MalagaTransferFor professionals

Privacy policy

Malaga Transfer is designed around the AEPD's data-protection-by-default guidance. The traveller side stores no name, phone number, flight number or itinerary in MVP.

Data controller

The controller responsible for this website is CERO IDEAS, SOLUCIONES TECNOLOGICAS E INVERSIONES, SL, CIF B70681770, with registered office at LUGAR CORTIJO LOS GOMEZ 546, 29792 Vélez-Málaga, Málaga, España. You can contact the company about personal data at contacto@ceroideas.com. Full company and registry details are in the legal notice.

What we collect on the traveller side

What we do not collect on the traveller side

Optional Google Analytics cookies

If you accept analytics, Google Analytics collects page views, successful professional pre-registration events, and contact clicks when provider links are available, alongside basic device and usage information using cookies. We use this to understand website traffic and which pages lead to contacts or applications. A contact click does not confirm a booking. Form names, phone numbers, email addresses and message contents are not included in these analytics events. We do not enable advertising personalisation or Google signals, and our page-view events exclude URL query strings and fragments. Analytics is not loaded before you accept. You can reject it or withdraw your choice using “Cookie preferences” in the footer. Your choice is remembered in your browser for up to six months.

Google processes this information under its privacy policy. Rejecting analytics does not affect access to the website.

Provider data

Provider identity, contact channels and service-area metadata are processed on the basis of the professional's contract with us. Authorisation evidence (licence documents) is stored in a private bucket accessible only to admin staff and never rendered publicly. Only verification metadata — type, authority, "checked_at" date — may be surfaced on the public profile.

Retention

Outbound-contact analytics are retained for up to 24 months and then aggregated. Verification metadata is retained for as long as a provider profile is live and for a further 24 months after off-boarding for audit purposes. Support correspondence is retained for 24 months. Concrete per-field retention windows will be added here as they are formalised.

Contact

Data-protection requests: contacto@ceroideas.com.