Your privacy matters to us. This policy explains how DD 2018 ApS, trading as StarLimousine, collects, uses, shares and protects personal data when you use starlimousine.dk, book transport or contact us.

We process personal data in accordance with the General Data Protection Regulation (GDPR) and the Danish Data Protection Act.

The data controller is DD 2018 ApS, CVR 39550393, Oliefabriksvej 61, 2770 Kastrup, Denmark.

Contact: contact@starlimousine.dk · +45 40 52 15 45.

Depending on how you use our services, we may process:

• Identity and contact: name, email, phone number and language preference.
• Booking and trip: pickup and destination addresses, time, duration, passenger count, flight or ship number, notes for the chauffeur and extras such as a child seat.
• Payment: amount, currency, booking reference and a Stripe payment reference. Card details are handled by Stripe and are never stored by us.
• Communications: the content of emails, calls and WhatsApp messages you send us.
• Technical data: IP address, browser, device and pages you visit, where needed for the site or, with your consent, for statistics and marketing.
• Maps and routing: addresses and coordinates you enter in the price calculator so we can suggest a route and a price. We do not continuously track your location and we do not store a live GPS trail of the trip.

We use personal data for the following purposes:

Providing transport. Name, contact details, addresses, time, flight number and special requests are used to create the booking, review it, confirm or decline it, send emails and carry out the trip. Legal basis: GDPR art. 6(1)(b) (contract, or steps before a contract).

Payment and bookkeeping. Payment references and amounts are used to charge, refund and keep accounts. Legal basis: art. 6(1)(b) and art. 6(1)(c) (the Danish Bookkeeping Act and accounting rules).

Customer service. We answer enquiries, change requests and complaints. Legal basis: art. 6(1)(b) or art. 6(1)(f) (legitimate interest in helping you).

Running and securing the website. Necessary technical data keeps the site working and safe. Legal basis: art. 6(1)(f).

Statistics and marketing. Visit and campaign measurement happens only with your consent. Legal basis: art. 6(1)(a). You can withdraw consent at any time via the cookie settings in the cookie policy.

We do not take automated decisions that produce legal effects about you, and we do not sell your data.

We share only what is needed:

• Chauffeurs. To carry out the trip the chauffeur receives your name, phone number, pickup, destination, time, flight or ship number and your notes. The chauffeur does not receive your card details.
• Processors. Hosting (Vercel), database (Neon), payments (Stripe), email (Resend), maps/routing (Google Maps Platform) and, only with your consent, statistics (Google Analytics) process data on our behalf under data processing agreements.
• Communications. If you write on WhatsApp, Meta also processes the message under its own terms.
• Partners. If a hotel concierge, travel agency or other partner books on your behalf, we share what is needed for that booking, or what you have consented to.
• Authorities. We disclose data where the law requires it, for example to the Danish Tax Agency, the police or the courts.

Some processors may process data outside the EU/EEA. Where that happens, we rely on the European Commission's Standard Contractual Clauses or another valid transfer tool, and we require appropriate safeguards.

We keep personal data only as long as the purpose or the law requires. After that we delete or anonymise it.

• Booking and payment data: 5 years after the end of the financial year of the booking, as required by the Danish Bookkeeping Act. This may be extended if there is a complaint or dispute.
• Quote requests and ordinary correspondence that do not become a booking: no later than 12 months after last contact.
• Addresses used for a quote: only while the quote is relevant, and then as part of the booking if you pay.
• Statistics and marketing data: according to the cookie policy and your consent, typically until you withdraw consent and for no more than 14 months.

Necessary cookies make the site and booking flow work. Statistics and marketing cookies are set only with your consent. See our cookie policy for details, where you can also change your choice.

Under the GDPR you have the right to:

• Access the personal data we process about you, and information about purposes, legal bases, recipients and retention.
• Rectification of inaccurate or incomplete data.
• Erasure where the data is no longer needed, or where you withdraw consent and no other legal basis applies.
• Restriction of processing in the cases the law allows.
• Data portability where processing is based on a contract or consent and is carried out by automated means.
• Object to processing based on our legitimate interests. We will stop unless we have compelling grounds that override your interests, or the processing is needed for legal claims.
• Withdraw consent where processing is based on consent. Withdrawal does not affect processing that was lawful before you withdrew.

Write to contact@starlimousine.dk to use your rights. We will reply without undue delay and within one month at the latest.

You may complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, datatilsynet.dk.

The website and online booking are aimed at adults. Child seats are booked by the adult who enters the contract. We do not knowingly collect children's data for marketing.

We use appropriate technical and organisational measures to protect personal data, and access is limited to people who need it to do their work.

We may update this policy when our processing or the law changes. The current version is always on this page with the date of the latest update.