Privacy Policy
Last updated: May 2025
1. Who We Are
Élite BCN Transfers ("we", "us", "our") is a licensed VTC operator based in Barcelona, Spain. We operate the website elitebcn.info and provide luxury private chauffeur services. Contact: vtcbcn2025@gmail.com · +34 635 383 712.
2. Data We Collect
- Booking data: name, email, phone number, pick-up/drop-off addresses, travel date and time, passenger count, flight number.
- Payment data: we do not store card details — payments are processed by SumUp, a PCI-DSS compliant provider.
- Account data: if you register, we store your name, email, and hashed password.
- Usage data: IP address, browser type, pages visited, referring URLs — collected via standard server logs.
- Communications: emails or WhatsApp messages you send us.
3. How We Use Your Data
- To fulfil your booking and communicate with you about it.
- To send booking confirmation and driver-assignment emails.
- To process payments via SumUp.
- To comply with Spanish and EU legal obligations.
- To improve our service (aggregated, anonymised analytics only).
We never sell your data to third parties. We do not use your data for marketing without explicit consent.
4. Legal Basis (GDPR)
We process your data on the following lawful bases:
- Contract performance — to process your booking.
- Legitimate interests — to prevent fraud and improve our service.
- Legal obligation — to comply with tax and transport regulations.
- Consent — for optional marketing communications.
5. Data Retention
Booking records are retained for 7 years in accordance with Spanish commercial law. Account data is retained until you request deletion. Server logs are kept for 30 days.
6. Your Rights
Under GDPR you have the right to: access, rectify, erase, restrict processing of, and port your personal data. You may also object to processing and withdraw consent at any time. To exercise these rights, contact vtcbcn2025@gmail.com. You have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at aepd.es.
7. Third-Party Services
- SumUp — payment processing (GDPR compliant, PCI-DSS certified)
- Resend — transactional email delivery
- Supabase / Vercel — database and hosting (EU data centres where applicable)
- Google Maps — address autocomplete on the booking form
8. Cookies
We use essential session cookies for authentication and functionality. See our Cookie Policy for full details.
9. Changes to This Policy
We may update this policy from time to time. The "last updated" date at the top will reflect any changes. Continued use of our service constitutes acceptance of the revised policy.
10. Contact
For any privacy-related queries: vtcbcn2025@gmail.com