Privacy Policy in Detail

This privacy policy is established in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 for the protection of individuals with regard to the processing of personal data and on the free movement of such data” (hereinafter, the “Regulation” or “GDPR”) and is addressed to visitors of the www.securetransferservice.com website (hereinafter, the “Site”) and to anyone who has provided their contact details for an inquiry or to receive any information. The data provided will be processed lawfully and in accordance with the principles set out in Article 5 of the Regulation.

With the help of this Privacy Policy, the company Mallorca NSA Secure Transfer S.L. (hereinafter „STS“) hopes to openly and honestly notify you about all the processing we do with your data, the reasons we do so, the user rights you have over your personal data, and how long we will keep it on file.

The usage of STS’ website is governed by this privacy statement. In accordance with the provisions of Regulation (EU) 2016/679 General Data Protection Regulation (hereinafter, “RGPD”), all personal data that the User provides through the website www.securetransferservice.com (hereinafter, the “Website”) will be incorporated and processed in the files and processing systems owned by the company Mallorca NSA Secure Transfer S.L. for the sole purpose of being able to handle your requests sent through our Website, provide our services, and keep you informed electronically about our services.

The term User/s is used here to refer to all persons over 18 years of age who access the Website. As a User, you declare that you have the necessary legal capacity to understand and accept in its entirety the Privacy Policy.

1. The data processing controller

The controller of the processing of personal data is Mallorca NSA Secure Transfer S.L. (STS), with the registered office at Paseo de la playa 20/4A, 07108 Puerto de Sóller, Mallorca, Spain, and NIF ESB10800050, and can be contacted via our email address office@securetransferservice.com (hereinafter, the “Data Controller”).

2. What is personal data and data processing?

These are data that identify or allow the identification of a person. For example, data that can directly identify a person includes their name and surname, while the ID number can indirectly identify them. Personal data includes information such as mobile phone number, email address, date of birth, and gender, among others.It could also include numerical identifiers such as your computer’s IP address, as well as information obtained through cookies.

A processing of personal data is any operation or set of operations that we carry out on your personal data, such as collection, recording, storage, use, and communication of your data.

3. What type of information do we collect?

If the user only accesses the website without interacting with STS in any of the contacts or request forms enabled, no data will be collected from the said user beyond what the user consents to share using cookies. That is, we use user identifiers (cookies) on our Website to collect information about the use of the website, such as the server to which the user’s computer is connected, the type of browser (for example, Firefox or Internet Explorer), and how the potential customer became aware of STS. We use this information solely to help us improve our marketing policies, and the internet user’s personal data is not included in the data capture. For more information about the cookies we use, please see our Cookie Policy.

3.1 Data collection forms

Additionally, when the user provides data in the data collection forms, for the purpose of being able to provide the services that STS offers, we may collect the following information depending on the actions performed on the Website:

Name

Surname

Phone number

Email

Details about your booking request such as type of transportation, pick-up adress, destination, no. of passengers etc. to proceed with the booking of our services.

This data is necessary for the correct offer/pricing and execution of the service.

As a user, you guarantee that the personal data provided to STS are truthful, accurate, complete, and up to date, being responsible for any direct or indirect damage or harm that may arise as a result of non-compliance with this obligation. If you provide STS with data of third parties, the User must have the consent of such third parties and undertake to transmit to them the information contained in this clause, exempting STS from any liability in this regard. However, STS may carry out verifications to verify this fact, adopting the due diligence measures that correspond, in accordance with data protection regulations.

4. Through what channels do we collect your personal data?

We only capture and process information that you provide to us through the following channels:

1. Through the service request forms.
2. Through the emails that you may send to the contact addresses published on the Website.
3. Trough phone calls or messages that you may send to the phone number published on the Website.
4. Trough contacting us via WhatsApp messages you may send to the phone number published on the Website.

5. What processing do we perform with your personal data and for what purposes?

We want to be open and honest with you, providing you with information about the actions we take with your data and the reasons for our processing of it.

Below, we outline all the processing or operations that we carry out with your personal data:

5.1. Contracting and provision of the services offered by STS. 

The purpose of this data processing is to enable STS to deliver the transportation service.

5.2. Management aimed at finalizing the contracting of services. 

That is, when a user expresses interest in using STS‘ services but doesn’t finish the contracting procedure. In particular:

Abandoned request form: if you’ve begun but not finished a request process, we’ll may send you an email or WhatsApp reminder. This way, you can complete it if you’re still interested. Keep in mind that prices might fluctuate based on service availability.

