Last updated: 7 August 2026
Your privacy matters to us.
This Privacy Policy explains how personal data is collected, used, shared and protected when you use TRAFIGO, including when you:
We process personal data in accordance with the General Data Protection Regulation (GDPR), the Danish Data Protection Act and other applicable data protection legislation.
The entity responsible for your personal data depends on how you interact with TRAFIGO and which entity provides the relevant service.
For a ride in Denmark, the licensed Danish taxi dispatch office (kørselskontor) responsible for the ride is normally the data controller for personal data processed for the purpose of arranging, providing, documenting and administering that ride.
The Danish TRAFIGO dispatch offices are:
TRAFIGO ApS
CVR 44926784
Thorsvej 1
8722 Hedensted
Denmark
and
Connect+ ApS
CVR 44926687
Thorsvej 1
8722 Hedensted
Denmark
The dispatch office responsible for a particular ride will be identified in connection with the booking and/or receipt.
GOTRAFIGO LLP
Partnership No. OC461299
71–75 Shelton Street
Covent Garden
London WC2H 9JQ
United Kingdom
GOTRAFIGO LLP operates and supports parts of the TRAFIGO platform and acts as agent in connection with services offered through the platform.
For processing carried out on behalf of a Danish dispatch office, GOTRAFIGO LLP may process personal data as a service provider and data processor.
Where GOTRAFIGO LLP independently determines the purposes and means of a specific processing activity, for example in relation to its own legal obligations, platform security or the establishment or defence of legal claims, it may act as an independent data controller for that processing.
Where two or more TRAFIGO entities jointly determine the purposes and means of processing, they may act as joint controllers in accordance with applicable data protection law.
You can exercise your privacy rights through the Privacy & Data Rights contact form on the TRAFIGO website or in the TRAFIGO app, regardless of which TRAFIGO entity is responsible for the relevant processing.
The personal data we collect depends on how you use TRAFIGO.
We may collect:
When you request or take a ride, we may process information including:
Danish legislation requires licensed dispatch offices to collect and retain certain information concerning rides, including vehicle, Driver, time, distance, payment and GPS information.
When necessary to provide a ride, we process location information such as:
Your device may allow you to control whether TRAFIGO can access your precise location.
Where access to your device location requires consent under applicable law, we will request that consent.
You can normally book a ride by manually entering a location even if device-location access is disabled, where that functionality is available.
When you pay electronically, we may process:
Payment card information may be processed directly by an external regulated payment service provider.
TRAFIGO will receive the information necessary to identify and administer the transaction.
If you contact us, we may process:
When you use our app or website, we may collect technical information including:
If you use TRAFIGO on behalf of a company or organisation, we may also process:
If you contact TRAFIGO regarding becoming or acting as an Operator or Driver, we may process information relevant to that relationship.
This may include:
Additional privacy information may be provided where necessary for specific Operator or Driver processing.
You may book a ride for another person.
If you provide another person's personal data to TRAFIGO, you should only provide information reasonably necessary for the ride and ensure that you are entitled to provide it.
We may process the passenger's:
Where appropriate, information about our processing may also be made available directly to the passenger.
You may choose to provide information concerning accessibility or other requirements necessary for us to provide an appropriate ride.
Some information may constitute health data or another special category of personal data under the GDPR.
We do not require information about a medical diagnosis where information about the practical requirement is sufficient.
For example, it will normally be sufficient to tell us that a wheelchair-accessible vehicle is required.
Where processing constitutes processing of special-category personal data, we will only process it where an appropriate condition under Article 9 GDPR applies.
Where required, this may include your explicit consent.
You may withdraw consent at any time where consent is the legal basis for processing.
We only process personal data where we have a lawful reason to do so.
We use personal data to:
The legal basis is primarily that processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
Danish dispatch offices are legally required to collect and retain specified information about rides and Driver shifts.
This includes certain GPS, vehicle, Driver, timing, distance and payment information.
Where we process this information because legislation requires us to do so, the legal basis is compliance with a legal obligation.
We process transaction and payment information to:
Depending on the processing, the legal basis is performance of a contract, compliance with a legal obligation and/or our legitimate interests in administering and protecting our business.
We process personal data to:
The legal basis may be performance of our contract with you, compliance with legal obligations and our legitimate interests in providing effective customer support and resolving disputes.
We may process personal data to:
The legal basis is normally our legitimate interests in keeping TRAFIGO and its users safe and secure and, where applicable, compliance with legal obligations.
