Privacy Policy

This privacy policy applies to the processing of personal data of clients and/or users of blacksheeptransfer.com, hereinafter, the WEBSITE, owned by Pablo Acuña Esparza, hereinafter, the DATA CONTROLLER.

Applicable regulations

Our Privacy Policy has been designed in accordance with REGULATION (EU) 2016/679 of the EUROPEAN PARLIAMENT and of the COUNCIL, of April 27, 2016, regarding the protection of natural persons with regard to the treatment of personal data and the free movement of these data and which repeals Directive 95/46/EC (General Data Protection Regulation), hereinafter GDPR EU 2016/679, and insofar as it does not contradict the aforementioned Regulation, for the provisions of Organic Law 3/2018, of December 5, Protection of Personal Data and guarantee of digital rights, hereinafter LOPDGDD 3/2018.

By providing us with their data, the client and/or user declares that they have read and are aware of this Privacy Policy, giving their unequivocal and express consent to the processing of their personal data in accordance with the purposes and terms expressed herein.

Basic information on data protection

Additional information on data protection

The DATA CONTROLLER is:

• Identity: Pablo Acuña Esparza
• N.I.F.: 26774526L
• Address: Avenida de la Obsidiana 2 – 29631 Benalmádena, Málaga (Spain)
• Phone: (+34) 666362608
• Email: consultas@blacksheeptransfer.com

Purposes and legal basis for processing

1. Generally speaking

   The DATA CONTROLLER processes the personal data provided by its clients and/or users for the following purposes:

   • Purpose: Respond to requests for information received, respond to queries, manage reservations received, provide the requested passenger transfer services, carry out administrative, commercial, accounting and fiscal management , as well as send commercial communications about our services by letter, telephone, email, SMS/MMS, WhatsApp, Telegram or by other equivalent electronic means of communication, as long as the interested party has consented to the processing of their personal data for this purpose.
   • Legal basis that legitimizes this treatment: Execution of a contract in which the interested party is a party or for the application at his request of pre-contractual measures. Legitimate interest. The consent of the interested party, which may be withdrawn at any time.

2. Electronic forms WEBSITE

   The DATA CONTROLLER processes the personal data provided by customers and/or users through the electronic forms for collecting personal data on the WEBSITE for the purposes identified below. :

   Regarding the “Contact Form” and other inquiries (those that can be addressed through the email accounts listed on the WEBSITE):

   • Purpose: Contact the interested party, respond to requests for information received and answer questions raised, provide customer service, as well as send commercial communications about our passenger transfer services through letter, telephone, email, SMS/MMS, WhatsApp, Telegram or by other equivalent means of electronic communication, as long as the interested party has consented to the processing of their personal data for this purpose.
   • Legal basis that legitimizes this treatment: Execution of a contract in which the interested party is a party or for the application at his request of pre-contractual measures. The consent of the interested party, which may be withdrawn at any time.

   Regarding the “Reservation Form”:

   • Purpose: Allows the user to make the online reservation of the transfer service through the website, as well as to send commercial communications about promotions of our passenger transfer services by letter, telephone, email , SMS/MMS, WhatsApp, Telegram or by other equivalent electronic means of communication, as long as the interested party has consented to the processing of their personal data for this purpose.
   • Legal basis that legitimizes this treatment: Execution of a contract in which the interested party is a party or for the application at his request of pre-contractual measures. The consent of the interested party, which may be revoked at any time.

   When the data requested in the electronic forms are necessary, the DATA CONTROLLER will indicate said mandatory nature at the time of collecting data from clients and/or users and not providing them will imply that they are not the corresponding request can be met.

What kind of data do we process?

For the purposes set forth in the previous section, the Client’s data set is treated, which we can divide into the following sources and categories:

1. Data provided directly by the client and/or user: data provided directly by the client and/or user, either at the time of requesting the service through the completion of electronic forms for the collection of personal data or in paper format enabled for this purpose such as those provided throughout the contractual relationship through different means, such as, for example, claims or requests for information filed with the Customer Service. The client and/or user is responsible for its veracity and updating.

   • Identifying Data (name and surname, NIF, NIE, passport, postal address, email, telephone, mobile, manual, handwritten or digitized signature, social network profiles, IP addresses, username and password)
   • Economic Data (bank details)
2. Data obtained from sources other than the client and/or user: data obtained from sources other than the client and/or user, either by having their consent or by any other legal authorization ( legitimate interest, compliance with a legal obligation…).
3. Data derived from the development of the commercial relationship: data provided indirectly by the client and/or user as a result of the provision of the contracted service and the maintenance of this activity. This category includes traffic data, the history of payments or reservations made, browsing data through the public Web page or access to the private area or others of a similar nature.

