.
5. Recipients and processors
We share data only where needed to provide the service: EmailJS (delivers booking requests to us); Stripe (Stripe Payments Europe, Ltd. — online payments); Vercel Inc. (website hosting); jsDelivr (CDN that serves the EmailJS script); Google (address suggestions: when you click into an address field, your browser loads Google Maps scripts and the text you type in that field and your IP address are sent to Google's Places service); Komoot GmbH — Photon (backup address suggestions: if Google suggestions are not available, the text you type in an address field and your IP address are sent to photon.komoot.io); OSRM (route preview: the coordinates of the pickup and drop-off points and your IP address are sent to the public routing server router.project-osrm.org to show the route and approximate distance on the map); and partner drivers or carriers who perform the transfer when we use their vehicles (they receive only the trip details they need). If you contact us through WhatsApp, Viber, Telegram, iMessage or SMS, those services process your data under their own policies. We do not sell your data.
6. Transfers outside the EEA
Some of these providers may process data outside the European Economic Area (for example in the USA). In such cases the transfers are protected by appropriate safeguards, such as Standard Contractual Clauses or the EU–US Data Privacy Framework.
7. Your rights
Under GDPR you have the right to access your data, correct inaccuracies, request deletion, restrict or object to processing, and data portability, and — where processing is based on consent — to withdraw your consent at any time. To exercise these rights, contact us at office@rockettransfer.eu.
8. Cookies
This website uses only technical cookies and similar storage needed for it to work, and does not use advertising or analytics cookies. Our payment provider Stripe may use cookies or similar technologies to process payments securely and to prevent fraud. If we add analytics in the future, we will update this policy and ask for your consent where required.
9. Supervisory authority
You have the right to lodge a complaint with the Slovak supervisory authority:
Úrad na ochranu osobných údajov SR, Hraničná 12, 820 07 Bratislava.
dataprotection.gov.sk