Contents
1. Who is responsible for your data
The data controller is:
| Controller | Martín Flores Hernández (operating as Autos & Taxi Indalo / Mojácar Airport Shuttle) |
| Tax ID (NIF) | [NIF — TO BE FILLED IN] |
| Address | Calle La Fuente, 38, 04638 Mojácar, Almería (Spain) |
| info@mojacarairportshuttle.com [CONFIRM] | |
| Phone | +34 658 888 111 |
For any data-protection matter, contact us at the email above with the subject line "GDPR request".
2. What data we collect
We only collect what we strictly need to handle your transfer request and provide the service:
- Booking form data: airport selected, transfer date, number of passengers, pickup location.
- Contact data: phone number, name and any free-text message you choose to send us when you click "Get a Quote" (which opens WhatsApp pre-filled with the form data) or when you call or email us.
- Service-related data: flight number (if you provide it for flight monitoring), pickup/drop-off address, special requirements such as child-seat needs or large luggage.
- Technical data: basic browser information (IP address, user-agent) processed at the moment of your visit by the web server. We do not currently use analytics tracking such as Google Analytics.
We do not collect special-category data (health, religion, political views, etc.) and we do not knowingly collect data from children under 14 without parental consent.
3. Why we use it and on what legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Reply to your enquiry and prepare a quote | Steps prior to entering into a contract at the data subject's request (Art. 6.1.b) |
| Confirm, plan and provide the transfer service | Performance of a contract (Art. 6.1.b) |
| Comply with tax, accounting and transport-sector obligations | Legal obligation (Art. 6.1.c) |
| Handle complaints, claims or disputes | Legitimate interest in defending our legal position (Art. 6.1.f) |
| Send service-related messages (booking confirmation, driver assignment, flight-tracking alerts) | Performance of a contract (Art. 6.1.b) |
We do not currently send commercial or marketing communications. If we ever do in the future, it will only be with your specific consent (Art. 6.1.a) and you will always be able to opt out.
4. How long we keep it
- Enquiries that do not result in a booking: up to 12 months from the last contact, then deleted.
- Booking records and related communications: for the duration of the service plus the periods required by Spanish tax and commercial law (typically 6 years for accounting records under the Spanish Commercial Code).
- Data needed to handle legal claims: until the relevant limitation period expires.
5. Who we share it with
We only share your data when it is strictly necessary to provide the service or to comply with the law:
- Subcontracted drivers assigned to your transfer, who receive only the data needed to perform the pickup.
- Service providers that act as data processors on our behalf (e.g. email hosting, web hosting), under written contracts that meet GDPR Article 28 requirements.
- Public authorities when required by law (tax authorities, courts, police).
- Payment processors if you choose to pay online (e.g. PayPal). These providers are independent controllers of their own payment data.
We do not sell your personal data and we do not transfer it outside the European Economic Area without a valid GDPR mechanism in place.
6. Special note on WhatsApp contact
The booking form on this Website opens a pre-filled WhatsApp message addressed to us when you click "Get a Quote / Book Now". From that moment on, your message is also processed by WhatsApp Ireland Ltd. (Meta Platforms) as an independent controller, under its own privacy policy.
We only receive and store the information you choose to send us through that channel. If you prefer not to use WhatsApp, you can call us or email us instead.
7. Your rights
You have the following rights over your personal data under GDPR:
- Access — to know what data we hold about you.
- Rectification — to correct inaccurate or incomplete data.
- Erasure ("right to be forgotten") — to have your data deleted, subject to the legal retention periods listed above.
- Restriction of processing — to limit how we use your data while a dispute is resolved.
- Portability — to receive your data in a structured, commonly used, machine-readable format.
- Objection — to processing carried out on the basis of our legitimate interest.
- Withdrawal of consent — where the processing is based on your consent, with no effect on processing carried out before withdrawal.
To exercise any of these rights, write to us at info@mojacarairportshuttle.com with a clear description of your request and a copy of an identity document (so we can verify it is really you).
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
8. Security
We apply reasonable technical and organisational measures to protect your data from loss, misuse or unauthorised access — including encrypted communications, restricted access to booking records, and the use of reputable service providers.
9. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our services, in technology or in applicable law. The date at the top of this page shows the latest revision. We encourage you to review it periodically.