Privacy policy
Personal data processing · GDPR (EU) 2016/679 and Spanish LOPDGDD 3/2018
1. Data controller
- Controller: Jose Ignacio Muñoz Delgado · Tax ID: 48628752J
- Address: Av. Hospital, 10 · 03550 Sant Joan d'Alacant (Alicante), Spain
- Contact: bookings@rodascooters.com · WhatsApp +34 641 18 16 79
2. What data we process and where it comes from
- If you contact us (email or WhatsApp): whatever you include in the message (name, phone, email and the content of your enquiry).
- If you book a rental: identification, driving licence details, contact, address and booking/payment data. Detailed in the rental privacy policy.
- If you book parking: name, email, phone and bike details (model and plate). Detailed in the parking privacy policy.
- Browsing: if you accept analytics cookies, aggregated usage data (page views, approximate device). See the cookie policy.
We do not process special categories of data and do not carry out profiling with legal effects. We do not request or keep copies or scans of ID documents or driving licences.
3. Purposes and legal basis
- Answering your enquiry — your request and our legitimate interest in replying (arts. 6.1.b and 6.1.f GDPR).
- Managing the booking and providing the service — performance of the contract (art. 6.1.b).
- Legal obligations: invoicing and tax; for rentals, in addition, the documentary register of renters and its communication to the authorities, and identifying the driver in the event of traffic offences (art. 6.1.c).
- Website analytics — your consent (art. 6.1.a), which you can withdraw at any time.
- Marketing communications, if you subscribe — your consent (art. 6.1.a).
4. How long we keep it
- Enquiries not leading to a contract: for the duration of the conversation and a reasonable period afterwards.
- Contracts and bookings: during the relationship and afterwards, blocked, while liabilities may arise.
- Invoicing: the periods required by commercial and tax law.
- Renter register (rentals): the period set by its specific regulations.
- Analytics: as stated in the cookie policy.
5. Who we share it with
We do not sell your data or share it with third parties for commercial purposes. Only the providers necessary to deliver the service access it, as processors under an art. 28 GDPR agreement:
- Payment gateway (Stripe), to charge the booking. We do not store the full card number.
- Email delivery provider, to send your confirmation.
- Web analytics (Google), only if you accept analytics cookies.
- Public authorities where the law requires it (tax authority and, for rentals, the competent authorities).
International transfers: some of these providers may process data outside the European Economic Area. Where that happens, the transfer relies on the safeguards in Chapter V GDPR (adequacy decision or standard contractual clauses).
6. Your rights
You may exercise the rights of access, rectification, erasure, restriction, portability and objection, and withdraw any consent given (without affecting the lawfulness of prior processing), by writing to bookings@rodascooters.com stating the right you wish to exercise. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), especially if you are not satisfied with our response.
7. Security
We apply technical and organisational measures appropriate to the risk: restricted, authenticated access to management systems, encrypted communications (HTTPS), backups and no storage of card numbers. In the event of a security breach posing a high risk to your rights, we will inform you and notify the authority within 72 hours (arts. 33 and 34 GDPR).
8. Changes to this policy
We may update this policy to reflect legal or service changes. The version in force is always the one published on this page.