Privacy policy

1. Data controller

• Owner: Nombre y apellidos del titular (sole trader, Spain)
• Tax ID (NIF): NIF pendiente
• Business address: Rúa de exemplo, 1, 15703 Santiago de Compostela (A Coruña)
• Email: reservas@wayvtcsantiago.es · Phone: +34 600 000 000
• Activity: private hire vehicle with driver (VTC). Autorización VTC nº pendiente, granted by Xunta de Galicia.
• Website: https://www.wayvtcsantiago.es · Trading name: WayVTC Santiago

2. Data we process

• Identification and contact: name, email and phone.
• Service data: pick-up and destination, date and time, number of passengers, flight or train, your notes and the website language.
• Technical data: IP address and server logs needed for security and fraud prevention.

3. Purposes and legal bases

• Handling your request, sending the price, taking payment and providing the service, including messages about your booking. Basis: performance of a contract or pre-contractual steps at your request (Art. 6(1)(b) GDPR).
• Legal obligations: invoicing and accounting, tax, and reporting VTC services to the Spanish transport ministry's electronic register as required by sector regulations. Basis: legal obligation (Art. 6(1)(c) GDPR).
• Website security and payment fraud prevention. Basis: legitimate interest (Art. 6(1)(f) GDPR).
• Non-essential cookies (e.g. the third-party map), only if you accept them. Basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

We do not send advertising, build profiles or make automated decisions with legal effects.

4. Retention

For as long as the relationship lasts and then for the legal periods: 6 years for accounting records and invoices, 4 years for tax purposes, and as required by transport regulations for the service register. Requests that are never booked are deleted after 12 months; security logs after at most 12 months.

5. Recipients

• Proveedor de alojamiento pendiente, which hosts the website and database.
• Proveedor de correo pendiente, to send booking emails.
• Our tax and accounting advisers, under a data processing agreement.
• Public authorities when required by law.

6. International transfers

Some providers may process data outside the European Economic Area, with appropriate safeguards: an adequacy decision (EU-US Data Privacy Framework) or the European Commission's standard contractual clauses.

7. Your rights

You can request access, rectification, erasure, objection, restriction and portability, and withdraw consent, by emailing reservas@wayvtcsantiago.es. We reply within one month. You can also complain to the Spanish Data Protection Agency (www.aepd.es) or your local supervisory authority.

8. Minors and third parties

You must be 18 or over to book. If you give us other passengers' data, you confirm you have informed them and may share it.

9. Security

We use HTTPS, restricted access and backups.

10. Changes

We may update this policy; the current version is always the one published here with its date.