Privacy Policy

1. Data Controller

In compliance with Regulation (EU) 2016/679, General Data Protection Regulation (GDPR), and the applicable Spanish legislation on personal data protection, users are informed that the personal data they provide through this website will be processed by:

Daari Transfers (hereinafter, the “Controller”)
Website: https://daaritransfers.com
Contact email: info.daaritrans@gmail.com
Telephone: +34 643 36 20 02
Postal address: [add full postal address]

2. What personal data do we collect?

Depending on the services you use on https://daaritransfers.com, the Controller may process the following categories of data:

• Identification data: first name, last name.
• Contact data: email address, telephone number.
• Booking data: pickup date and time, place of origin and destination, number of passengers, flight number, hotel or accommodation address, customer comments.
• Billing and, where applicable, payment data: data necessary for invoicing and, where applicable, payment data managed through secure third-party payment gateways (the website does not store full credit card details).
• Browsing data: IP addresses, device identifiers, cookies and other technical data, in accordance with the Cookie Policy.

3. Purposes of the processing

The personal data provided by the user may be processed for the following purposes:

• Management of transfer bookings between the airport and hotel or other destinations in Mallorca, as well as the provision of the contracted services.
• Customer service: management of enquiries, information requests, incidents or complaints related to transfer services.
• Administrative, accounting and tax management arising from the provision of transport services and compliance with legal obligations.
• Commercial communications related to Daari Transfers services (offers, promotions, news), provided that the user has given their express consent or there is a prior contractual relationship that allows it.
• Security and fraud prevention, as well as improvement of the website and the services offered, through the analysis of browsing and user experience, based on the Cookie Policy.

4. Legal basis for processing

The legal grounds that justify the processing of your personal data are:

• Performance of a contract: to manage your transfer booking, provide the requested service and issue the corresponding invoice.
• Compliance with legal obligations: to comply with accounting, tax and security obligations required by applicable law.
• Consent of the data subject: for sending commercial communications and, where applicable, for the use of certain cookies or contact forms (where such consent is requested and expressly given).
• Legitimate interest of the Controller: to improve services, ensure website security and prevent fraud, provided that such interest does not override the user’s rights and freedoms.

5. Data retention

The personal data provided will be kept for the time strictly necessary to fulfill the purpose for which they were collected and, subsequently, for the retention and limitation periods required by applicable law.

• Data related to the provision of services: will be kept for the duration of the contractual relationship and, once it has ended, for as many years as necessary to comply with legal obligations.
• Data used for commercial communications: will be kept as long as the user does not withdraw their consent or object to the processing.
• Browsing and cookie data: as set out in the Cookie Policy and the retention periods indicated in the browser settings and by the relevant third parties.

6. Recipients of the data

As a general rule, personal data will not be disclosed to third parties, except where there is a legal obligation or where it is necessary for the provision of the service.

In some cases, it may be necessary to communicate your data to:

• Technology and hosting service providers necessary for the operation of the website (hosting, email, management tools, etc.).
• Payment service providers and banking institutions, where online payments are processed.
• Accounting, tax or legal advisors, for compliance with legal obligations.
• Public authorities and law enforcement agencies, where required by law or necessary to deal with potential legal liabilities.

Where third parties act as data processors, the corresponding data processing agreements will be formalized, ensuring compliance with data protection regulations.

7. International data transfers

If we use services from providers located outside the European Economic Area (EEA) that may involve international data transfers (for example, hosting, email marketing, analytics or payment tools), such transfers will be carried out with the appropriate safeguards and mechanisms under the applicable regulations (standard contractual clauses, adequacy decisions, etc.).

For more information about possible international transfers, you may consult the privacy policies of such providers or contact the Controller using the contact details provided.

8. Users’ rights

Users may exercise the following rights regarding their personal data at any time:

• Right of access: to know which personal data are being processed.
• Right to rectification: to request the correction of inaccurate or incomplete data.
• Right to erasure: to request the deletion of data when, among other reasons, they are no longer necessary for the purposes for which they were collected.
• Right to object: to object to the processing of their data under certain circumstances and on grounds relating to their particular situation.
• Right to restriction of processing: to request the limitation of data processing in the cases provided for by law.
• Right to data portability: to receive the data in a structured, commonly used and machine-readable format and to transmit them to another controller, where technically feasible.

To exercise these rights, users may send a written request, clearly indicating which right they wish to exercise and attaching, where appropriate, a copy of a document proving their identity, through:

Email: info.daaritrans@gmail.com
Customer service phone: +34 643 36 20 02

Users also have the right to lodge a complaint with the competent data protection supervisory authority if they consider that the processing of their data does not comply with applicable law.

9. Data security

The Controller will implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in order to protect personal data against accidental or unlawful destruction, loss or alteration, or unauthorised disclosure or access.

However, users should be aware that security measures on the internet are not impregnable and that the absolute invulnerability of computer systems cannot be guaranteed.

10. Links to third-party websites

The website https://daaritransfers.com may include links to third-party websites (for example, payment gateways, social networks, external tools). The Controller is not responsible for the content or privacy policies of such websites. Users are advised to review the privacy policies of each website they visit via external links.

11. Changes to this Privacy Policy

The Controller reserves the right to modify this Privacy Policy to adapt it to legislative or case law developments, as well as industry practices or changes in the services offered.

In the event of significant changes, users will be informed by means of a prominent notice on the website or, where required, by direct communication.

The last update of this Privacy Policy was made on [insert here the date of last update].