5.3. Commercial communications. 

We will handle your data to provide you with updates about STS’ services and relevant promotions. This will happen only if you have given your consent, or you have previously used STS’ services.

5.4. Cookies.

Our website utilises technology to install small files known as cookies on your device. These cookies serve various purposes, including enhancing your browsing experience, analyzing user navigation, and providing personalized content. If desired, you can block or disable cookies through your browser’s settings. For additional details, please refer to our Cookie Policy.

6. What is the legitimacy for the processing of your data?

Compliance with data protection regulations necessitates a valid legal basis for processing your data. Consequently, we rely on different legal grounds depending on the specific purpose of data processing. In this context, we process your data based on the following:

1. Execution of a Contract:When you engage STS’ services, we process your data as part of the contractual agreement.
2. Pre-contractual measures are taken at your request.These measures serve the purposes outlined in point 2 of the previous section. Specifically, they involve sending you communication to finalise the service contract in cases where there has been an issue or when you have initiated the request process but not completed it.
3. User consent.To facilitate the processing of your data for purpose 3, which involves sending you commercial communications about STS‘ services, we will seek your clear and direct consent. Please note that this consent can be withdrawn at any point.
4. Legitimate interest of STS.This involves sending you commercial communications related to your previous contract as an existing customer. If you wish to object to the processing of your date, you can do so directly through the commercial communications.

7. How long do we keep your data?

STS retains your personal data for the duration required to fulfil the purpose for which it was collected. Additionally, this retention period serves to demonstrate the lawful processing of data and the proper delivery of services. Here are the data retention periods based on their purposes.

1. Contracting and provision of the services offered by STS.Your data will be retained for up to six years following the conclusion of service provision. This duration allows STS to safeguard itself against any potential claims arising from the service execution.
2. Management efforts on completing service contracts.Your data will be retained solely until we despatch the communications outlined in section 5. Subsequently, if you finalise the request process, this will be preserved as provided as indicated in the previous subsection.
3. Commercial communications.Regarding commercial communications, your data will be retained until you choose to withdraw the consent you’ve given to receive such communications. In any case, data retention will not exceed a period of 2 years.

Additionally, when your date is processed based on STS legitimate interest arising from a previous contract. it will be kept until you express an objection to receiving commercial communications.

8. Do we collect data from minors?

Individuals below the legal age of majority are not permitted to use the services offered through the Website without prior authorization from their parents, guardians, or legal representatives. These authorised parties will assume sole responsibility for any actions taken by minors under their care on the Website, including the submission of forms containing personal data and the selection of relevant options on the checkboxes.

9. What are your rights when you provide us with your data?

Below, we detail the rights that you, as a user of the website, can exercise:

1. Right to Access
   • Users can request access to the personal data you hold about them.
2. Right to Rectification
   • Users can request correction of inaccurate or incomplete personal data.
3. Right to Erasure (Right to Be Forgotten)
   • Users can request deletion of their personal data under certain conditions.
4. Right to Restrict Processing
   • Users can request the limitation of how their data is processed.
5. Right to Data Portability
   • Users can request a copy of their data in a commonly used format and transfer it to another controller.
6. Right to Object
   • Users can object to the processing of their personal data, particularly for marketing or profiling purposes.
7. Right to Withdraw Consent
   • Users can withdraw their consent at any time if data processing is based on consent.
8. Right Not to Be Subject to Automated Decision-Making
   • Users can object to decisions made solely through automated processing, including profiling, which significantly affects them.
9. Right to Lodge a Complaint
   • Users have the right to lodge a complaint with a supervisory authority (e.g., a data protection authority).

10. Right to Know (under CCPA)
    • Users can request to know what personal data is collected, used, shared, or sold.
11. Right to Opt-Out of Sale or Sharing (CCPA/CPRA)
    • Users can opt-out of the sale or sharing of their personal data with third parties.
12. Right to Non-Discrimination
    • Users should not be discriminated against for exercising their privacy rights.

How to exercise these rights:

You can exercise your rights by either emailing your request to office@securetransferservice.com or sending a written and signed request via postal mail. Ensure that your request includes sufficient identifying information to verify your identity. Address the mail to the following location: Paseo de la playa 20/4A, 07108 Puerto de Sóller, Mallorca Spain, with the reference ‘STS Data Protection.’ 

Additionally, if STS fails to adequately address your rights, you have the option to lodge a complaint with the Spanish Data Protection Agency (AEPD). For further details on this right and how to exercise it, please visit the AEPD website: http://www.agpd.es

10. To whom do we disclose your personal data?

STS refrains from disclosing the personal information you provide unless it is essential for delivering contracted services or complying with legal obligations. In the context of availing STS’ services, your data may be shared with the following entities.

