This policy explains what data we process when you book or write to us, what we use it for, who we share it with and how to exercise your rights, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
- Francisco José Minuesa Fornos (Valencia Transfer Service), Tax ID 45636096W.
- Calle Quijote, 10, 02215 Alborea (Albacete), Spain.
- Email: valenciatransferservice@gmail.com. Phone: +34 744 722 882.
2. What data we process
- Booking data: name, email, phone, pick-up and drop-off addresses, date and time, flight number, passengers, luggage, extras and notes.
- Payment data: payments are processed directly by the payment providers (PayPal, Trustly). We do not see or store your card or account details.
- Invoicing data, if you ask for an invoice (company, tax ID and address).
- Data from the contact and cancellation or change forms, and the messages you send us by email or WhatsApp.
- The minimum technical data needed for the website to work (IP address in server logs and technical cookies; see the cookies policy).
3. What we use it for and on what legal basis
- Managing your booking, providing the transfer, informing you of changes and handling cancellations: performance of the contract (Art. 6.1.b GDPR).
- Issuing invoices and meeting accounting and tax obligations: legal obligation (Art. 6.1.c GDPR).
- Answering your questions before booking: pre-contractual steps at your request (Art. 6.1.b GDPR).
- Keeping the website secure and preventing fraud and spam: legitimate interest (Art. 6.1.f GDPR).
- We do not send advertising or build profiles. We do not make automated decisions that affect you.
4. How long we keep it
- Booking and invoice data: for as long as the relationship lasts and then for the legal periods (6 years for accounting records under the Spanish Commercial Code and 4 years for tax purposes).
- Contact requests that do not lead to a booking: one year at most.
- Cancellation or change requests: together with the booking they refer to.
5. Who we share it with
- The driver or partner company that carries out your transfer, only with the data needed to provide it.
- Payment providers: PayPal (Europe) S.à r.l. et Cie, S.C.A. and Trustly Group AB, which process your payment data as independent controllers.
- Providers that give us technical services as processors: web hosting in the European Union, email (Google) and the website’s email delivery.
- Map and route services used by the booking form: OpenStreetMap (maps), komoot’s Photon (address search) and OSRM (distance calculation). They receive your IP address and the addresses you type in the form, only to return the result.
- WhatsApp (Meta), if you choose to contact us through that channel.
- Public authorities and courts, when required by law.
6. International transfers
Some providers (Google, Meta, PayPal) may process data outside the European Economic Area. In those cases this is done with appropriate safeguards: European Commission adequacy decisions, such as the EU-US Data Privacy Framework, or standard contractual clauses.
7. Your rights
- You can ask for access to, rectification or erasure of your data, restriction of or objection to processing, and data portability.
- Write to valenciatransferservice@gmail.com saying which right you want to exercise. We will reply within one month at the latest.
- If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
8. Required data and accuracy
Fields marked with an asterisk are needed to manage the booking or reply to you. If you do not provide them, we cannot provide the service. Please make sure the data is correct and tell us if it changes.
9. Security
We apply appropriate technical and organisational measures to protect your data: encrypted connection (HTTPS), restricted access, backups and GDPR-compliant providers.
Last updated: November 2026.