Privacy Policy
Last updated: September 19, 2026
1. Data Controller
In compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), you are informed that the controller of the personal data collected through this website is: Controller: Gonzalo Redón Bastard Tax ID (NIF): 43457345H Professional status: Self-employed, registered under the Special Scheme for Self-Employed Workers (RETA) Activity: Private passenger transport with driver (VTC) Business address: Rambla Guipúzcoa 53, 1-3, Barcelona Email: info@transfer-barcelona.com Phone: +34 634 075 568 Website: transfer-barcelona.com
2. Personal Data Collected
The personal data the user may provide through the website, email, phone or WhatsApp includes: • First and last name • Phone number • Email address • Pick-up and drop-off address • Date and time of the service • Number of passengers • Luggage • Flight number (if applicable) • Special requirements (child seats, reduced mobility, etc.) • Billing details (where applicable) As a general rule, no special categories of data are collected. Where the user voluntarily provides information needed to adapt the transport service to specific mobility or accessibility needs, such data will be processed solely for the proper provision of the requested service.
3. Purposes of Processing
Personal data will be processed for the following purposes: a) Handling enquiries and bookings Responding to requests for information, quotes and bookings of transport services. b) Providing the contracted service Organising and carrying out the private chauffeur-driven transport service. c) Service-related communications Where the user provides a flight number, this information may be used solely to coordinate the passenger pick-up and adapt the service to any flight delays or changes. d) Billing and legal obligations Issuing invoices and complying with tax and accounting obligations. e) Security and abuse prevention Managing inappropriate behaviour, damage to the vehicle or situations that affect the safety of the service. f) Customer service Handling complaints, incidents or enquiries.
4. Legal Basis for Processing
The legal bases that allow the data to be processed are: • Handling enquiries and bookings: performance of pre-contractual and contractual measures (Art. 6.1.b GDPR). • Providing the service: performance of the contract (Art. 6.1.b GDPR). • Billing and tax obligations: compliance with legal obligations (Art. 6.1.c GDPR). • Service security and incident management: legitimate interest in ensuring the safety of the service (Art. 6.1.f GDPR). • Marketing communications, where applicable: the user's consent (Art. 6.1.a GDPR).
5. Data Retention
Data will be kept for the following periods: • Booking and service data: for the duration of the contractual relationship and thereafter for the periods needed to address any legal liabilities. • Billing data: for the periods required by applicable tax and accounting law (generally 5 years). • Communications and enquiries: for as long as necessary to handle them. • Data needed for legal claims: until the relevant liabilities become time-barred. Once these periods have expired, the data will be deleted or anonymised.
6. Data Recipients
Personal data will not be disclosed to third parties, except where required by law. However, certain technology service providers may access personal data as data processors in order to provide services related to web hosting, email, administrative management, booking systems and payment processing. Some technology providers used by the controller may be located outside the European Economic Area. In such cases, international transfers will be carried out with the appropriate safeguards provided for in the GDPR. Personal data will never be sold or used for commercial purposes unrelated to the service.
7. User Rights
The user may exercise the following rights: • Access • Rectification • Erasure • Objection • Portability • Restriction of processing To exercise these rights, the user may send an email to: info@transfer-barcelona.com The controller will reply within one month of receipt, although this period may be extended in the cases provided for in the GDPR. The user also has the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if they consider that the processing of their data does not comply with current regulations.
8. Data Security
The controller applies technical and organisational measures to ensure the security of personal data, preventing unauthorised access, loss or alteration. In addition, the controller guarantees that personal data will not be used for purposes other than those set out in this Privacy Policy, except where required by law or with the user's express consent. However, no system is completely secure, so absolute protection against cyberattacks cannot be guaranteed.
9. Minors
Bookings and contracts must be made by adults with sufficient legal capacity to enter into contracts. If it is detected that personal data of minors has been provided without proper authorisation, such data may be deleted.
10. Third-Party Links
The website may include links to external services (WhatsApp, social networks, payment platforms). Each provider applies its own privacy policy, so the user should review it before providing any data.
11. Changes to the Privacy Policy
The controller may amend this Privacy Policy when necessary due to legal or technical changes or changes to the services offered. The version in force will always be the one published on the website.