Our legitimate interests will only be relied upon where those interests are not overridden by your rights and freedoms.
We may use data to:
Where the information can reasonably be anonymised, we may use anonymised or aggregated information instead of identifiable personal data.
The legal basis may be our legitimate interests in operating and improving our services.
Where consent is required for analytics technologies, cookies, SDKs or similar technologies, such processing will only take place after the required consent has been obtained.
We may send marketing communications where you have agreed to receive them or where otherwise permitted by applicable law.
Where consent is required, the legal basis is your consent.
You may withdraw marketing consent at any time.
Service messages relating to a booking, payment, account, safety issue or important change to TRAFIGO are not marketing communications.
Our website and app may use cookies, SDKs and similar technologies.
Technologies that are strictly necessary for the operation, security or functionality of a service may be used without marketing consent where permitted by law.
Analytics, advertising or other non-essential technologies will only be used where we have an appropriate legal basis and, where required, have obtained your consent.
More information is available in our Cookie Policy and cookie consent settings.
TRAFIGO may use automated systems to support parts of the service.
These may include systems used to:
These systems will not normally make a decision based solely on automated processing that produces legal effects or similarly significantly affects you within the meaning of Article 22 GDPR.
If TRAFIGO introduces automated decision-making falling within Article 22 GDPR, we will provide the additional information and safeguards required by law.
We only disclose personal data where there is a legitimate reason for doing so.
Depending on the ride or service, personal data may be shared with:
The TRAFIGO dispatch office responsible for the ride.
Information necessary to perform the ride may be provided to the relevant Operator and Driver.
This may include:
Drivers and Operators only receive information reasonably necessary for their role.
GOTRAFIGO LLP may process information in its role as agent and platform service provider as described in this Privacy Policy.
Payment and transaction information may be shared with banks, card acquirers, payment gateways and other payment providers where necessary to process a transaction.
We may use carefully selected suppliers for services such as:
Where a supplier processes personal data on our behalf, we require an appropriate data processing agreement and appropriate data protection safeguards.
Where a ride is paid for or arranged through a company, public authority or other organisation, relevant information about the ride may be made available to that organisation where necessary for account administration, billing, auditing or the performance of the applicable agreement.
We may disclose personal data where required or permitted by law to authorities including:
A Danish dispatch office is specifically required by taxi legislation to make certain collected ride data available to competent authorities upon request.
Information may be disclosed where necessary to lawyers, auditors, accountants, insurers and other professional advisers.
TRAFIGO operates using entities and service providers that may be located in different countries.
This means that personal data may in some circumstances be transferred outside the European Economic Area (EEA).
GOTRAFIGO LLP is established in the United Kingdom.
The European Commission has recognised the United Kingdom as providing an adequate level of protection for personal data under the GDPR.
Personal data may therefore currently be transferred from the EEA to the United Kingdom on the basis of the European Commission's adequacy decision.
Where personal data is transferred to another country outside the EEA that is not covered by an adequacy decision, we will use an appropriate transfer mechanism as required by the GDPR.
Depending on the circumstances, this may include:
We do not keep personal data for longer than necessary, except where legislation requires a minimum retention period or information is required for the establishment, exercise or defence of legal claims.
Different categories of data therefore have different retention periods.
Under Danish taxi legislation, dispatch offices are required to retain detailed statutory ride data for at least five calendar years plus the current calendar year.
This includes certain:
We cannot delete this information earlier where Danish law requires us to retain it.
Accounting material and supporting transaction documentation is generally retained for the period required by Danish accounting legislation.
This will normally be five years from the end of the financial year to which the material relates.
Account information is retained for as long as your account remains active and thereafter only for the period reasonably necessary for account administration, fraud prevention, dispute handling and legal compliance.
Information that is no longer required will be deleted or anonymised.
Support correspondence and complaint information is retained for as long as necessary to resolve the matter and for a reasonable period afterwards where required to document the case or deal with possible legal claims.
Technical logs and security information are retained only for as long as reasonably required for security, troubleshooting, fraud prevention and platform operation, unless a longer period is necessary in connection with an investigation or legal claim.
Information used for marketing is processed until you withdraw your consent or otherwise object to the processing, subject to any limited retention necessary to document that your marketing preference has been respected.
We may anonymise personal data so that it can no longer reasonably be linked to an identifiable person.
Properly anonymised information is no longer personal data under the GDPR.