Record of processing activities

We inform you that the personal data obtained from the client and/or user as a result of filling in the existing electronic forms on the WEBSITE are part of the Record of Treatment Activities (RAT) of the DATA CONTROLLER. , which will be updated periodically in accordance with the provisions of GDPR EU 2016/679 and LOPDGDD 3/2018.

Recipients

The personal data of the interested parties will be communicated to the recipients indicated below:

1. In general terms:

   • The providers of the DATA CONTROLLER as data processors, within the framework of the corresponding provision of services (lawyers, accounting and tax advice, consultants and information technology service providers – website hosting and email service-).
   • The competent authorities and bodies, to the extent necessary to comply with legal obligations.

2. In relation to the “Contact Form” and with other queries (those that can be addressed through the email accounts that appear on the WEBSITE) and with the “ Reservation Form”:

   • No data will be transferred to third parties, except legal obligation.

Transfers to third countries

• It is not planned to transfer data to third countries, without an adequate level of protection.

Retention periods

Personal data will be kept:

1. In general terms:

   • The data will be kept as long as you do not request its deletion, and in any case, during the years necessary to comply with legal obligations.

2. In relation to the “Contact Form” and with other queries (those that can be addressed through the email accounts that appear on the WEBSITE) and with the “ Reservation Form”:

   • Personal data will be kept until the end of the relationship between the DATA CONTROLLER and the client and/or user, unless the latter previously requests their deletion, or until the The interested party withdraws the consent granted at any time, without affecting the legality of the treatment based on the consent prior to its withdrawal.

   For these purposes, the interested party is reminded that they must notify the DATA CONTROLLER as the addressee to whom they communicate personal data, any rectification or deletion of the data of their representatives, authorized persons and other contact persons.

   Once the relationship is concluded, to the extent that the personal data of the interested parties are relevant for the purposes of the responsibility of the DATA CONTROLLER towards the clients and/or users, these data will be They will be kept, duly blocked, at the disposal of the judicial authorities or the competent public administrations, for the requirement of the responsibilities derived from the treatment for the limitation period of the same.

Rights of data subjects

Customers and/or users of the WEBSITE may exercise before the DATA CONTROLLER, to the extent applicable, the following rights: access to personal data, rectification, deletion (right to forgetting), limitation of treatment, data portability, opposition to treatment and not being subject to automated individual decisions and, when the treatment is based on consent, the right to withdraw it at any time.

Customers and/or users may exercise these rights by written and signed request sent to the postal address of the DATA CONTROLLER located at Avenida de la Obsidiana 2 – 29631 Benalmádena, Málaga (Spain) or through the email address consultas@blacksheeptransfer.com, attaching, in both cases, the interested party, a legally valid proof of identity, such as a photocopy of the NIF/NIE or equivalent document, and clearly indicating the right you wish to exercise.

Customers and/or users will also have the right to file a claim with the competent Control Authority (Spanish Agency for Data Protection) if they observe that the treatment does not comply with current regulations or consider that their rights have been violated as regards to the protection of your personal data, especially when you have not obtained satisfaction in the exercise of your rights, through the WEB page https://www. aepd.es/

These rights will be dealt with by the DATA CONTROLLER within 1 month, which may be extended to 2 months if the complexity of the request or the number of requests received so requires. All this without prejudice to the duty to keep certain data in the legal terms and until the possible responsibilities derived from a possible treatment, or, where appropriate, from a contractual relationship, prescribe.

In addition to the above, and in relation to data protection regulations, Users who request it, have the possibility of organizing the destination of their data after their death.

Sending commercial communications

In compliance with the provisions of the second final provision of Law 9/2014, of May 9, on Telecommunications that modifies Law 34/2002, of July 11, on information society services and electronic commerce, commercial communications carried out electronically must be clearly identifiable as such, and the natural or legal person on behalf of which they are carried out must also be clearly identifiable, without prejudice to the provisions of the regulations issued by the Autonomous Communities with exclusive powers over consumption.

