Privacy Policy

Quick summary

Controller

GlobalCity Travel S.L.

Main purpose

Managing purchases, requests and customer service.

Legal basis

Contract, consent, legal obligation and legitimate interest.

Recipients

Technology providers and the service operator where applicable.

Retention

For the duration of the relationship and the applicable legal periods.

Your rights

Access, rectification, erasure, objection, restriction and portability.

This Privacy Policy governs the processing of the personal data of users who access, browse or use the website beauvaisbus.es (hereinafter, the “Website”).

Data controller

Company name: GlobalCity Travel S.L.
Tax ID (CIF): B42629550
Registered office: C/ ATZ, 3 Nº 05, 03290 Elche (Alicante), Spain
Email: [email protected]
Activity: Intermediation in the marketing of tourism services

Personal data we process

Depending on how you use the Website, we may process the following categories:

Identification and contact details: first name, surname, email (and any other data the user provides voluntarily).
Purchase and order management: data required to manage the booking or purchase and to provide customer service (including the order code).
Browsing: IP address, browser, operating system, date and time, pages visited (depending on your settings and consents).
Communications: the content of messages sent through forms or by email.

How we obtain your data

When you enter it in forms, during the purchase process, or when you contact support.
Automatically through your browsing (see the Cookie Policy where applicable).

Purposes of the processing

Customer service: handling enquiries, requests and incidents.
Purchase and service management: processing orders, operational communications and related support.
Administrative and accounting management: where necessary to comply with legal obligations.
Security: preventing fraud and misuse, and maintaining the security of the Website.
Service improvement: analysis and optimisation of the Website (subject to your cookie settings and consents).

Legal basis for the processing

Performance of a contract or pre-contractual measures (for example, handling a purchase or a request).
Consent (for example, contact forms, analytics or marketing where applicable).
Legal obligation (for example, tax and accounting obligations or requests from the authorities).
Legitimate interest (for example, security, fraud prevention and improvement of the Website, where appropriate).

Recipients of the data

We will only disclose your data where it is necessary and there is a legal basis to do so:

The service operator (for example, the transport or activity operator) in order to deliver the service you booked.
Technology providers (hosting, email, support) acting as data processors.
Public authorities where there is a legal obligation to do so.

International transfers

If any provider processes data outside the European Economic Area, the safeguards required by law will be applied, such as standard contractual clauses or other measures valid under the GDPR.

Retention periods

Enquiries and support: for as long as necessary to deal with the request and, where applicable, until any liability becomes time-barred.
Purchases and services: for the duration of the relationship and the applicable legal periods (tax and accounting).
Security: for the time strictly necessary to prevent fraud and ensure security.

User rights

Users may exercise the following rights:

Access, rectification, erasure, objection, restriction and portability.

To exercise these rights, send a request to the email address [email protected].

Where necessary, we may ask for additional information in order to verify your identity.

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es).

Automated decision-making

No automated decisions producing legal effects for the user are taken, unless expressly stated in the relevant service.

Minors

The Website is not aimed at minors. If a minor provides personal data, it is the responsibility of their parents or legal guardians to authorise such processing where this is required.

Security measures

We adopt reasonable technical and organisational measures to protect the information and prevent unauthorised access, loss or alteration.

Changes

We may update this Policy to adapt it to legal or technical changes. The version in force will be available on the Website.

Embedded content from other websites

Some pages of the Website may include embedded content (for example, videos, maps, images, posts, etc.). Embedded content from other websites behaves in exactly the same way as if the user had visited the source website directly. These websites may collect data about you, use cookies, embed third-party tracking and monitor your interaction with the embedded content, particularly if you have an account and are logged in to that service.

Comments

If the Website allows comments, when visitors leave a comment we collect the data shown in the form, together with the IP address and browser information (user agent), in order to help detect spam and ensure the security of the Website.

Where third-party services linked to the user profile are used (for example, Gravatar), an anonymised string (hash) of the email address may be sent in order to check whether the user uses that service. Once the comment is approved, the profile picture may be publicly visible alongside the comment.

Analytics and measurement

We may use measurement and analytics tools to understand how the Website is used and to improve the user experience. These tools may collect technical and browsing information.

Microsoft Clarity: analysis of Website usage. This processing will only take place when the user accepts it through the cookie settings or consent system, where this is required.
Google Analytics (if enabled): Website usage statistics, only after the user has given consent.

Browsing data (IP address and logs)

When you browse the Website, the server may automatically record technical information such as the IP address, the date and time of access, the referring link, the operating system and the browser used. This data is processed for security, maintenance and statistical purposes, and will not be used to identify the user directly unless required by law.

Where we send your data

Visitor comments (where enabled) may be checked by automated spam detection services. Likewise, certain technology providers may process data on behalf of the controller as data processors, under the contractual safeguards required by the legislation in force.

How long we keep your data

Comments: if comments are published, the comment and its metadata may be retained to facilitate moderation and history management, unless erasure is requested or the law requires otherwise.
User account (if any): the data will be retained for as long as the account remains active, except for data that must be kept for legal or security reasons.
Analytics: retained according to the tool's configuration and for as long as necessary for statistical purposes and to improve the service.

Extended rights over your data

In addition to the rights granted by the legislation in force, users may request a copy of the personal data held about them or its erasure, except for data that must be retained for administrative, legal or security reasons.