Banking entities for processing card payments and other payment methods available when paying for the service.

Institutions that provide fraud investigation, detection, and prevention services, as well as the minimization of the risk of its commission, based on the legitimate interest recognized by current regulations.

Consumer and user offices in case of any claims.

Companies providing passenger transportation services that are responsible for fulfilling the transportation services you’ve contracted.

In cases legally established, including Security Forces and Bodies as well as Judicial Authorities when appropriate.

Public administrations to which we must provide information for the fulfilment of our legal obligations.

In all circumstances, any data accessed by third parties with whom we collaborate to deliver our services will be handled in strict accordance with the provisions outlined in the GDPR, LOPDGDD, and other relevant regulations.

11. Security measures

STS adheres to the security levels required by the GDPR appropriate to the nature of the data being always processed. However, whilst technical security measures are in place, the internet always remains vulnerable to malicious actions by third parties. STS makes every effort to prevent such actions.

12. Do we perform international data transfers?

The personal data that we retain from the User will be processed exclusively in EU member states or the European Economic Area, respectively. However, in cases where processing occurs by a provider located in a country lacking the corresponding data protection laws, the processing will be protected by international contracts in accordance with European requirements.

13. Can i revoke my consent?

If you have previously granted consent for the processing of your data, you retain the right to revoke this consent at any point in the future. To do so, you can send your revocation notice to office@securetransferservice.com

It’s important to be aware that even if you choose to oppose or revoke your consent, there might be legal obligations that require us to retain your data. However, you still have the right to object to and withdraw your consent specifically for the processing of your personal data related to advertising purposes. For detailed contact information, please refer to Section 1.

14. Social Media

We have configured social media icons on our website. With a simple click, users can access the following social media platforms: Facebook, Instagram and WhatsApp.

When browsing our website, no personal data is shared with other providers. You can recognize the platform provider by its logo. We offer you the opportunity to go directly to STS’ posts on each social network through the icon. We have no influence on the data collected and the data processing procedures on these social networks, nor are we aware of the full extent of data collection, the purposes of processing, and the retention periods. Furthermore, we do not possess information regarding data collection.

If followers of STS’ profiles contact the company through social networks or publish images or information containing personal data, it will be the exclusive responsibility of the User and/or follower, with STS being exempt from any liability regarding the content that the User and the follower incorporate into our public profiles. Since STS’ profile on social networks is public, the company is not responsible for any direct or indirect actions taken by third parties resulting from the User’s publication of their personal data on our profiles. Therefore, we strongly urge you not to share personal or sensitive information and to carefully read the Privacy Policies and Terms and Conditions of such social platforms to configure your profile with the desired level of privacy. If anyone no longer wishes to follow STS on the social networks where it is present, they can unfollow the profile according to the provisions of the corresponding social platform´s Terms and Conditions.

15. Confidentiality and professional secrecy

All private communications between STS and Users are handled with utmost confidentiality. STS is committed to maintaining the secrecy of personal data and takes necessary precautions to prevent any unauthorised processing, alteration, loss or access in accordance with relevant data protection regulations.

Any information shared between the parties, agreed to have such nature, or simply related to the content of such information, will be treated as confidential. Accessing data over the Internet will not automatically grant access to it unless express consent is provided by the owner on each occasion.

16. Links to other websites

Our website also uses features from other service providers. To utilise them, you will be redirected to the actual service provider’s website, and you will be informed before redirection. You can view the respective privacy statements on their websites.

The STS website includes links to other websites that are not managed by STS. As a result, STS does not have control over these external sites, nor does it assume responsibility for the information they contain. We recommend that you visit these websites directly to learn about their Privacy Policy, which covers data protection, security, data collection, and data transmission provisions. STS will not be held accountable for any actions taken or the content found on these websites.

Unless authorized in writing by STS, no link, hyperlink, framing, or similar link may be inserted on the Website.

17. Changes in this privacy policy

This Privacy Policy is subject to potential changes based on changing criteria set by the relevant data protection authority at any given time. STS reserves the right to modify this Privacy Policy to align with such criteria, as well as any jurisprudential or legislative novelties.

18. Cookies

STS will utilise data storage and retrieval devices (“Cookies”) in accordance with the User’s consent which is obtained during the user’s initial visit to the Website as indicated in the browser pop-up window. Additionally, users are expected to familiarise themselves with the terms and conditions outlined in the Cookie Policy.

19. Contact

If you need further clarification regarding the management of your personal data, please feel free to contact us via E-Mail at office@securetransferservice.com