GDPR (DSGVO) compliance and regulatory information

This page applies when Bandi is used by riders, driver partners, website visitors, or support contacts located in Germany or elsewhere in the European Economic Area (EEA). It supplements the general privacy policy and data policy with the rights and safeguards required by the EU General Data Protection Regulation (GDPR / Datenschutz-Grundverordnung, DSGVO) and applicable German law.

The controller responsible for processing personal data described on this page is Bandi Mobility Private Limited, Jeedimetla, Hyderabad, Secunderabad, Telangana 500010, India. You can reach our privacy team at narenderv7@gmail.com or +918142742972. Please mark privacy requests clearly as "GDPR request" so they reach the right team quickly.

• Performance of a contract (Art. 6(1)(b)): creating accounts, matching riders and drivers, calculating fares, completing rides, wallet and subscription handling, and support.
• Legal obligation (Art. 6(1)(c)): tax and accounting records, responses to lawful requests from authorities, and passenger transport record-keeping duties.
• Legitimate interests (Art. 6(1)(f)): fraud prevention, platform security, dispute resolution, service reliability, and defending legal claims — always balanced against your rights.
• Consent (Art. 6(1)(a)): optional features such as marketing communications and non-essential cookies or analytics. Consent can be withdrawn at any time with effect for the future.

• Right of access (Art. 15): receive a copy of the personal data we hold about you.
• Right to rectification (Art. 16): correct inaccurate or incomplete data.
• Right to erasure (Art. 17): request deletion, subject to legal retention duties — see the data deletion page.
• Right to restriction of processing (Art. 18): limit how we use your data while a dispute or verification is pending.
• Right to data portability (Art. 20): receive your data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21): object to processing based on legitimate interests or to direct marketing at any time.
• Right to withdraw consent (Art. 7(3)): withdraw any consent you have given, without affecting past processing.
• Right to lodge a complaint (Art. 77): complain to a supervisory authority, in particular in the German federal state where you live or work. A list of German authorities is published by the BfDI (Bundesbeauftragter für den Datenschutz und die Informationsfreiheit).

We respond to verified requests within one month as required by Art. 12 GDPR. We may ask for information to verify your identity before acting on a request.

Personal data of users in Germany and the EEA is stored and processed in data centers located in the European Union (Frankfurt, Germany region). Our database, authentication, file storage, and realtime infrastructure for EU users run in this EU region, and access is restricted through row-level security and role-based server-side controls.

Where a service provider processes data outside the EEA (for example push notification delivery or crash reporting), we rely on EU adequacy decisions or Standard Contractual Clauses (Art. 46 GDPR) together with supplementary measures.

We keep personal data only as long as needed for the purposes described above. Ride, payment, and invoice records are retained in line with German commercial and tax retention periods (§ 147 AO, § 257 HGB — typically 6 to 10 years). Account profile data is deleted or anonymized after account closure unless a longer retention duty or an open dispute applies.

Rides arranged through Bandi in Germany are performed exclusively by licensed car partners: taxis (Taxiverkehr) and hired cars with drivers (Mietwagenverkehr) operating under the German Passenger Transport Act (Personenbeförderungsgesetz, PBefG). Two-wheeler and auto-rickshaw ride categories offered in other markets are not available in Germany.

• Driver partners must hold a valid passenger transport licence (Personenbeförderungsschein, P-Schein) and the operator concession required by the PBefG.
• Taxi rides are charged according to the locally regulated taxi tariff where the tariff applies; pre-booked hired-car (Mietwagen) rides use the fare shown and locked in the app in euros (EUR).
• Vehicle, insurance, and registration documents are verified during onboarding before a driver can accept rides.
• Invoices and fare receipts follow German VAT (Umsatzsteuer) rules.

Storing or reading information on your device (cookies, local storage, notification tokens) that is not strictly necessary for the service only happens with your consent, as required by § 25 TDDDG. Essential cookies for security, session handling, and language selection do not require consent.

Provider identification pursuant to § 5 DDG: Bandi Mobility Private Limited, Jeedimetla, Hyderabad, Secunderabad, Telangana 500010, India. Contact: narenderv7@gmail.com, +918142742972. Responsible for content: Bandi Mobility Private Limited. Registration and VAT identification details will be published here before commercial launch in Germany.