ES ← Back to website

Data protection

Privacy policy

At Vela Transfer we are committed to protecting the privacy of our users and to processing their personal data responsibly and transparently.

This is an English translation provided for information purposes. In case of discrepancy, the Spanish version shall prevail.

1. Data controller

In accordance with the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), the controller's details are as follows:

  • Controller: Roberto Bernal
  • Tax ID (NIF): 25738658W
  • Address: Avenida San Francisco, nº 7, 29620 Torremolinos (Málaga), Spain
  • Email: reservas [at] velatransfermalaga.com
  • Phone: +34 615 018 455
  • Trade name: Vela Transfer

2. What personal data do we process?

We may process the personal data you provide when requesting information, asking for a quote or booking a private transfer.

This may include:

  • Full name.
  • Phone number and email address.
  • Information about the requested transfer.
  • Origin, destination, date and time of the service.
  • Number of passengers and luggage.
  • Flight number, where needed to organise the transfer.
  • Identification details of the person booking the service, where required by the regulations on vehicles for hire with driver (VTC).
  • Any additional information you choose to provide.

Booking form: the form on the website does not send or store your data on our server. It only prepares a message that opens in WhatsApp; your data only reaches Vela Transfer if you decide to send that message.

Browsing: as with any website, the hosting server and the resource providers (fonts and images) technically receive your device's IP address in order to display the page. Vela Transfer does not use any analytics or tracking tools.

We recommend that you do not send sensitive personal data or any information that is not necessary to handle your request.

3. Purpose and legal basis of the processing

Personal data will be used for the following purposes:

  • Answering enquiries: handling requests for information and answering your questions.
  • Preparing quotes: calculating and sending you the price of the requested transfer.
  • Managing bookings: organising, confirming and providing the booked transfer services.
  • Complying with legal obligations: meeting the applicable tax, accounting and administrative obligations, including the reporting of services required for VTC activity.
  • Displaying the website: serving the pages and resources needed for the website to work.

The legal bases are:

  • Enquiries and quotes: steps taken at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR).
  • Managing bookings and transfers: performance of a contract (Art. 6(1)(b) GDPR).
  • Tax, accounting and VTC sector obligations: compliance with legal obligations (Art. 6(1)(c) GDPR).
  • Technical operation of the website: legitimate interest in providing a working and secure website (Art. 6(1)(f) GDPR).

Where any optional processing requires consent, it will be requested specifically and may be withdrawn at any time.

4. Recipients of the data

Personal data will not be sold or disclosed to third parties for commercial purposes unrelated to providing the service.

However, the providers needed to run the website and manage the transfers may have access to it, provided there is an adequate legal basis and the appropriate safeguards are in place.

  • Web hosting provider: Hostinger International Ltd. (Cyprus, European Union), as data processor.
  • Google Fonts (Google Ireland Ltd.): provides the website fonts.
  • Unsplash Inc.: provides the illustrative images on the website.
  • Public authorities: the Spanish Tax Agency and the Ministry of Transport (register of VTC service communications), where required by law.

WhatsApp and Meta: if you choose to contact Vela Transfer via WhatsApp, the WhatsApp service will open. Any data you send will also be subject to that platform's terms and privacy policy.

Some of these providers (Meta, Google or Unsplash) may process data outside the European Economic Area, particularly in the United States. In such cases, transfers are covered by the EU-US Data Privacy Framework, where the provider is certified, or by the standard contractual clauses approved by the European Commission.

5. Data retention

Personal data will be kept for as long as necessary to handle your request, manage the service and comply with applicable legal obligations.

Once the purpose for which it was collected has ended, data may be kept blocked for the legally required periods to address any possible liabilities.

  • Enquiries and quotes that do not result in a booking: up to 12 months from the last contact.
  • Data on booked services and invoicing: 6 years, in accordance with the Spanish Commercial Code and tax regulations.
  • WhatsApp conversations: deleted periodically once the request has been handled, unless needed for the reasons above.

6. Your rights

Where applicable, you may exercise the following rights over your personal data:

  • Access your personal data.
  • Request the rectification of inaccurate data.
  • Request its erasure.
  • Object to the processing.
  • Request the restriction of processing.
  • Request the portability of your data, where applicable.
  • Withdraw your consent at any time, where the processing is based on it.

To exercise these rights, you can send a request to:

reservas [at] velatransfermalaga.com

Your request must allow us to verify your identity and state the right you wish to exercise.

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe the processing of your data does not comply with the law.

7. Data security

Vela Transfer will take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure, taking into account the nature of the data and the risks of the processing.

No system for transmitting or storing information can guarantee absolute security.

8. Data provided by third parties

If you provide personal data about other people, you confirm that you are authorised to do so and that you have informed them, where appropriate, about the processing of their data.

9. Changes to this privacy policy

This Privacy Policy may be updated to reflect changes in the services, the tools used or applicable law.

The version published on this page applies from its date of update.

Last updated: 29 September 2026.