Este texto legal está disponível em espanhol e em inglês; é apresentado em inglês.
Privacy policy
Última atualização: 24 de setembro de 2026
Esta tradução é disponibilizada por conveniência; em caso de discrepância, prevalece a versão espanhola.
1. Data controller
- Controller: Jorge Alferez Adan (Roamdia), tax ID 02302213M
- Address: Illescas (Toledo), España
- Contact for privacy matters: reservas@taxitoledo.app
2. Data we process, purposes and legal bases
| Purpose | Data | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Manage your booking, send vouchers and notices about it, handle cancellations and refunds | Name, email, phone (optional), booking details, language | Performance of the contract (art. 6.1.b) | While the booking is in force and then for the limitation period of claims |
| Invoicing and accounting | Name, booking and payment amounts | Legal obligation (art. 6.1.c) | 6 years (Commercial Code, art. 30) and the tax periods |
| Customer area access link and balance | Email, bookings, balance movements | Performance of the contract (art. 6.1.b) | While you use it; access links expire within minutes |
| Offers and news by email (only if you tick the box) | Name, email, language | Consent (art. 6.1.a and art. 21 LSSI-CE); you can withdraw it at any time | Until you withdraw consent |
| Security, fraud prevention and abuse limits | IP address, technical logs | Legitimate interest (art. 6.1.f) | Up to 12 months |
| Content notices (Digital Services Act) | Name and email (optional), notified content | Legal obligation (art. 6.1.c) | While the notice is handled and the period to contest it |
| Partner attribution and measurement cookies | See the cookie policy | Consent (art. 6.1.a and art. 22.2 LSSI-CE) | See the cookie policy |
Card payments are processed by the payment gateway; Roamdia never sees or stores your full card number.
3. Recipients
- The provider organising the activity you book, which needs your name, contact details and booking details to deliver it.
- The payment gateway (Stripe), which processes the payment.
- Service providers acting on our behalf (cloud hosting and infrastructure, transactional email), under a data processing agreement.
- Public authorities, when required by law.
When a recipient is outside the European Economic Area, the transfer relies on an adequacy decision (such as the EU-US Data Privacy Framework) or on the standard contractual clauses approved by the European Commission.
4. Your rights
You can request access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to reservas@taxitoledo.app with proof of identity. If you are not satisfied with the answer, you can lodge a complaint with the Spanish Data Protection Agency (AEPD, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es).
5. Minors
Bookings must be made by adults. Minors under 14 cannot provide their data without the consent of their parents or guardians (art. 7 of Organic Law 3/2018, LOPDGDD).
6. Automated decisions and security
We do not take decisions based solely on automated processing that produce legal effects on you. We apply technical and organisational measures appropriate to the risk (encryption in transit, encrypted secrets, access control by role, audit logs).
More information on cookies in the cookie policy.