Private policy

PRIVACY POLICY OF THE WEBSITE
https://taximercedesgalicia.com/

I. PRIVACY POLICY AND DATA PROTECTION
In accordance with current legislation, Taxi Mercedes Galicia (hereinafter also referred to as the Website) is committed to adopting the necessary technical and organisational measures, based on the security level appropriate to the risk of the collected data.

Laws governing this privacy policy
This privacy policy is adapted to the current Spanish and European regulations on personal data protection on the internet. Specifically, it complies with the following standards:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
  • Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD-GDD).
  • Royal Decree 1720/2007, of 21 December, which approves the Development Regulation of Organic Law 15/1999, of 13 December, on Personal Data Protection (RDLOPD).
  • Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the Data Controller
The data controller for the personal data collected at Taxi Mercedes Galicia is: Diego Castiñeiras Enríquez, with NIF: 34874281W (hereinafter, Data Controller). His contact details are as follows:
Address: Lugar Guntin N7B 36378 Gondomar – Pontevedra
Contact phone: 655615145
Contact email: hola@taximercedesgalicia.com

Personal Data Record
In compliance with the provisions of the GDPR and LOPD-GDD, we inform you that personal data collected by Taxi Mercedes Galicia through the forms on its pages will be incorporated and processed in our file to facilitate, expedite, and comply with the commitments established between Taxi Mercedes Galicia and the User or to maintain the relationship established through the forms completed by the User, or to address a request or query from the User.
Furthermore, in accordance with the GDPR and LOPD-GDD, unless the exception set out in Article 30.5 of the GDPR applies, a record of processing activities is maintained, which specifies the processing activities carried out, according to their purposes, and the other circumstances set out in the GDPR.

Principles applicable to the processing of personal data
The processing of the User’s personal data will be governed by the following principles set out in Article 5 of the GDPR and in Article 4 and subsequent provisions of Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights:

  • Lawfulness, fairness and transparency: The User’s consent will be required at all times, after fully transparent information about the purposes for which personal data is collected.
  • Purpose limitation: Personal data will be collected for specified, legitimate purposes and not further processed.
  • Data minimisation: Only the personal data strictly necessary for the purposes for which it is processed will be collected.
  • Accuracy: Personal data must be accurate and kept up to date.
  • Storage limitation: Personal data will be kept in a form that allows identification of the User only for as long as necessary for the purposes of the processing.
  • Integrity and confidentiality: Personal data will be processed in a way that ensures its security and confidentiality.
  • Accountability: The Data Controller will ensure compliance with the above principles.

Categories of personal data
The categories of data processed by Taxi Mercedes Galicia are only identification data. In no case are special categories of personal data, as defined in Article 9 of the GDPR, processed.

Legal basis for the processing of personal data
The legal basis for the processing of personal data is consent. Taxi Mercedes Galicia is committed to obtaining the User’s explicit and verifiable consent for the processing of their personal data for one or more specific purposes.
The User has the right to withdraw their consent at any time. Withdrawing consent will be as easy as giving it. As a general rule, withdrawing consent will not affect the use of the Website.
In cases where the User must or may provide data through forms for inquiries, requesting information, or for reasons related to the Website’s content, they will be informed if filling out any of them is mandatory because it is essential for the proper development of the operation.

Purposes for which personal data will be processed
Personal data is collected and managed by Taxi Mercedes Galicia to facilitate, expedite, and fulfil the commitments established between the Website and the User or to maintain the relationship established through the forms the User fills out, or to address a request or query.
Furthermore, the data may be used for commercial purposes such as personalisation, operational and statistical purposes, and activities related to the social purpose of Taxi Mercedes Galicia, as well as for data extraction, storage, and marketing studies to tailor the Content offered to the User, as well as to improve the quality, functioning, and navigation of the Website.
When personal data is collected, the User will be informed of the specific purpose(s) of the data processing.

Data retention periods
Personal data will only be retained for the minimum time necessary for the purposes of the processing and, in any case, only for the following period: 12 months, or until the User requests its deletion.
When personal data is obtained, the User will be informed about the retention period for the personal data or, when that is not possible, the criteria used to determine this period.

Recipients of personal data
The personal data of the User will be shared with the following recipients or categories of recipients:

  • Google Analytics

If the Data Controller intends to transfer personal data to a third country or international organisation, the User will be informed at the time the personal data is collected about the third country or international organisation to which the data is intended to be transferred, as well as the existence or absence of an adequacy decision by the Commission.

Personal data of minors
In accordance with Articles 8 of the GDPR and 7 of Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights, only persons over 14 years of age may give their consent to the processing of their personal data by Taxi Mercedes Galicia. For children under 14, consent from parents or guardians is required, and it will only be considered lawful to the extent that it has been authorised by them.

Confidentiality and security of personal data
Taxi Mercedes Galicia is committed to adopting the necessary technical and organisational measures, according to the level of security appropriate to the risk of the collected data, to ensure the security of personal data and to prevent the accidental or unlawful destruction, loss, or alteration of personal data, or unauthorised communication or access to such data.
The Website has an SSL certificate (Secure Socket Layer), which ensures that personal data is transmitted securely and confidentially, as the transmission of data between the server and the User is fully encrypted.
However, since Taxi Mercedes Galicia cannot guarantee the invulnerability of the internet or the complete absence of hackers or others who may fraudulently access personal data, the Data Controller commits to notifying the User without undue delay when a personal data security breach is likely to result in a high risk to the rights and freedoms of individuals.
Personal data will be treated as confidential by the Data Controller, who commits to informing and ensuring, through a legal or contractual obligation, that such confidentiality is respected by employees, partners, and anyone else to whom the information is made accessible.

Rights derived from the processing of personal data
The User has the following rights recognised in the GDPR and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights, which they may exercise against Taxi Mercedes Galicia and the Data Controller:

  • Right of access: The right of the User to obtain confirmation as to whether or not Taxi Mercedes Galicia is processing their personal data and, if so, to obtain information about their specific personal data and the processing that has been carried out or is being carried out.
  • Right of rectification: The right of the User to have inaccurate or incomplete personal data corrected.
  • Right to erasure (“right to be forgotten”): The right of the User to have their personal data erased when it is no longer necessary for the purposes for which it was collected or processed.
  • Right to restrict processing: The right of the User to limit the processing of their personal data.
  • Right to data portability: The right of the User to receive their personal data in a structured, commonly used, and machine-readable format.
  • Right to object: The right of the User to object to the processing of their personal data.
  • Right not to be subject to automated decisions, including profiling: The right of the User not to be subject to automated decisions based solely on the processing of their personal data.

The User can exercise their rights by written communication to the Data Controller with the reference “GDPR-…”