Skip to content
Málaga Transfers Services
Black saloon car outside the Málaga-Costa del Sol Airport terminal at sunset

Legal

Privacy policy

This English text is a translation provided for information purposes only. In the event of any discrepancy, the Spanish version (Política de privacidad) shall prevail.

1. Data controller

  • Controller: Francisco Manuel Pedraza Ocaña (Málaga Transfers Services)
  • Tax ID (NIF): 26804209D
  • Email: info@malagatransfersservices.com
  • Telephone: +34 693 275 901

2. Data we process

We process the data you provide to us through online booking, the contact form, or by phone, WhatsApp or email: your name, phone number, email address, journey details (origin, destination, date, time, flight number, passengers, child seats, luggage), any information you include in your comments, and payment transaction data (reference, amount and status). We do not process or store your card details: payment is made directly on PayPal.

3. Purposes and legal basis

  • Managing your quote or booking request and providing the service booked. Legal basis: taking steps prior to entering into a contract and performance of the contract (Art. 6(1)(b) GDPR).
  • Responding to your enquiries. Legal basis: consent (Art. 6(1)(a) GDPR).
  • Complying with legal obligations (tax and accounting). Legal basis: legal obligation (Art. 6(1)(c) GDPR).
  • Analytics and advertising through third-party cookies, only if you accept them. Legal basis: consent (Art. 6(1)(a) GDPR). See our cookie policy.

4. Retention

We will keep your data for as long as necessary to handle your request and provide the service and, thereafter, for the periods required by law. Quotes that are not accepted are deleted within a maximum of 12 months.

5. Recipients

We do not share your data with third parties unless required by law. The providers that supply services to us may have access to it: web hosting (Vercel), email, PayPal (Europe) S.à r.l. et Cie, S.C.A. for payment processing, Google (Google Maps Platform) for address search and route calculation and, if you give your consent, Google as an analytics and advertising provider. We have signed the corresponding data processing agreements with them, except for PayPal, which acts as an independent controller under its own terms. Some of these providers may carry out international data transfers covered by the EU-U.S. Data Privacy Framework or by standard contractual clauses.

6. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to info@malagatransfersservices.com. If you believe we have not processed your data correctly, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

7. Security

We apply appropriate technical and organisational measures to protect your data, including encrypted transmission (HTTPS) of forms.