Privacy Policy

Applicable law

This privacy policy is adapted to the Spanish and European data-protection law currently in force. Specifically, it complies with the following regulations:

• Regulation (EU) 2016/679 (GDPR), on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
• Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights (LOPD-GDD).
• Royal Decree 1720/2007, of 21 December (RDLOPD), to the extent it remains in force.
• Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE).

Data controller

The controller responsible for the personal data collected on the Website is Shuttle Vans Madrid, S.L., Tax ID / CIF B87354916, represented by Juan Carlos Rodríguez Piedra. Their contact details are:

Address

C. de Aracne 25, 1.º D, 28022 Madrid

Phone

+34 662 12 55 13

Email

admin@shuttlevansmadrid.com

What we collect

We only process identifying data. We never process special categories of data within the meaning of Article 9 of the GDPR. Through the contact form we collect only what you choose to give us:

• Required data: name, email address and message.
• Optional data: phone number, travel date, number of passengers and service of interest, when you choose to provide them.

To keep the form secure and prevent abuse, we automatically and transiently process an encrypted (hashed) version of your IP address, which is never stored in its original form, and we issue an anti-bot verification token. Our hosting provider also logs standard technical data (IP address, browser type and timestamps) in its server logs for security and operational purposes. Other than the contact form, the server’s technical logs and the audience and performance measurement described in the “Cookies & local storage” section, this website does not use user accounts, a checkout process, or any other data-collection surface.

Purposes

We process your personal data for the following purposes:

• To handle and respond to your inquiry or quote request.
• To contact you by email or phone in connection with that inquiry.
• To keep the form secure and prevent fraudulent or abusive use.

We do not use form data to build commercial profiles or for marketing studies.

Legal basis

The legal basis for processing the data you submit through the form is your consent, given when you tick the consent checkbox and submit the form. The strictly necessary security measures (anti-bot verification and rate-limiting via a hashed IP) rely on our legitimate interest in protecting the Website.

The audience and performance measurement described in the “Cookies & local storage” section is based on our legitimate interest (Article 6(1)(f) GDPR) in understanding and improving how the Website works. You may object to this processing at any time; see the “Your rights” section for how to do so.

You may withdraw your consent at any time; it will be as easy to withdraw as to give. Withdrawing it will not affect your general use of the Website.

Principles

Processing is subject to the principles of Article 5 of the GDPR:

Lawfulness, fairness and transparency

we collect data with transparent information about its purposes.

Purpose limitation

data is collected for specified, explicit and legitimate purposes.

Data minimization

we process only the data that is strictly necessary.

Accuracy

data must be accurate and kept up to date.

Storage limitation

data is kept only for as long as necessary for its purpose.

Integrity and confidentiality

data is processed in a way that ensures its security and confidentiality.

Accountability

the controller ensures compliance with these principles.

Retention

We do not store your inquiry in any database. It exists only as the two emails sent through our email provider (to our inbox and to yours). We keep that correspondence for a maximum of three months from receipt and delete it afterwards, unless a legal obligation requires us to keep it longer or you ask us to delete it sooner.

Recipients & processors

To provide the service we rely on providers that act as data processors on our behalf, under Article 28 of the GDPR and the corresponding data-processing agreement. We do not sell or rent your data to third parties for commercial purposes. Our processors are:

Vercel Inc. (US)

website hosting, technical server logs, and aggregate, cookieless audience and performance measurement (Vercel Web Analytics, Vercel Speed Insights).

Resend (Plus Five Five, Inc., US)

delivery of the form’s emails: the notification to our team and your confirmation email. Resend processes your message only to deliver those emails on our behalf.

Cloudflare, Inc. (US)

anti-bot verification for the form (Turnstile).

Some of these providers may process data outside the European Economic Area. In such cases, the transfers are covered by the appropriate safeguards under the GDPR (standard contractual clauses or applicable adequacy frameworks).

Cookies & local storage

This website uses only strictly necessary cookies and local storage required for it to function, which do not require prior consent:

“theme” local storage

remembers your light or dark theme preference.

