Last updated: 21 August 2026.
Personal data will be processed in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights and any other applicable legislation.
VTC O Pino may process the following categories of personal data:
The complete card details and security code are entered directly into Stripe’s secure payment environment. VTC O Pino does not receive or store the complete card number or its CVC or CVV security code.
Personal data may be processed for the following purposes:
The processing required to calculate the price, manage the request, obtain the pre-authorisation, approve or reject the service, capture the amount, generate the contract and provide the transport service is based on taking pre-contractual measures requested by the data subject and, once the booking is confirmed, on the performance of the contract.
The processing of contractual, tax, accounting and transport information is based on compliance with the legal obligations applicable to VTC O Pino.
This includes mandatory communications to the RVTC, document retention, invoice issuance and responding to requests from competent authorities.
VTC O Pino may process certain information to protect the security of the website, prevent fraud, verify transactions, manage complaints and establish, exercise or defend legal claims.
These processing activities will be carried out in a manner that ensures that the rights and freedoms of data subjects do not override those legitimate interests.
Where processing requires consent, such as certain non-essential cookies or marketing communications, consent will be requested separately and may be withdrawn at any time.
Withdrawal of consent will not affect the lawfulness of processing carried out before it was withdrawn.
Information identified as mandatory is required to process the request and formalise the transport contract.
If this information is not provided or is inaccurate, VTC O Pino may be unable to calculate the service, review the request, process the pre-authorisation, confirm the booking or comply with its legal obligations.
Users should not enter unnecessary sensitive information in the comments field.
Personal data is mainly obtained from:
If a person submits a request on behalf of someone else, they must be authorised to provide the necessary information and must inform the affected person about this Privacy Policy.
Personal data may be processed by or communicated to the following recipients where necessary:
Stripe processes the information necessary to manage the pre-authorisation, capture, cancellation, refund, payment authentication and fraud prevention.
Stripe may act as a data processor or as an independent data controller for certain processing connected with payments, security and its legal obligations. Further information is available in the Stripe Privacy Policy.
VTC O Pino uses VEO Transfer as the technical platform for communicating services to the Register of Communications for Private Hire Vehicle Services.
Only the information required by law will be communicated, such as:
As a general rule, this communication does not include the passenger’s name, identification number, home address, telephone number or email address, unless required by applicable legislation or a valid request from a competent authority.
Addresses, coordinates, routes and distances may be processed using Google Maps Platform or other mapping services used by the website.
These providers may receive technical information, addresses or coordinates required to provide their services, in accordance with their respective terms and privacy policies.
The following providers may also access personal data under the instructions of VTC O Pino and subject to the appropriate safeguards:
Personal data may be communicated to tax authorities, transport authorities, law enforcement agencies, courts, tribunals or other public bodies where there is a legal obligation or valid official request.
Certain technology providers, particularly Stripe and services associated with Google, may process personal data outside the European Economic Area.
Where an international data transfer takes place, the safeguards recognised by the GDPR will be applied, including adequacy decisions, Standard Contractual Clauses approved by the European Commission or other legally valid mechanisms.
Further information can be obtained from the privacy policies of the relevant providers.
Personal data will be retained for as long as necessary to fulfil the purpose for which it was collected.
Once the relevant retention period has ended, personal data will be deleted or kept blocked solely for the purpose of meeting possible legal liabilities.
Booking requests are approved or rejected manually by VTC O Pino. VTC O Pino does not make decisions based exclusively on automated processing that produce legal effects concerning the applicant.
Stripe may use automated authentication, security and fraud prevention systems in accordance with its own obligations and policies. A transaction rejected by Stripe may prevent the booking from being confirmed.
Data subjects may exercise the following rights:
These rights may be exercised by submitting a request to:
The request should identify the right being exercised and provide the information necessary to verify the applicant’s identity where there are reasonable doubts concerning that identity.
If a person considers that their personal data has not been processed correctly, they may lodge a complaint with the Spanish Data Protection Agency:
Data subjects are encouraged to contact VTC O Pino first at info@vtcopino.com so that the matter can be investigated and, where possible, resolved.
VTC O Pino implements reasonable technical and organisational measures to protect personal data against loss, alteration, unauthorised access or disclosure.
However, no system connected to the Internet can guarantee absolute security. Users should avoid sending unnecessary or particularly sensitive information through free-text fields.
The booking form is not intended for use by children acting independently as the contracting party.
Bookings involving children must be made or authorised by their parents, guardians or legal representatives.
When a person contacts VTC O Pino by email, telephone or WhatsApp, their personal data will be used to respond to the enquiry, manage the request and send any communications required in connection with the service.
Use of WhatsApp also involves the processing of personal data by its provider in accordance with its own terms and privacy policy.
Information about cookies, analytics services and similar technologies is available in the Cookies Policy.
VTC O Pino may amend this Privacy Policy to reflect legal, technical or operational changes affecting the service.
Where changes are significant, users will be informed through appropriate means. The date of the latest revision will appear at the beginning of this page.
Preparing secure authorization…
