Privacy policy
Last updated:
Who we are
- Company name
- Lux Transfer Malaga
- Licence no.
- 13168343
- Registered address
- Av. Estrella del Mar, 14, 29630 Benalmádena, Málaga, ES
- Phone
- +34 661 702 918
Who is responsible for your data
The data controller is the company identified above. Questions about this policy, or any request to exercise your rights, can be sent to the email address shown there.
What we collect, and why
We only collect what we need to arrange a transfer.
| Data | Why we need it | Legal basis |
|---|---|---|
| First and last name | To identify you to the driver and on the name sign | Performance of a contract |
| Email address | To send the booking confirmation and any changes | Performance of a contract |
| Phone number | So the driver can reach you on the day | Performance of a contract |
| Pickup and drop-off location, date, time | To perform the transfer | Performance of a contract |
| Street address or hotel, when in a town | So the driver knows where to go | Performance of a contract |
| Flight number (airport pickups) | To track your flight and adjust to delays | Performance of a contract |
| Passenger and luggage count | To send a vehicle that fits | Performance of a contract |
| Your comments | To honour any request you make | Performance of a contract |
| Your consent record and its timestamp | To prove consent was given | Legal obligation |
| A hashed form of your IP address | To limit automated abuse of the booking form | Legitimate interest |
We do not collect payment-card data: the booking flow takes no payment.
Consent
The booking form requires you to tick a box confirming you have read this policy. The box is never pre-ticked, and we record when it was ticked. You can withdraw consent at any time by emailing us, though we may still need to keep records of a transfer already performed in order to meet accounting obligations.
Who else sees your data
- Your driver, who receives the name, phone number, pickup details and flight number needed to perform your transfer — nothing more.
- Our email provider, which transmits the confirmation messages to you.
- Our hosting provider, which operates the servers where the booking is stored.
- Cloudflare, Inc. (Turnstile), which checks on the last step of the booking form that the request comes from a person and not a script. For that check it receives your IP address and technical information about your browser. It does not receive your booking details. Legal basis: our legitimate interest in keeping the form free of automated abuse.
We do not sell personal data, and we do not share it for advertising. Where a provider is outside the European Economic Area, the transfer is covered by the European Commission’s standard contractual clauses.
How long we keep it
Booking records are kept for 12 months from the date of the transfer, after which the personal fields are automatically anonymized and only non-identifying statistics remain. Where tax or accounting law requires a longer period for invoices, we keep those records for as long as that law requires.
Your rights
You have the right to request access to your personal data, and its correction, deletion, restriction or portability, and to object to processing. Write to the email address above; we reply within one month. If you are not satisfied with our answer, you may complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es).
Security
Data is transmitted over encrypted connections (HTTPS). Administrative access to booking data requires an individual account with a password stored only as an argon2id hash, and is limited to the people who arrange transfers.
Cookies
This site sets no tracking or advertising cookies. See the cookie policy for the detail.