Privacy Policy

1. Data controller

• Controller: Los Camioneros
• Address: Carrer Bartrina 12, 08191 Rubí, Cataluña, España
• Phone: +34 651 50 98 77
• Email: loscamioneros.rubi@gmail.com

2. What data we process and where it comes from

This website is informational: there are no forms, no user accounts and no online bookings or payments. That's why we process very little data:

• What you give us when you contact us by email, phone or WhatsApp: usually your name, your phone or email and the content of your message (for example, a booking request).
• Technical browsing data that the server necessarily receives when serving the page (IP address, device and browser type, page visited and referring site).
• Anonymous usage statistics. To know how many people visit the site we use our own cookieless measurement: your IP and browser are not stored, they are turned into an irreversible code that changes every day and only serves to avoid counting the same person twice on the same day. It cannot identify you or track you across websites or across different days.

We do not knowingly process children's data or special categories of data (health, beliefs, etc.). If you tell us about an allergy or intolerance when booking, we will use it solely to provide the service and will not keep it longer than necessary.

3. What we use it for and on what legal basis

• Answering your enquiries and booking requests. Basis: pre-contractual steps taken at your request and your consent when you write to us (art. 6.1.b and 6.1.a GDPR).
• Keeping the website secure and running (server technical logs, abuse prevention). Basis: legitimate interest in the security of the service (art. 6.1.f GDPR).
• Measuring, in aggregate and anonymously, how the site is used in order to improve it, using the cookieless analytics described above. Basis: legitimate interest, given that the impact on your privacy is minimal (nothing is stored on your device and you are not identified) (art. 6.1.f GDPR).
• Cookie-based analytics (Google Analytics), only if you accept it in the cookie notice. Basis: your consent, which you may withdraw at any time (art. 6.1.a GDPR). See the Cookie Policy.

4. How long we keep the data

• Communications (email, WhatsApp, phone): for as long as the relationship lasts and, afterwards, for the applicable statutory limitation periods.
• Anonymous statistics: kept in aggregate form (daily totals). Daily visitor codes are deleted automatically after a few months.
• Cookies: for the periods set out in the Cookie Policy.

5. Who we share the data with

We do not sell or transfer your data. It is only accessed by the technology providers needed to run the website, acting as data processors under contract and with safeguards in place:

• Vercel Inc. (USA) — Website hosting and cookieless audience analytics. Their privacy policy.
• Upstash Inc. (USA / EU) — Database storing the website content and aggregated statistics. Their privacy policy.
• Google Ireland Ltd. (Ireland (EU), with possible transfers to the USA) — Google Analytics (only if you accept analytics cookies) and location map. Their privacy policy.

In addition, data may be disclosed to public authorities and law enforcement where there is a legal obligation to do so.

6. International transfers

Some of these providers are located in the United States. Those transfers rely on the standard contractual clauses approved by the European Commission and/or on the providers' certification under the EU-U.S. Data Privacy Framework, together with any additional safeguards required.

7. Your rights

You may exercise, free of charge, your rights of access, rectification, erasure, objection, restriction and portability, and the right not to be subject to automated decisions, as well as withdraw your consent at any time (without affecting the lawfulness of processing carried out beforehand).

To do so, write to loscamioneros.rubi@gmail.com stating which right you wish to exercise. We will reply within one month at the latest.

If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan 6, 28001 Madrid — www.aepd.es).

8. Security

We apply appropriate technical and organisational measures to protect the data: encrypted connection (HTTPS) across the site, access to the management panel restricted by credentials and an encrypted session, and access to information limited to essential staff.

9. Changes to this policy

We may update this policy if our services or the law change. The version in force is always the one published on this page, with its last-updated date.