Privacy policy
This is a translation for information purposes. The Spanish version prevails.
Last updated: 21 October 2026. General text pending legal review.
1. Data controller
- Controller: [NOMBRE Y APELLIDOS O RAZÓN SOCIAL DEL TITULAR] (full name or company name of the owner)
- Tax ID (NIF): [NIF]
- Address: Madrid, Spain
- Contact email: taxmad360@gmail.com
TaxMad is a non-profit service that puts customers in touch with licensed taxi drivers in Madrid. TaxMad does not charge for the taxi service: the customer pays the taxi driver directly.
2. What data we process
If you book a taxi (customer):
- Name, phone number and, if you provide it, email address.
- Pick-up and destination addresses, date and time, number of passengers and trip needs (adapted vehicle, baby seat, luggage, pet).
- Chat messages with the taxi driver during the service.
- IP address, only to prevent abuse (limiting the number of consecutive bookings).
- If you create an account: email, password (stored encrypted by our provider), profile photo if you upload one, and trip history.
If you are a taxi driver:
- Name, phone number, email, licence number, number plate, car model and profile photo.
- Whether you are online or offline, the services you accept and complete, and text and voice messages.
- Your location, only while you are online with the app open: we keep only your latest position (no history), to know whether there are taxis near a customer who wants a taxi "Now". Nobody sees it: customers are only told whether there are taxis nearby and, if TaxMad turns it on, an approximate number of online taxis within 2 km (1, 2-3, or 4 or more), never where they are. It is deleted when you go offline and stops counting after 10 minutes.
- Action log: we record who accepts, releases, completes or cancels each service, in order to resolve incidents.
3. Why we use it and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Managing your booking and notifying taxi drivers | Performance of the request you make (art. 6.1.b) |
| Allowing the taxi driver who accepts to contact you | Performance of the request (art. 6.1.b) |
| Managing customer and taxi driver accounts | Performance of the service (art. 6.1.b) |
| Preventing abuse and fake bookings | Legitimate interest (art. 6.1.f) |
| Action log to resolve incidents | Legitimate interest (art. 6.1.f) |
| Sending you the booking confirmation by email | Performance of the request (art. 6.1.b) |
We do not use your data for advertising, we do not build commercial profiles and we do not sell data to anyone.
4. Who sees your data
- The taxi driver only sees your name and phone number when they accept your service and for as long as it lasts. Before accepting, they only see the route, the time and the trip needs.
- The customer sees the name, photo, car and number plate of the assigned taxi driver, and their phone number for as long as the service lasts.
- The TaxMad administrator can see bookings and accounts in order to manage the service.
Providers that process data on behalf of TaxMad (data processors):
- Supabase (database and accounts), on servers in the European Union.
- Vercel (website hosting and cookie-free visit statistics, Vercel Web Analytics).
- Google Analytics (visit statistics), only if you accept analytics cookies (see the cookie policy).
- Google Maps (address autocomplete, maps and route calculation).
- EmailJS and, where applicable, the email provider (sending confirmations).
- Browser notification services (Google, Apple or Mozilla), for alerts to taxi drivers.
Some of these providers may process data outside the European Economic Area; in that case they do so with the safeguards provided for in the GDPR (for example, standard contractual clauses).
5. How long we keep it
- Voice notes (messages between drivers and with the administration): deleted after 24 hours.
- Service text chat: deleted 30 days after the service ends.
- Text messages between drivers and with the administration: each message is deleted after 30 days. Anyone can delete their own messages earlier; the administrator can delete group messages. The administrator does not read private conversations between drivers.
- Taxi driver's and customer's phone numbers: no longer shown once the service ends.
- Tracking link without an account: stops showing the details 24 hours after the trip ends.
- Bookings and action log: for as long as necessary to resolve incidents and meet legal obligations, up to a maximum of [PLAZO A CONFIRMAR] (period to be confirmed).
- Accounts: while they are active. If closed, they are blocked and only the necessary history data is kept.
6. Your rights
You can request access, rectification, erasure, objection, restriction of processing and portability of your data by writing to taxmad360@gmail.com, stating which right you are exercising.
If you believe we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) (www.aepd.es).
7. Security
Data travels encrypted (HTTPS). Access is restricted by role: each taxi driver and each customer can only see their own data, and the administrator logs in with two-step verification.
8. Minors
The service is intended for adults. If a minor needs a taxi, a responsible adult must book it.
9. Changes
If we change this policy, we will publish the new version here with its date.