Session storage

temporarily stores the page section when you switch language; it is cleared immediately.

To understand how the Website is used and to measure its performance, we use Vercel Web Analytics and Vercel Speed Insights. Among others, this is the data they collect about each visit:

• the URL and route of the page visited;
• the referring page (referrer);
• the URL’s query parameters, filtered;
• approximate location (country, region and city);
• device type, operating system and browser;
• connection speed; and
• the page’s performance metrics (Web Vitals).

Vercel Web Analytics identifies each visit using an anonymous, request-derived value (hash), discarded after 24 hours. Vercel Speed Insights does not identify visits: it records anonymous, per-page performance metrics. Neither tool uses cookies or stores anything on your device. The data collected is used only to produce aggregate statistics: we do not combine it with other sources, we do not share it with third parties for other purposes, and it does not enable cross-site tracking. Because it is aggregate, anonymous and cookieless, this measurement relies on the Spanish Data Protection Agency’s (AEPD) exemption for audience-measurement tools and does not require your prior consent.

When we add tools that do require your consent (for example, Google Analytics), they will run only through a consent manager, and you will be free to accept or decline them; this section will be updated accordingly.

Children’s data

Under Articles 8 of the GDPR and 7 of the LOPD-GDD, only individuals aged 14 or over may give consent for the processing of their data. For children under 14, the consent of a parent or guardian is required, and processing is only lawful to the extent they have authorized it.

Security & confidentiality

We adopt the technical and organizational measures necessary, appropriate to the level of risk, to prevent the destruction, loss, alteration or unauthorized access to data. The Website uses an SSL/TLS certificate that encrypts the transmission of data between your device and the server.

Since the complete inviolability of the internet cannot be guaranteed, we commit to notifying you without undue delay of any security breach likely to result in a high risk to your rights and freedoms. Data is treated as confidential, and this obligation extends to all staff and collaborators with access to the information.

Your rights

You may exercise the following rights, recognized under the GDPR and the LOPD-GDD, against the controller:

Access

obtain confirmation of whether Shuttle Vans Madrid is processing your personal data and, if so, access that data and information about how it is processed.

Rectification

have inaccurate personal data corrected or completed.

Erasure (“the right to be forgotten”)

request the deletion of your data once it is no longer necessary for the purpose it was collected for, when you withdraw consent, object to processing, or it has been processed unlawfully, unless the law requires us to keep it.

Restriction of processing

request that we limit the processing of your data, for example while a challenge to its accuracy is resolved.

Portability

receive your data in a structured, commonly used, machine-readable format, and have it transmitted to another controller, where processing is carried out by automated means.

Objection

object to the processing of your personal data by Shuttle Vans Madrid.

Not being subject to automated decisions with legal effects, including profiling

not be subject to a decision based solely on automated processing of your data, including profiling, that produces legal effects concerning you.

To exercise them, send a written request with the reference “RGPD-SHUTTLEVANSMADRID.com”, including your full name and a copy of an identity document, the specific request, an address for notifications, and the date and signature. You can send it to the postal address C. de Aracne 25, 1.º D, 28022 Madrid or the email admin@shuttlevansmadrid.com.

Third-party links

The Website may include links to third-party pages not operated by Shuttle Vans Madrid — for example, the pickup-time.com booking application, WhatsApp, or the app stores. Those third parties have their own privacy policies and are responsible for their own processing.

Complaints

If you believe the processing of your data does not comply with the regulations, you have the right to lodge a complaint with a supervisory authority. In Spain, the competent authority is the Spanish Data Protection Agency (AEPD) (https://www.aepd.es/).

Acceptance & changes

Using the Website means you have read and accept the terms of this Privacy Policy. We reserve the right to amend it at our discretion or due to legislative, case-law or AEPD doctrinal changes. Changes will not be notified explicitly; we recommend checking this page periodically. The date of the last update appears at the top of this policy.

Contact

Questions about this policy? Write to us at admin@shuttlevansmadrid.com or call +34 662 12 55 13.