The client and/or user, who provides their contact information to the DATA CONTROLLER by clicking on the “SEND” button on the electronic forms for collecting personal data on the website and affirmatively check the two existing boxes for obtaining consent, “I accept the processing of my data according to the purposes indicated in the basic data protection information” and “I give my consent to receive commercial communications from your services”, clearly authorizes and grants your express, free and unequivocal consent to the DATA CONTROLLER to process your personal data for the purpose of sending you commercial communications about its services by letter, telephone, email, SMS/MMS, WhatsApp, Telegram or by other equivalent means of electronic communication.

The legal basis that legitimizes this treatment is the consent of the interested party, which may be revoked at any time.

In compliance with the provisions of articles 21 and 22 of Law 34/2002, of July 11, on services of the information society and electronic commerce, the user may oppose the processing of their data for purposes promotions and revoke the consent given to receive commercial communications via email by simply notifying the PROVIDER of your will through a simple and free procedure, consisting of sending an email to the email address consultas@blacksheeptransfer.com, indicating in the subject of the message “UNSCRIBE” or “DO NOT SEND”.

The data provided will be kept as long as the commercial relationship is maintained or during the years necessary to comply with legal obligations.

Social Media Policy

The DATA CONTROLLER has profiles on Internet social networks:

In this case, it is considered RESPONSIBLE FOR THE TREATMENT of the data of its users, also understood as followers, subscribers, fans, or simply people who make comments or queries through these channels.

In this sense, the DATA CONTROLLER could use this profile to inform its users of news that it deems appropriate for the purpose of the services offered, or perhaps it could also share information or current articles. posted by other users of social networks.

In no case will it use users’ personal information without their consent to have relationships other than those expected in the aforementioned social network, requesting the user’s own consent where appropriate.

Veracity of the data provided by the interested parties

The client and/or user is responsible for the information provided by completing the electronic forms that are made available on the WEBSITE or by sending emails to the different accounts under the Internet domain blacksheeptransfer.com is true, answering for the accuracy of all the data that it communicates and will keep it updated to reflect a real situation, being responsible for false or inaccurate information that it provides and for the damages, inconveniences and problems that could cause the PERSON RESPONSIBLE FOR THE TREATMENT or third parties.

Security measures

The DATA CONTROLLER guarantees that the appropriate technical and organizational policies have been implemented on the WEBSITE to apply the security measures established by GDPR UE 2016/679 and LOPDGDD 3/2018 with the in order to protect the rights and freedoms of clients and/or users and has provided them with the appropriate information so that they can exercise them.

The DATA CONTROLLER to protect individual rights, especially in relation to automated processing and with the desire to be transparent with customers and/or users, has established a policy that includes all of said treatments, the purposes pursued by the latter, their legitimacy and also the instruments available to the client and/or user so that they can exercise their rights.

The WEBSITE is created with the WordPress content management system using the Elementor Pro visual editor and has an activated SSL encryption Certificate installed for the entire domain, allowing the user to safely send their personal data through the electronic forms for the collection of existing personal data.

The WEBSITE is hosted on the servers that NarixaSoft.es, with NIF: ES53701043E and with address at C/ Bronce 5, 29780 Nerja, Málaga (Spain), offers to the DATA CONTROLLER, being the assigned IP address of Spanish range.

All information will be kept and managed with due confidentiality, applying the necessary computer security measures to prevent access or improper use of your data, its manipulation, deterioration or loss.

However, the client and/or user must take into account that the security of computer systems is never absolute. When personal data is provided over the Internet, such information may be collected without your consent and processed by unauthorized third parties. The RESPONSIBLE FOR THE TREATMENT declines any type of responsibility for the consequences of these acts they may have for the User, if they published the information voluntarily.

Acceptance and consent

The client and/or user declares that they have been informed of the conditions on the protection of personal data, accepting and consenting to their automated processing by the PROCESSING RESPONSIBLE in the manner and for the purposes indicated in this Privacy Policy. Certain services provided on the WEBSITE may contain particular conditions with specific provisions regarding the protection of personal data.

Changes to this privacy policy

THE DATA CONTROLLER reserves the right to modify this Privacy Policy to adapt it to new legislation, jurisprudence, interpretation of the Spanish Agency for Data Protection, as well as privacy practices. the industry.

In such cases, the DATA CONTROLLER will announce the changes introduced on the websites with reasonable anticipation of their implementation.

This privacy policy may be supplemented by the Legal Notice, Cookies Policy and the General Contracting Conditions that, where appropriate, are included for certain products or services, if said access involves any specialization in data protection matters. of a personal nature.