Privacy policy

Controller within the meaning of the General Data Protection Regulation (GDPR):
Omnibusunternehmen Mikanovic, owner: Ilija Mikanovic
Luisenstraße 74C, 63067 Offenbach am Main
Phone: +49 69 34867880 · E-mail: info@mikanovic.de

When you visit this website, the hosting provider automatically collects information in so-called server log files (e.g. IP address, date and time of access, browser type). This data serves to ensure trouble-free operation and to improve our offer (Art. 6 (1) (f) GDPR) and is not merged with other data sources.

If you contact us via the contact form, e-mail or telephone, the data you provide (name, e-mail address, telephone number, content of the inquiry) is processed to handle your inquiry and any follow-up questions (Art. 6 (1) (b) GDPR). Messages sent through the contact form are forwarded to us by e-mail by our server.

Address search and route calculation in the trip planner run on servers we operate ourselves (the open-source software Photon and OSRM, based on OpenStreetMap data); your input and your IP address are not passed on to any third party for this. For the map display we use the external open-source service OpenFreeMap (map tiles); when the map loads, your IP address is transmitted to that service (Art. 6 (1) (f) GDPR — interest in an appealing presentation of our offers). The „Directions" link opens Google Maps; Google's privacy policy applies.

This website stores your language selection and the period selected in the timetable in your browser's localStorage. For registered users, login data (session tokens) is stored in sessionStorage and deleted when the tab is closed.

Your answer in the cookie notice (consent to Google Ads yes or no, with its date) is also stored in localStorage, so that we do not ask you again on every page; after twelve months we ask again. Your language selection is also stored in a cookie („bf_lang“, valid for one year), so that opening mikanovic.de without a language takes you straight to the language you last chose. This storage is strictly necessary for the functions you request (§ 25 (2) no. 2 TDDDG). Cookies for advertising purposes are set only by Google Ads, and only with your consent (section 7).

To know how many people visit our website, we count visitors and page views without cookies, on our own server. Each time a page of this website is opened — including when you move between pages within the site — your browser sends a request to our server. The server processes your IP address and browser identifier (user agent) only transiently, in memory: from both, together with a random key that is newly generated every day, it derives a check value (hash) that cannot be traced back to you and serves only to avoid counting you as a visitor more than once on the same day. The daily key is deleted at the end of the day; after that, no check value can be attributed to a person or device any more. Only daily totals (the number of visitors and of page views per day) are stored permanently; from them we derive the number of today's visitors shown on the website and our internal statistics. The IP address, the browser identifier and the page opened are neither stored nor merged with other data — including the server log files described in section 2.

Nothing is stored on or read from your device: no cookies, no localStorage, no comparable techniques. § 25 TDDDG (formerly TTDSG) is therefore not affected. No third parties are involved; the count runs exclusively on our own server. Automated accesses (e.g. search engines) are not counted.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is to know, in outline, how far our website reaches, so that we can run and develop it according to need. You may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR); to do so, contact us informally using the contact details above. As we do not store any personal data permanently, daily totals that have already been formed can no longer be attributed to any person.

We advertise through Google Ads, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“). With Google Ads conversion tracking we measure whether a visit that came through one of our ads led to an enquiry. Four events are counted, each only once our server has accepted it: a message sent through the contact form, an online coach booking, a day-trip booking and a request through „Hire a driver“. Your name, contact details and the content of your message or request are not passed to Google.

With your consent, your browser loads the Google tag (gtag.js) from Google. Google then sets or reads cookies (e.g. „_gcl_au“, „_gcl_aw“, usually valid for 90 days) and receives data about your visit, in particular your IP address, the pages viewed, the identifier of an ad click and details of your browser and device. We receive only aggregated reports from Google, such as how many enquiries followed ad clicks; they do not let us identify you. We do not use personalised advertising (remarketing).

Google Ads is loaded only once you choose „Accept“ in the cookie notice. The legal basis is your consent (Art. 6 (1) (a) GDPR; for storing and reading information on your device, § 25 (1) TDDDG). You may withdraw it at any time with effect for the future via the „Cookie settings“ link in the website's footer (for example at the bottom of this page); this website's Google Ads cookies are then deleted. Without your consent Google Ads is not loaded, and the website can be used without restriction.

Google also processes data in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the EU Commission exists (Art. 45 GDPR). For more information, see Google's privacy policy: policies.google.com/privacy.

The protected area of this website uses the Keycloak identity service. During registration and login, the data provided there (name, e-mail address) is processed to provide the user account (Art. 6 (1) (b) GDPR).

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and to object to processing (Art. 21 GDPR). To do so, contact us informally using the contact details above. You also have the right to lodge a complaint with a data protection supervisory authority — the competent authority is the Hessian Commissioner for Data Protection and Freedom of Information.

This privacy policy is dated October 2026.