TRANSFERBCN / LEGAL INFORMATION
Privacy Policy
How personal information is handled in connection with enquiries, bookings and the website.
1. Who is responsible for your information
This notice explains the intended handling of personal information through transferbcn.es and communications about TransferBCN services.
[COMPLETE: data controller’s full legal name, registered address and company details.] Privacy contact: info@transferbcn.es. [CONFIRM: whether a data protection officer or representative is required and, if so, provide contact details.]
2. Information connected with a booking
Booking information may include your name, email, telephone or WhatsApp number, pickup and destination, travel date and time, flight number, passenger count, luggage, vehicle preference, return journey and booking notes.
We may also receive information from the person booking for you and keep communications about the request. [CONFIRM: exact fields collected by the live plugin, accounts if enabled, payment information received, technical logs and any tracking identifiers.]
3. Why information is processed
Information needed to answer a quote request and arrange a booking may be processed to take steps at your request before a contract and to perform that contract. Accounting and legally required records may be processed to comply with legal obligations.
Security, fraud prevention and handling disputes may rely on legitimate interests where appropriate and balanced against your rights. Optional marketing and non-essential tracking require the applicable consent or other lawful basis. [COMPLETE: a purpose-by-purpose list of actual processing, lawful bases and specific legitimate interests.]
4. Required information and other passengers
Information needed to identify the journey and contact the lead passenger is necessary to assess or fulfil a request. If essential details are missing, the journey may not be arranged. Optional fields should be clearly identified.
If you book for someone else, give them this notice and provide only information needed for their journey. Where information is obtained indirectly, the controller must meet the applicable transparency obligations; the booking customer’s involvement does not remove those duties.
5. Children and accessibility requests
A parent, guardian or authorised adult should arrange travel for children. Supply the passenger information and child-seat requirements needed for the journey, without unnecessary identifying details.
Accessibility notes can reveal health information. Describe the practical assistance required and avoid sending medical records. [CONFIRM: whether special-category data is processed, the applicable Article 9 condition, who can access it and its retention period.]
6. Drivers, carriers and service suppliers
Journey information may need to be shared with the driver or carrier delivering the confirmed service. Suppliers supporting hosting, booking administration, communications and payments may receive relevant information where actually used.
[COMPLETE: actual recipient categories and provider names where appropriate, their roles as processors or separate controllers, and the safeguards in place.] Share only information needed for the particular service. Do not describe planned integrations as deployed systems.
7. Payments and communications
The payment methods shown in the booking process determine how payment information is handled. [COMPLETE: payment provider, information received by TransferBCN, and whether any card data is stored.]
If you choose email or WhatsApp to communicate, the relevant provider also processes information under its own terms. [CONFIRM: providers actually used, business account arrangements, recipients and message-retention rules.]
8. Marketing and optional tracking
Marketing preferences should be separate from information required to fulfil a booking. Where consent is used, you can withdraw it without affecting the lawfulness of earlier processing.
You can object to direct marketing at any time, including related profiling. [CONFIRM: whether newsletters, advertising audiences, analytics or conversion tracking are active, their legal bases and how preferences are managed.] See the Cookie Policy for browser technologies.
9. Transfers outside the European Economic Area
[COMPLETE AFTER PROVIDER REVIEW: whether information is accessed or stored outside the EEA, relevant destinations or recipient arrangements, and the transfer mechanism used.]
Where required, identify an adequacy decision or appropriate safeguards, such as standard contractual clauses, together with any necessary additional measures. Explain how a person can obtain information about those safeguards.
10. How long information is kept
Records should be kept for the period needed for the stated purpose and any applicable legal or claims requirements, then deleted or anonymised appropriately.
[COMPLETE SEPARATE PERIODS OR PRECISE CRITERIA: unconfirmed enquiries; confirmed bookings; invoices and accounting; support messages; marketing preferences; security logs; analytics and consent records; backups.] A single indefinite period is not an adequate retention schedule.
11. Your data protection rights
Subject to the applicable conditions, you may request access, correction, erasure, restriction or portability of your information, and object to processing. Where processing relies on consent, you may withdraw it.
Contact info@transferbcn.es to exercise your rights. Identity verification should be proportionate. Requests are generally answered within one month; a permitted extension must be explained within that first month. You may complain to the Spanish Data Protection Agency (AEPD) or another competent supervisory authority.
12. Automated decisions and security
[CONFIRM: whether any solely automated decision has legal or similarly significant effects. If it does, explain the logic involved, significance, likely consequences and applicable safeguards.] A booking quote calculation alone should not be described as such a decision without assessing its effects.
[COMPLETE: accurate, high-level description of access controls, security and incident handling.] Avoid guarantees of absolute security. Do not disclose passwords, card security codes or unnecessary sensitive information through booking notes.
13. Changes and contacting us
This notice should be updated when processing changes, with an effective date and appropriate communication of material changes.
Questions about privacy can be sent to info@transferbcn.es. Related information: Terms & Conditions and Cookie Policy.