Privacy Policy

Data Controller

The controller of your personal data is:

What personal data we collect

Depending on how you contact us and use our services, we may process the following categories of data:

Identification and contact details

• full name
• e-mail address
• phone number
• preferred language of communication

Booking data

• pickup and destination location (hotel, address)
• date and time of transfer or excursion
• number of passengers, including children
• flight number (for airport transfers)
• additional preferences (e.g., child seat)

Technical data (when visiting our website)

• IP address
• browser type and version
• operating system
• pages visited on our website
• date and time of visit

Purposes of processing

We process your personal data only for specific, legitimate purposes:

• providing transfer and excursion services, including confirming and coordinating bookings
• communication with the customer before, during and after service delivery
• handling inquiries submitted via the contact form
• invoicing and accounting
• handling any complaints
• direct marketing of our own services (only with the user's consent)
• analyzing website traffic to improve the services offered
• fulfilling legal obligations, including tax and accounting requirements

Legal basis for processing

Your personal data is processed on the following legal bases in accordance with Article 6 of the GDPR:

• Performance of a contract (Art. 6(1)(b)) - delivery of the booked transfer or excursion
• Compliance with a legal obligation (Art. 6(1)(c)) - accounting and tax obligations
• Consent (Art. 6(1)(a)) - marketing communication, use of non-essential cookies
• Legitimate interest (Art. 6(1)(f)) - defense against claims, service quality improvement, website security

Cookies and tracking technologies

Our website uses cookies and similar technologies to ensure proper website operation, analyze traffic, and personalize content.

Types of cookies used

• Essential - necessary for proper website functionality, do not require consent
• Analytics - Google Analytics 4, Google Search Console; used to analyze traffic and user behavior
• Marketing - Meta Pixel; used for advertising campaigns

Cookie preferences are managed through the Yes Cookie consent tool displayed at the bottom of the website. You can change your settings or withdraw consent at any time.

Recipients of personal data

Your personal data may be shared with the following categories of recipients, only to the extent necessary to fulfill specific purposes:

• Hosting provider - Cyberfolks Sp. z o.o., based in Poznań (Poland), providing server infrastructure for the website
• Google LLC - for Google Analytics 4 and Google Search Console services
• Meta Platforms Ireland Limited - for Meta Pixel services
• Accounting firm and providers of bookkeeping services - to the extent necessary for issuing invoices and maintaining financial documentation
• Public authorities - only to the extent and in the form required by law

We do not sell your personal data to third parties.

Data retention period

We retain your personal data no longer than necessary for the purposes for which it was collected, including:

• booking data - for the duration of service delivery and for the period required by Spanish law for retention of settlement documentation (currently 6 years)
• contact form data - up to 12 months from last contact, unless the contact turns into a booking
• marketing data - until consent is withdrawn
• analytics data (cookies) - according to the settings of individual tools (Google Analytics defaults to 14 months)

Your rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access - you can obtain information about whether and what data we process
• Right to rectification - you can request the correction of inaccurate data or completion of incomplete data
• Right to erasure ("right to be forgotten") - you can request deletion of your data in specific cases
• Right to restriction of processing - you can request limitation of processing in specific situations
• Right to data portability - you can receive your data in a structured format
• Right to object - you can object to processing based on legitimate interest
• Right to withdraw consent - at any time, without affecting the lawfulness of processing prior to withdrawal
• Right to lodge a complaint - with a supervisory authority (in Spain: Agencia Española de Protección de Datos; in Poland: President of the Personal Data Protection Office)

To exercise the above rights, please contact us at contact@maxitransferbus.com. We will respond within one month of receiving your request.

Data security

We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or disclosure. In particular:

• the website uses an SSL certificate ensuring encrypted data transmission
• only authorized personnel have access to booking data
• we regularly update software and conduct security reviews
• we work only with service providers meeting data protection standards

In the event of a personal data breach that may result in a risk to your rights and freedoms, we will inform the competent supervisory authority and, if necessary, you directly - without undue delay.

International data transfers

Some of our external providers (Google, Meta) may transfer personal data to countries outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards, including the use of Standard Contractual Clauses (SCC) approved by the European Commission, in accordance with Chapter V of the GDPR.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date of the last update is indicated at the top of this page. We encourage you to review this policy periodically.

Continued use of our website after changes have been introduced means acceptance of the updated policy.

Contact

If you have any questions or requests related to this Privacy Policy or your personal data, please contact us: