Privacy Policy

Privacy Policy

This is a translation for convenience. The German version is legally binding.

Last updated: 11 May 2026

1. Data Controller

The data controller within the meaning of the GDPR is:

StepNow Rides & Movers Naeem Ahmad e.K. Blumenstraße 8 73779 Deizisau Deutschland

Phone: +49 155 1066 9395 Email: accounts@step-now.de

2. General Information on Data Processing

We process the personal data of our users only to the extent necessary to provide a functioning website and our content and services. Processing regularly takes place only with the user's consent or where a law permits the processing.

3. Legal Basis for Processing Personal Data

• Art. 6(1)(a) GDPR — User consent
• Art. 6(1)(b) GDPR — Necessary for contract performance (booking processing)
• Art. 6(1)(c) GDPR — Legal obligation (e.g. retention requirements)
• Art. 6(1)(f) GDPR — Protection of legitimate interests

4. What Data We Process

For a booking request:

• Name, phone number, email address
• Pickup and destination address, date, time
• Number of passengers, luggage, special requirements
• For business customers: company name, VAT ID
• IP address, timestamp (for fraud prevention, max. 30 days)

For contact inquiries:

• Name, email address, phone (optional)
• Content of your message

On website visit (automatic):

• IP address, time, requested page and browser identifier in server log files (max. 7 days, to secure operation; Art. 6(1)(f) GDPR)

We do not use any analytics or tracking tools. Fonts are served from our own server.

5. Cookies and Consent

We only use strictly necessary cookies: the language choice (stepnow_locale) and the record of your consent decision (sn_consent, 12 months). Legal basis: § 25(2) no. 2 TDDDG. You can change or withdraw your consent at any time via the "Cookie settings" link in the page footer.

6. Service Providers and Third Parties

Hosting and email (Hostinger International Ltd., Cyprus) Our website and mailboxes are operated by Hostinger. This involves the server log data named above and the content of emails (e.g. booking confirmations). A data processing agreement under Art. 28 GDPR is in place.

OpenStreetMap (OpenStreetMap Foundation, United Kingdom) The map on our contact and about pages is loaded only after your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Loading the map tiles transmits your IP address to the OpenStreetMap Foundation. The United Kingdom is covered by an EU Commission adequacy decision. Without consent the map is not loaded; you can open an external link instead.

7. Your Rights

You have the right to:

• Information (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object (Art. 21 GDPR)
• Complaint to a supervisory authority (Art. 77 GDPR)

Competent supervisory authority: Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

8. Retention Period

Booking data is retained in accordance with commercial and tax law requirements for 10 years. Contact inquiries without business conclusion are deleted after 6 months. IP addresses from server logs are deleted after 7 days.

9. Data Security

We use TLS encryption for data transmission. Access to personal data is restricted to the owner.

10. Contact for Data Protection

For inquiries or to exercise your rights, contact:

Naeem Ahmad e.K. accounts@step-now.de +49 155 1066 9395