Privacy policy

1. Data controller

• Name: Kristian Transfers (Kristian Transfers)
• Email: autocareskristian@gmail.com

2. Data we collect

• Booking data: name, email, phone, route, date and time, passengers, flight number, addresses, notes, extras, promo code, applied interest and total amount.
• Contact form data: name, email, phone and message.
• Donation data (if you donate): amount, optional name and email, and the Stripe or PayPal reference.
• Payment data: card payments are handled by Stripe; we only receive the status and a reference. We never see or store card numbers. If you donate with PayPal, PayPal processes that payment under its own policy.
• Technical data: IP address and basic logs used for security, fraud prevention and to limit abuse.
• Optional cookie data, only if you accept analytics or marketing cookies.

3. Purposes and legal basis

• To manage your booking and provide the service (performance of a contract).
• To record the interest included in the price (legal obligation and performance of the contract).
• To receive and acknowledge voluntary donations (legitimate interest or consent if you leave your email).
• To answer your messages (legitimate interest and pre-contractual measures).
• To comply with tax, accounting and legal obligations (legal obligation).
• To keep the website secure (legitimate interest).
• To measure and improve the website or advertising (consent, which you can withdraw at any time).

4. Recipients

We share data only with providers who help us operate: Stripe (card payments), PayPal (if you donate via PayPal), our hosting and email providers, and, only if you consent, Google (analytics) and Meta (marketing). They act as processors or independent controllers under the corresponding agreements. We do not sell your data.

5. International transfers

Some providers may process data outside the European Economic Area. In that case we rely on adequacy decisions or standard contractual clauses approved by the European Commission.

6. Retention

Booking data is kept while needed to provide the service and afterwards for the legal periods applicable to tax and commercial obligations. Contact messages are kept for as long as needed to answer them and for a reasonable period afterwards. Security logs are kept for a short period.

7. Your rights

You can request access, rectification, erasure, restriction, portability and objection by writing to autocareskristian@gmail.com, proving your identity. You can withdraw your consent at any time. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Security

We apply technical and organisational measures to protect your data, including encrypted connections (HTTPS), access control and signed payment notifications.

9. Minors

Our online booking is aimed at adults. Minors must travel accompanied by an adult who makes the booking.

10. Changes

We may update this policy. The current version is always published on this page.