Privacy Policy

This is a translation for convenience. The German version is legally binding.

Last updated: 11 May 2026

1. Data Controller

The data controller within the meaning of the GDPR is:

StepNow Rides & Movers Naeem Ahmad Blumenstraße 8 73779 Deizisau Deutschland

Phone: +49 7153 9292841 Email: info@step-now.de

2. General Information on Data Processing

We process the personal data of our users only to the extent necessary to provide a functioning website and our content and services. Processing regularly takes place only with the user's consent or where a law permits the processing.

3. Legal Basis for Processing Personal Data

• Art. 6(1)(a) GDPR — User consent
• Art. 6(1)(b) GDPR — Necessary for contract performance (booking processing)
• Art. 6(1)(c) GDPR — Legal obligation (e.g. retention requirements)
• Art. 6(1)(f) GDPR — Protection of legitimate interests

4. What Data We Process

For a booking request:

• Name, phone number, email address
• Pickup and destination address, date, time
• Number of passengers, luggage, special requirements
• For business customers: company name, VAT ID
• IP address, timestamp (for fraud prevention, max. 30 days)

For contact inquiries:

• Name, email address, phone (optional)
• Content of your message

On website visit (automatic):

• IP address (anonymized, max. 7 days for server security)
• Browser type, operating system, pages visited (via Plausible Analytics — see below)

5. Third-Party Services

Plausible Analytics (Plausible Insights OÜ, Estonia) We use Plausible for reach measurement. Plausible sets no cookies, collects no personal data, and transfers no data to third countries. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reach analysis).

Postmark (Wildbit LLC, USA) Sending transactional emails (booking confirmations). Email addresses are processed for delivery. Processing on the basis of Art. 6(1)(b) GDPR (contract performance). A data processing agreement is in place.

OpenStreetMap (OpenStreetMap Foundation, UK) For the map on our contact page. OpenStreetMap does not collect personal data for profiling.

6. Your Rights

You have the right to:

• Information (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object (Art. 21 GDPR)
• Complaint to a supervisory authority (Art. 77 GDPR)

Competent supervisory authority: Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

7. Retention Period

Booking data is retained in accordance with commercial and tax law requirements for 10 years. Contact inquiries without business conclusion are deleted after 6 months. IP addresses from server logs are deleted after 7 days.

8. Data Security

We use SSL/TLS encryption for data transmission. Our servers are located in Germany. Access to personal data is restricted to the owner.

9. Contact for Data Protection

For inquiries or to exercise your rights, contact:

Naeem Ahmad info@step-now.de +49 7153 9292841