Privacy Policy

The data controller responsible for the processing of personal data described in this policy is World Transfer, an international transportation brokerage operating from Germany. As the controller, World Transfer determines the purposes and means of processing personal data relating to our corporate clients, website visitors, and business contacts.

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at cs@world-transfer.com. We will respond to legitimate requests within the timeframes required by applicable law.

Where we engage third-party service providers or transfer partners to process data on our behalf, we ensure that appropriate contractual safeguards are in place in line with GDPR requirements.

When you use our website or submit a corporate proposal form, we may collect the following categories of personal data: your name, business email address, telephone number, company name, and any information you provide in free-text fields. We also record your consent to be contacted and the date and context of that consent.

When you proceed to book ground transfer services, we may additionally collect travel-related details such as pickup and drop-off locations, dates and times, passenger names, flight information where relevant, and billing or account references associated with your corporate arrangement.

We automatically collect limited technical data when you visit our website, including IP address, browser type, device information, referring URLs, and pages viewed. This information helps us maintain site security, improve performance, and understand how visitors use our services.

We process personal data to respond to corporate proposal enquiries, prepare and deliver quotations, manage bookings through our partner network, administer corporate accounts, communicate about scheduled transfers, and fulfil our contractual obligations to business clients.

We also process data to comply with legal obligations, prevent fraud, maintain the security of our systems, and pursue our legitimate interests in operating and improving a professional B2B transfer brokerage platform, provided those interests are not overridden by your rights.

The legal bases for processing under the GDPR include: performance of a contract or steps prior to entering into a contract (Art. 6(1)(b)); compliance with legal obligations (Art. 6(1)(c)); your consent where required, for example for certain marketing communications (Art. 6(1)(a)); and our legitimate interests in business operations and platform security (Art. 6(1)(f)).

World Transfer acts as a broker and does not operate vehicles directly. To fulfil bookings, we share necessary personal and travel data with licensed local transfer operators and their dispatch partners in the relevant destination. These partners receive only the information required to perform the booked service.

We may also share data with IT infrastructure providers, email and communication tools, analytics providers, and professional advisers such as legal or accounting firms, where such sharing is necessary and subject to appropriate data processing agreements.

Where personal data is transferred outside the European Economic Area, we implement appropriate safeguards such as Standard Contractual Clauses or rely on adequacy decisions, ensuring a level of protection consistent with GDPR requirements.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Corporate proposal enquiries are typically retained for a defined period to manage follow-up and business development, unless you request earlier deletion where legally permissible.

Booking and transaction records are retained for the duration of the business relationship and for a subsequent period required by commercial and tax law in Germany. Technical log data is generally retained for a shorter period unless needed for security investigations.

When retention periods expire, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

Under the GDPR, you have the right to access your personal data, request rectification of inaccurate data, request erasure in certain circumstances, restrict processing, object to processing based on legitimate interests, and receive your data in a portable format where applicable. You also have the right to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

Our website may use cookies and similar technologies to enable core functionality and, where configured, to collect aggregated analytics on site usage. You can manage cookie preferences through your browser settings. Essential cookies required for site operation may not be disabled without affecting functionality.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page indicates when the policy was last revised. For privacy-related enquiries or to exercise your rights, contact cs@world-transfer.com. You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement.