1. Data controller
- Controller
- Antonia Cortés Vázquez (Taxi Cipri)
- Tax ID (NIF)
- 41550692L
- Address
- Paborderia 2, 17486 Castelló d'Empúries (Girona), Spain
- Telephone
- 628 032 414
- cipridelacalle@gmail.com
- Website
- https://www.taxiempuriabrava.com/
Taxi Cipri has not appointed a data protection officer, as none of the circumstances requiring one apply.
2. Data we process
The contact form collects your first name, surname, telephone number and email address (required fields), and optionally a subject and message.
Where contact is made by telephone, email or WhatsApp, we process the details you provide voluntarily. These usually include contact details and the information needed to arrange the journey, such as pick-up point, destination, date, time, number of passengers, luggage, or flight or train number.
When you browse the site, your IP address and technical data about your device and browser may be processed, together with your cookie preferences. Full details are set out in the Cookie Policy.
Please do not send us special category data (health, beliefs, religion or similar) that is not necessary to provide the service.
3. Purposes and legal bases
| Purpose | Data | Legal basis | Retention | Recipients |
|---|---|---|---|---|
| Answering enquiries and providing information on services, availability and fares | Identification and contact details; message content | Steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR). Where the enquiry does not relate to a possible contract, our legitimate interest in responding to messages addressed to us (Art. 6(1)(f)) | Until the enquiry is resolved and then up to 1 year as a record of the exchange | Email and hosting providers |
| Handling journey requests, confirming bookings, communicating with the customer and dealing with incidents, changes or cancellations | Identification and contact details; journey details | Performance of the transport contract or pre-contractual steps taken at your request (Art. 6(1)(b) GDPR) | For the duration of the service and then for the limitation periods applicable to any resulting liability | Email and hosting providers |
| Invoicing and compliance with tax and accounting obligations | Identification, tax and service details | Compliance with legal obligations (Art. 6(1)(c) GDPR) | For the periods required by tax and accounting law and for any resulting liability | Accountant, where applicable; tax authorities |
| Security, technical maintenance and prevention of form abuse | IP address, technical logs, anti-spam data | Our legitimate interest in keeping the site secure and operational (Art. 6(1)(f) GDPR) | Technical logs are kept only as long as necessary for security purposes | Hosting provider |
| Audience measurement and web analytics | Cookie identifiers and browsing data | Your consent (Art. 6(1)(a) GDPR), given through the cookie banner | As stated in the Cookie Policy | Google (Tag Manager and Analytics) |
| Managing interactions on our social media profiles | Public profile data and interaction content | Our legitimate interest in maintaining a presence and responding to users who interact voluntarily (Art. 6(1)(f) GDPR) | For as long as the interaction continues or until you ask us to delete it | Meta Platforms (Facebook and Instagram) |
Marketing communications. Taxi Cipri will not use the details you provide to send marketing communications unless you request or expressly authorise this. Sending an enquiry or a journey request is not treated as authorisation to receive advertising.
Cookies. This policy does not replace the Cookie Policy. Details of the cookies used, their providers, purposes and lifetimes, and how to manage your preferences, are set out there.
4. Source of the data
The data comes from you, through the form, by telephone, by email or via WhatsApp, and from your use of the site.
It may also come from someone booking on behalf of other passengers. In that case, the person providing the data must be entitled to do so and must have informed those concerned about this policy.
Otherwise, each user must provide only data relating to their own identity, and that data must be accurate and up to date. Using another person's identity is not permitted.
5. Which data is required
On the form, the fields marked as required are essential in order to identify you and reply. The remaining fields are optional.
To arrange a journey we need at least one contact detail and the details of the service requested. Without them we may be unable to deal with your request.
6. Retention periods
- Enquiries with no subsequent contract: up to 1 year from the last communication, as a record of the exchange.
- Requests and services provided: for the duration of the relationship and then for the applicable limitation periods.
- Invoicing: for the periods required by tax and accounting law.
- Technical and security data: only as long as necessary for security purposes.
- Consents and cookie preferences: until withdrawn and, thereafter, as long as needed to evidence how they were handled.
Once these periods have elapsed, the data is deleted or blocked and made available only to courts and competent authorities while any liability may still arise.
7. Recipients and processors
Taxi Cipri does not sell or disclose personal data to third parties for marketing purposes.
The following categories of provider may access data solely in order to deliver their services, under the relevant data processing agreement:
- Website hosting and maintenance provider: 9 Sistema Serveis Informàtics 2005 SL, based in Spain.
- Email service provider. The contact address is hosted with Google (Gmail), so Google processes the correspondence on the controller's behalf.
- Accountant or adviser, where applicable, for tax and accounting obligations.
- Web analytics providers: Google Ireland Limited (Tag Manager and Analytics), subject to consent.
- Provider of the component displaying Instagram content on the home page: Elfsight.
Data may also be disclosed to public authorities and courts where required by law.
8. WhatsApp and other third-party platforms
The site includes links that let you voluntarily start a WhatsApp conversation with Taxi Cipri. If you use them, Taxi Cipri will process the content of the conversation to deal with your enquiry or arrange the journey, for the purposes and on the legal bases described in this policy.
Separately, WhatsApp and its corporate group carry out their own processing as controllers, over which Taxi Cipri has no control. Use of the app is subject to the platform's own terms and privacy policy.
The same applies to the typefaces served by Google, the Elfsight component displaying Instagram content, and our social media profiles.
9. International transfers
Some of the providers listed belong to groups based outside the European Economic Area or may access data from third countries. Specifically, Google's services, the Elfsight component and Meta's platforms may involve processing or access from outside the EEA.
You can request further information about these transfers by writing to cipridelacalle@gmail.com.
10. Your rights
You have the right to access, rectification, erasure, objection, restriction of processing and data portability, and to withdraw your consent at any time without affecting the lawfulness of processing carried out beforehand.
To exercise them, write to cipridelacalle@gmail.com or to Paborderia 2, 17486 Castelló d'Empúries (Girona), Spain, stating which right you wish to exercise.
Where there is reasonable doubt about your identity, Taxi Cipri may request additional information to verify it, limited to what is necessary and proportionate. A full copy of your identity document is not required as a matter of course.
Exercising these rights is free of charge.
If you believe your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid — www.aepd.es).
11. Minors
The site is not aimed at minors. Minors should not provide personal data through the contact channels without the authorisation legally required from those holding parental responsibility or guardianship.
12. Automated decisions and profiling
Taxi Cipri does not take decisions producing legal or similarly significant effects based solely on automated processing, and does not build commercial profiles of users.
13. Social media
Taxi Cipri maintains profiles on Facebook and Instagram, and displays Instagram content on the home page.
Data belonging to people who interact with these profiles is processed in order to manage those interactions. Each platform also carries out its own processing as a controller, under its own terms and privacy policy. We recommend that you do not post sensitive or detailed personal information in public comments or messages.
14. Security
Taxi Cipri applies technical and organisational measures appropriate to the risk, taking into account the state of the art and the nature of the data. No system can guarantee absolute security, and no such guarantee is given.
15. Changes to this policy
This policy may be updated to reflect legal, technical or service changes. We recommend reviewing it from time to time.
Last updated: 22 July 2026.