Privacy policy

Data controller

Data controller

Manuel Ortega Sánchez

Trading name

Sherry Transfer

Spanish tax ID

32092946B

Business address

Calle Golondrina 32, 11405 Jerez de la Frontera, Cádiz, España

Telephone

+34 692 187 156

Email

info@sherrytransfer.com

Bookings

reservas@sherrytransfer.com

Website

https://sherrytransfer.com

1. Scope of this policy

This policy explains how Sherry Transfer processes personal data about visitors to sherrytransfer.com and people making enquiries or requesting and booking transfers. We apply Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on personal data protection and digital rights.

2. Data and its sources

Data comes from you, a person booking on your behalf, and communications about the service. Stripe provides payment results and references linking the payment to your booking. If you provide someone else’s data, you must inform them about this policy and have a lawful basis to do so.

• Identity and contact details: first and last name, telephone, email and tax details where needed for an invoice.
• Transfer details: pickup, destination, dates and times, passengers, vehicle, flight, luggage, child seats and any comments you choose to provide.
• Booking management: amounts, payment status, refunds and transaction references. Full card details are entered directly with Stripe; our website does not store them.
• Technical data: IP address, requests and records needed for service operation and security. Do not include health data or other particularly sensitive information in comments.

3. Purposes

• Answering enquiries and preparing quotes.
• Calculating routes and prices, managing bookings, assigning a driver and providing transfers.
• Managing payments, refunds, invoices and administrative obligations.
• Sending confirmations and operational booking messages; these messages are not advertising.
• Protecting the website, preventing fraud and handling incidents or complaints.
• If marketing communications are introduced, they will require the appropriate legal basis, including consent where necessary, and you can opt out. Advertising consent is not a condition of booking.

4. Legal basis

Enquiries, quotes, bookings and transfer communications are processed to take steps at your request before a contract or perform it (GDPR Article 6(1)(b)). Invoicing and tax obligations are based on legal obligations (Article 6(1)(c)).

Service security, fraud prevention and the defence of claims are based on legitimate interests (Article 6(1)(f)), balanced against your rights. Where consent is required (Article 6(1)(a)), we will request it specifically; you may withdraw it without affecting earlier lawful processing.

Required fields are necessary to process the request; without them we may be unable to help. Comments and fields marked optional are voluntary.

5. Retention

We retain data as needed to handle your enquiry, manage the booking and maintain the relevant relationship. Afterwards, it will be kept with restricted access or blocked where appropriate for applicable legal periods and potential tax, accounting or contractual liabilities.

Marketing data, if any, is processed until you withdraw consent or object, while retaining minimal information to respect your opt-out. Technical records are kept as needed for operation, security and incident investigation.

6. Recipients and providers

We give the assigned driver or transport partner only the information needed to arrange and provide your transfer. Hosting, email and support providers, payment and maps services listed below may also access data according to their role. Authorities and courts receive data where legally required.

We do not sell personal data. Processors must follow applicable instructions and contractual terms. Some services, including Stripe and certain Google or WhatsApp services, may also process data as independent controllers.

7. International transfers

International providers may process or access data outside the European Economic Area, including in the United States. This may occur even where the main server is hosted in Europe.

Google, Stripe and WhatsApp publish their applicable transfer mechanisms, including adequacy decisions for organisations participating in the EU–US Data Privacy Framework and European Commission standard contractual clauses, as appropriate. Render’s data protection agreement incorporates standard contractual clauses for transfers outside the EEA that are not covered by an adequacy decision. Request information and a copy of safeguards applicable to your processing at info@sherrytransfer.com.

8. Your rights

You may request access, rectification, erasure, restriction and portability, and object to processing in the circumstances provided by law. You may withdraw consent without retroactive effect.

Contact info@sherrytransfer.com or the business address above and explain which right you wish to exercise. We will only request additional identification where necessary and proportionate; a copy of an identity document is not routinely required.

We will respond within the legal period, normally one month, subject to extensions allowed by the GDPR. You may complain to the Spanish Data Protection Agency at www.aepd.es.

Agencia Española de Protección de Datos (AEPD)

9. Security and confidentiality

We apply security measures appropriate to the processing, such as encrypted connections, administration access controls and restricted access to bookings. No system is risk-free; report privacy incidents to info@sherrytransfer.com.

10. Browsing and technical storage

The booking process uses browser session storage to retain the route and form data during booking and language changes. The administration panel uses an authentication cookie to keep the administrator signed in. You can clear these in your browser; doing so may interrupt a booking or end a session.

Google services for addresses, routes and reviews may receive technical information when used. Stripe and WhatsApp also apply their own policies when you open them. The website currently includes no proprietary behavioural advertising tools or Google Analytics. If technologies requiring consent are added, information and consent will be provided before activation.

11. Pricing and profiles

Prices are calculated automatically from the route, vehicle and current rates. We do not use your data to build advertising profiles. Contact us to ask about a calculation or request personal assistance.

12. Policy updates

We may update this policy to reflect changes to services or legislation. The current version and date will appear here and we will communicate significant changes where required. An update does not authorise incompatible new purposes for existing data without the necessary legal basis.

13. Content and liability

The website presents our services and facilitates bookings. We aim to keep information current and correct identified errors. Specific transfer and payment terms are shown during booking and in the confirmation.

Use of this website does not limit statutory consumer rights or exclude liabilities that cannot lawfully be excluded.

14. Links to other websites and this website

External links provide information or requested functions. Their operators are responsible for their content and data processing; consult their terms when using them.

Links to Sherry Transfer must identify their destination correctly and must not imply a misleading partnership or authorisation. Framing this website or using our trademarks or logos beyond uses permitted by law requires permission. Third-party content must not be presented as ours, nor may our reputation be unlawfully harmed.

15. Operation and user obligations

Maintenance or technical incidents may cause interruptions. We will work to restore service; obligations for confirmed bookings and statutory user rights remain in place.

Users must use the website lawfully, supply accurate and relevant data, respect others’ rights and refrain from introducing malicious content or attempting unauthorised access to information or systems.

We may update content and functions and restrict abusive use in accordance with the law. This does not remove contractual commitments or require users to destroy records they may or must lawfully retain.

16. Applicable law

This policy and use of the website are governed by Spanish law and applicable European Union law, subject to mandatory consumer rights.