Privacy policy
Purpose
The information you voluntarily provide as a user (hereafter, Personal Data) is protected under the terms of this privacy policy. It is accessible at any time in the 'Privacy Policy' section at the bottom of every page.
Here, you can review exactly how we handle your Personal Data in a simple and transparent way.
By using our website, you accept this privacy policy.
Compliance
In compliance with the General Data Protection Regulation (GDPR) 2016/679 of April 27, 2016, regarding the protection of natural persons and the processing and free movement of Personal Data, our website has implemented all necessary technical and organizational security measures. These measures guarantee and protect the confidentiality, integrity, and availability of the data you submit.
Data collection and processing
In order to provide our services, we need to collect a minimum amount of information about you, which we classify as follows.
- Information provided voluntarily (Personal Data):
- Airport transfer request: In order to book an airport transfer or request a custom quote, we collect information about the pick-up location, destination, date, time, vehicle type, number of passengers, and optional requirements. For airport pick-ups, we also ask for your flight number and origin city. Additionally, we collect personal information such as your full name, phone number, and email address. This is the minimum information required to offer you the requested service. We also need this data to get in touch with you, confirm your services, answer your questions, call you if necessary, and guarantee a high-quality experience. Your booking details (but not your personal information) are also used for statistical purposes to improve and optimize our services.
- Transactions: We collect payment information, which we simply match with your booking to confirm your payment was successful. We do not have access to and we do not store any bank details (card number, expiration date, or security code). All transactions on our website are processed by Stripe, a payment gateway that features PCI Level 1 security standards and complies with all current legal regulations.
- Contact: When you get in touch with us with any questions using our contact form, we collect your name, email address, and the content of your message. This information is only used to answer your inquiry.
- Reviews: Once your airport transfer is completed, we ask you to share your opinion about the service. If you do, we only collect your comment and link it to your booking. All reviews are published on our website and are used solely to know if we are doing a good job and to improve our services.
- Invoices: If you need an invoice, we ask for your name or company name, tax identification number, and billing address. This data is only used to issue the requested invoice.
- Information collected automatically (Anonymous Data):
- Activity information and cookies: We do not use Google Analytics. To measure website visits, we use countaclick.com, an analytics software that processes data anonymously and in aggregate, without using or storing cookies on your device. We also use our own technical session cookie to track if you arrived through an affiliate link. It does not collect personal data. If you give us your consent, Google Ads will install a cookie (for example, _gcl_au, for about 90 days) to track if a booking comes from an ad. We do not use this for remarketing or to show you personalized ads. It is managed by Google Ireland Limited. If you choose «Strictly necessary», this cookie is not installed. Read our Cookie Policy.
Data sharing
In order to provide our services, we must share your Personal Data with the partner companies that operate the private vehicles. The amount of Personal Data we share is minimal. It is strictly limited to what they need to pick you up, drive you to your destination, get in touch with you if necessary, and comply with their legal obligations.
The information and contact details of the private driver operator who receives your Personal Data are included in your booking confirmation email and in the 'My Bookings' section of our website.
Your Personal Data will not be sold, distributed, or transferred to other companies or third parties, unless required by law. In that case, your Personal Data will be shared with the relevant law enforcement agency, regulatory body, government agency, or court (i) to comply with applicable laws or regulations, (ii) to exercise, establish, or defend our legal rights, or (iii) to protect your vital interests or those of any other person.
Security
To collect, guarantee, and protect the confidentiality and integrity of your Personal Data, our website features an SSL connection encrypted using TLS 1.2 with 256-bit encryption, verified by ComodoSSL.
Your Personal Data is stored on the secure servers of LucusHost, which are protected against the most common types of cyber attacks and are located within the EU.
However, since no technology is completely invulnerable, you must also take steps to maintain the security of your Personal Data. For example, do not share your login credentials. We are not responsible for any unauthorized transactions made using your login details.
In the unlikely event that we detect a security breach affecting your Personal Data that poses a high risk to your rights and freedoms, we will notify you in clear and simple language. We will describe the potential consequences and the steps we have taken or propose to take to fix the security breach.
Data retention
Your Personal Data will be stored from the moment you request our service until it is completed. After that, it will be retained for the periods required by law.
Your rights
As a user of our website, you have a set of rights that allow you to decide and control how we use your Personal Data at all times. You can exercise these rights at any time and free of charge, either through our website or by using the contact details provided in the 'Data Controller' section.
You have the following rights:
- Access, correction, and deletion: Through the 'My Bookings' section on our website, we provide the necessary tools for you to access and correct your Personal Data at any time. If you wish to request the deletion of your Personal Data, you can do so by getting in touch with us using the contact details provided in the 'Data Controller' section.
- Restriction, objection, and portability: You can object to the processing of your Personal Data, ask us to restrict its processing, or request that we transfer it to a third party. You can exercise these rights by getting in touch with us using the contact details provided in the 'Data Controller' section.
- Complaints: You also have the right to file a complaint with the data protection authority regarding our collection and processing of your Personal Data.
Data Controller
The Data Controller responsible for your Personal Data is Universo Simsy SL, located at Avda. Peseta, 70, 28054 Madrid, Spain. You can get in touch with us in writing or by email at privacidad@iberotransfers.com.
Links to third-party websites
Our website may contain links to external or third-party websites. If you click on these links and access those websites, please note that they have their own privacy policies. We do not control them, and therefore, we do not accept any responsibility for them. We strongly recommend checking their policies before submitting any personal information to those websites.
Updates
From time to time, we may update our Privacy Policy to adapt to legal, technical, or business changes. Whenever we update it, we will take appropriate measures to inform you based on the significance of the changes made. Additionally, we will make sure to obtain your consent for any major changes to the Privacy Policy, provided it is required by applicable data protection laws.
We recommend that you review this page regularly to get the latest information on our privacy practices.