Privacy
Handling personal data responsibly is a core part of Form.taxi. We process your data and the data of your form senders in accordance with the EU General Data Protection Regulation (GDPR). This page gives you the key information you need to use Form.taxi on your website in compliance with data protection law.
Our Privacy Policy
Full details on which data we process, for what purpose and on what legal basis are available in our privacy policy:
Form.taxi is operated by wrkt*biz Reinhard Söllradl, based in Austria. For data access requests and questions about data protection, you can reach us at any time at support@form.taxi.
Notice Text for Your Privacy Policy
If you use Form.taxi for the forms on your website, you should mention this in your own privacy policy. We provide a template text that you can adopt and adapt to your website.
You will find the text in the Panel under Privacy. There you can copy it straight to your clipboard using the HTML code or as Text buttons.
Data Processing Agreement (DPA)
If personal data is processed on your behalf by another provider, Art. 28 GDPR requires a Data Processing Agreement (DPA). Because Form.taxi receives, stores and delivers the form submissions from your website, you are the controller and Form.taxi is your processor.
You can create and download the DPA yourself in the Panel at any time.
Sample DPA
If you would like to review the agreement in advance, for example with your data protection officer or legal department, a sample is available as a PDF:
As long as you have not yet created a DPA, you can also download the sample in the Panel under Privacy using the Sample contract button.
The sample is for review only. To conclude the agreement, create your personal DPA in the Panel as described below.
Creating the DPA
- Log in to the Panel.
- Open the Privacy section in the main navigation.
- In the Data Processing Agreement section, click Create contract. If you have already created a DPA, the button is labeled Recreate.
- In the Create contract dialog, enter your details as the data processing client:
- Name/company including address: name or company, address, postcode and city, and country
- Contact regarding data protection: name or company, address, postcode and city, and country of the person or body responsible for data protection matters
- Click Create contract. The DPA is generated as a PDF file with your details and shown with its creation date.
Downloading the DPA
A DPA you have already created is shown in the Privacy section with its file name, creation date and file size. Use the Download button to download the PDF file. Keep the agreement together with your other data protection records.
Keep your agreement up to date
Create a new DPA if your company details change or if we notify you of an update to the agreement. The new version replaces the previous one.
Frequently Asked Questions
Where is the data stored?
Form.taxi is hosted by ALL-INKL.COM in a data center in Dresden, Germany. Form submissions are processed and stored exclusively within the European Union.
Is data transferred to third countries?
No. Processing your form submissions does not involve any transfer to third countries outside the EU. The only exceptions are transfers you set up yourself, such as to webhooks or automation services (see below).
Which sub-processors does Form.taxi use?
We use the following service providers to process form submissions:
| Service provider | Purpose | Location |
|---|---|---|
| ALL-INKL.COM | Hosting | Germany |
| Mailjet | Sending emails (submissions, notifications) | EU |
| Friendly Captcha | Spam protection (depending on plan and settings) | Germany |
The complete and binding list is included in your DPA.
How long are form submissions stored?
On all plans, form submissions are stored in the submission archive for a maximum of 1 year and are then deleted automatically. Submissions classified as spam are deleted after one month.
Can I delete submissions myself?
Yes. Submissions you delete in the submission archive are first moved to the trash, where you can delete them permanently. Associated data such as the IP address and user agent is deleted together with the submission.
What data is collected in addition to the form content?
For each submission, we store the sender's IP address and user agent (browser identifier) as well as the date and time. This data is used for delivery, spam prevention and traceability. The approximate location shown in the Panel is determined using a database that runs directly on our server, without transferring any data to an external service.
Do I need a consent checkbox in my form?
A contact form generally does not require separate consent if the processing is based on another legal basis, such as your legitimate interest or steps prior to entering into a contract. However, you must inform senders about the processing in your privacy policy, for example using our notice text. Whether consent is required in your case, for example for a newsletter sign-up, should be assessed individually.
What applies to webhooks and automation services?
If you forward submissions via webhooks, automation services such as Zapier or Make, or WhatsApp delivery, the data is transferred to these providers. This transfer falls outside the processing carried out by Form.taxi. Check where these providers are located and review their data protection terms, conclude a separate DPA with them if required, and update your privacy policy accordingly.
How do I respond to access or deletion requests from my form senders?
You can find the relevant submissions in the submission archive and export or delete them as needed. If you have any questions, we are happy to help at support@form.taxi.
Is Form.taxi GDPR compliant?
Form.taxi is operated in Austria, is subject to Austrian law and processes form submissions exclusively within the EU. The DPA under Art. 28 GDPR provides the contractual basis for using the service in compliance with data protection law. As the website operator, you are responsible for the privacy policy of your own website.