Cookie Notice

We have not appointed a formal Data Protection Officer (DPO): our core activities involve neither large-scale, systematic monitoring of data subjects nor large-scale processing of special categories of personal data (Art. 37 GDPR). Our internal contact for cookie and privacy questions is our managing director Jarno Cools, reachable at privacy@taxibuddy.be.

For complaints about privacy or cookies you can always contact us first. You also have the right to lodge a complaint with the Belgian Data Protection Authority (GBA/APD), Drukpersstraat 35, 1000 Brussels — gegevensbeschermingsautoriteit.be. This cookie notice is governed by Belgian law; the courts of the judicial district of Antwerp, Mechelen division, have jurisdiction over disputes. This does not affect your right as a data subject to bring proceedings before the courts of the Member State where you habitually reside (Art. 79(2) GDPR).

Cookies are small text files that a website stores on your device (computer, tablet or smartphone) when you visit it. They are used to make the website work properly, to remember your preferences, or to measure in an anonymised way how the website is used.

In this notice we use "cookies" as an umbrella term. It also covers similar technologies such as localStorage and sessionStorage when they serve the same purposes.

These cookies are needed to make the website work correctly or to remember your explicit choice (e.g. your cookie consent). Under the ePrivacy Directive, no consent is required for these cookies.

In addition, the website uses functional browser storage without any tracking purpose, solely to complete an action you started. After you submit an onboarding request, we store your email address in sessionStorage to show it on the confirmation page (that storage disappears when you close the browser tab). We store the resume token of your request in localStorage, so you can continue the request on the same device, even after you have closed the browser; it stays until your login is linked to the request or until you sign out. For a driver invitation we store the invitation token in localStorage until the invitation has been accepted or handled — the link in the invitation email opens in a new tab. The token is then erased. Beyond that, sessionStorage only keeps progress flags, such as the step of the form you are on, the plan you chose beforehand and the documents you have already read; these contain no personal data.

These cookies and this storage contain no information that could be used to identify or track you commercially.

These cookies measure how visitors use our website so we can improve it. They are only set after you have explicitly clicked "Accept all" in our cookie banner.

We use Google Analytics 4 with Google Consent Mode v2 in "deny-by-default" mode, and we only load the Google script after you have accepted. In practice this means:

• Without your consent the Google Analytics script is not even loaded: no analytics cookies are set and no data is sent to Google.
• With your consent only pseudonymised usage statistics are shared; Google Analytics 4 does not log or store IP addresses.
• We have set the retention period for Google Analytics data to a maximum of 14 months.

With your consent we also measure onboarding conversions (for example a successful request, with the ID of that request, and the activation of a subscription, with the invoiced amount and a transaction reference). To avoid double counting, your browser temporarily stores that conversion data in localStorage (tbPendingPurchase, tbSentPurchases). This storage too only happens after you have accepted, and it is erased when you decline or withdraw your consent.

We consider it important to state this explicitly:

• No marketing cookies — we set no Meta/Facebook Pixel, no LinkedIn Insight Tag, no TikTok Pixel.
• No Google Ads conversion tracking.
• No advertising networks.
• No tracking pixels in our e-mails.
• No cross-site tracking for profile building.

Our website exists solely for B2B acquisition of Belgian taxi companies. We have no advertising business model.

Google is the only third party that can set cookies on our website — the analytics cookies only after you have given consent, and the reCAPTCHA security cookie on the onboarding form on the basis of legitimate interest and, on taxi companies' booking pages, only after consent (see §7):

Transfers to the United States take place under the EU-US Data Privacy Framework (Google is certified), supplemented by the European Commission's standard contractual clauses (SCCs).

For an overview of all external parties that may in any way see personal data of our customers, see our Sub-processor list.

When you fill in certain forms (such as the onboarding form for taxi companies) we use Google reCAPTCHA v3 to distinguish automated requests (bots) from real visitors.

reCAPTCHA collects — even without you clicking anything — limited technical information such as your IP address, browser fingerprint and mouse and typing behaviour on the page, and Google may set its own cookie (_GRECAPTCHA) to calculate abuse scores. The reCAPTCHA script also loads components from Google's domain gstatic.com. This processing only takes place on the page with the form.

Legal basis: legitimate interest (fraud and spam protection). You can find more details in Google's privacy policy and their reCAPTCHA terms.

Booking pages of taxi companies. On the pages where passengers request a ride from a taxi company (/{language}/book/..., also embedded on that company's website), reCAPTCHA only loads after you give your consent. If you refuse, you can still send your request. On those pages TaxiBuddy acts on behalf of the taxi company; the taxi company's privacy notice is on the page.

On your first visit to taxibuddy.be you will see our cookie banner at the bottom with two clear choices:

• Accept all — analytics cookies are set.
• Reject — only the essential cookies remain active.

Until you make a choice, no analytics cookies are set and the analytics script is not loaded (Google Consent Mode v2, deny-by-default).

Your choice is stored in the first-party cookie tb_consent and remains valid for 1 year. After that period we will ask for your consent again.

You can change or withdraw your choice at any time:

• Via our website — click the "Change cookie preferences" button at the bottom of this cookie notice. The cookie banner reappears and you can adjust your choice.
• Via your browser — all modern browsers let you view, block or delete cookies per website. See the instructions for Chrome, Firefox, Safari or Edge.

When you decline or withdraw an earlier consent, we also remove the analytics cookies already set (_ga, _ga_*) from your device.

Blocking all cookies entirely may cause some parts of the website (e.g. the cookie banner itself or your login) to stop working correctly.

Some browsers send a "Do Not Track" signal. There is no legal obligation or international agreement on how websites should handle this signal, and we do not read it separately. Your choice in our cookie banner is decisive — and as long as you do not expressly accept, nothing is loaded or set for analytics anyway (see section 8).

When we start using new cookies or change existing ones, we update this page and the version number above. For significant changes we show the cookie banner again so you can make your choice anew.

Questions about this cookie notice or your cookie preferences?

• E-mail: privacy@taxibuddy.be
• By post: Cools IT Solutions BV — Dorp 4E bus 021, 2820 Bonheiden, Belgium

Lodging a complaint with the Belgian supervisory authority: Data Protection Authority (GBA) — Drukpersstraat 35, 1000 Brussels.