We may use anonymised and aggregated information for:
Where legislation requires certain data to be supplied for statistical or transport-planning purposes, we will process and provide such information in accordance with applicable law.
We apply technical and organisational measures designed to protect personal data against:
Measures are selected according to the nature of the information and the risks associated with the processing and may include access controls, authentication, logging, secure communications, encryption where appropriate, backups, supplier controls and internal procedures.
Access to personal data is limited to persons and organisations that require the information for legitimate purposes.
No information system can be guaranteed to be completely secure, but we continuously work to maintain security appropriate to the risks involved.
If a personal data breach occurs, we will investigate and respond in accordance with applicable data protection law.
Where required, the relevant supervisory authority will be notified.
Where a breach is likely to result in a high risk to your rights and freedoms, we will also notify you where required by the GDPR.
Depending on the circumstances, you have the following rights concerning your personal data.
You may request confirmation of whether we process personal data about you and obtain access to that information.
You may ask us to correct inaccurate personal data or complete incomplete information.
You may ask us to delete personal data in circumstances where the GDPR gives you a right to erasure.
The right to erasure is not absolute.
For example, we cannot delete information that we are legally required to retain under Danish taxi, accounting or other legislation.
In certain circumstances, you may ask us to restrict how we process your personal data.
Where processing is based on consent or contract and is carried out by automated means, you may in certain circumstances receive personal data that you provided to us in a structured, commonly used and machine-readable format.
You may object to processing based on our legitimate interests on grounds relating to your particular situation.
We will then stop the processing unless we can demonstrate compelling legitimate grounds for continuing or the information is necessary for the establishment, exercise or defence of legal claims.
You have an unconditional right to object to processing for direct marketing purposes.
Where processing is based on your consent, you may withdraw that consent at any time.
Withdrawal does not affect the lawfulness of processing carried out before your consent was withdrawn.
Where Article 22 GDPR applies, you may have rights including the right to obtain human intervention, express your point of view and contest a decision.
You can submit a privacy request using the Privacy & Data Rights contact form on the TRAFIGO website or in the TRAFIGO app.
You do not need to know which TRAFIGO entity holds the information before submitting a request.
We will route the request to the relevant data controller where necessary.
We may need to request information from you to verify your identity before disclosing or changing personal data.
We will respond without undue delay and normally within one month, as required by the GDPR.
In complex cases, the response period may be extended where permitted by law. If this happens, you will be informed.
Exercising your GDPR rights is generally free of charge.
If you are unhappy with how we process your personal data, we encourage you to contact us first through the Privacy & Data Rights contact form so that we can investigate the matter.
You also have the right to complain to a competent data protection supervisory authority.
For processing for which a Danish TRAFIGO entity is responsible, the Danish supervisory authority is:
Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Denmark
Further information is available at datatilsynet.dk.
Your right to complain to a supervisory authority is not affected by contacting TRAFIGO first.
TRAFIGO may process information relating to children where a ride is booked for or includes a child.
We seek to collect only the information necessary to safely provide the relevant ride.
Where consent is relied upon for processing personal data relating to a child in connection with an information society service, the applicable requirements concerning children's consent will be followed.
Our app or website may contain links to or integrate services operated by third parties.
A third party may process personal data under its own privacy policy where it acts as an independent data controller.
We encourage you to review the privacy information provided by those third parties.
This may include, for example, certain payment, mapping or external authentication services.
We may update this Privacy Policy where our services, technology, corporate structure or legal obligations change.
The current version will always be available on the TRAFIGO website.
Where a change materially affects how we process your personal data, we will provide additional notice where required by law.
The date at the top of this Privacy Policy shows when it was last updated.
Privacy questions and requests to exercise data protection rights must be submitted through the Privacy & Data Rights contact form on the TRAFIGO website or in the TRAFIGO app.
TRAFIGO ApS
CVR 44926784
Thorsvej 1
8722 Hedensted
Denmark
Connect+ ApS
CVR 44926687
Thorsvej 1
8722 Hedensted
Denmark
GOTRAFIGO LLP
Partnership No. OC461299
71–75 Shelton Street
Covent Garden
London WC2H 9JQ
United Kingdom
The relevant data controller for a particular Danish ride will be the dispatch office responsible for that ride.
If you are unsure which entity is responsible for your personal data, submit your request through the Privacy & Data Rights contact form and we will direct it to the appropriate entity.
