At Transotel we are committed to protecting your privacy. This Privacy Policy describes how we collect, use and protect your personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Last updated: July 2026Data Controller
- Identity: Teneryfa Apart S.L.
- NIF: B75643361
- Address: Calle Herrero, 3/14 – 38677 Tijoco Bajo, Adeje, Santa Cruz de Tenerife, Spain
- Email: info@transotel.com
No Data Protection Officer (DPO) has been designated as it is not required under Article 37 of the GDPR for this type of company. To exercise any rights or make enquiries about data protection, you can contact us directly via the email above.
Data We Collect
Depending on the service you use, we may collect the following categories of personal data:
- Identification data: name, surname, national ID/passport (when required by traveller registration regulations).
- Contact data: email address, phone number, hotel room number.
- Booking data: hotel of origin, destination hotel, pick-up and delivery date and time, description and number of pieces of luggage.
- Financial data: payment data processed securely through the Redsys gateway (Transotel does not store card data).
- Browsing data: IP address, browser type, pages visited, session time (via technical and analytical cookies).
- Communications: content of messages sent through the contact form or by email.
Purposes and Legal Basis for Processing
| Purpose | Legal basis |
|---|---|
| Management and execution of the contracted luggage transfer service | Performance of contract (Art. 6.1.b GDPR) |
| Invoicing and tax compliance | Legal obligation (Art. 6.1.c GDPR) |
| Traveller registration as required by tourism regulations | Legal obligation (Art. 6.1.c GDPR) |
| Customer service and incident management | Legitimate interest / Performance of contract (Art. 6.1.b-f GDPR) |
| Sending own commercial communications (newsletter) | Consent (Art. 6.1.a GDPR) |
| Website usage analysis (analytical cookies) | Consent (Art. 6.1.a GDPR) |
Data Retention
Personal data will be kept for as long as strictly necessary to fulfil the purposes for which they were collected, and in any case:
- Booking and billing data: 5 years from service provision, due to tax obligations (General Tax Law).
- Traveller registration data: in accordance with current public security regulations.
- Customer service data: 3 years from last communication.
- Data for commercial communications: until the user withdraws their consent.
Once these periods have elapsed, data will be deleted or irreversibly anonymised.
Sharing Data with Third Parties
Transotel does not sell or transfer your personal data to third parties for commercial purposes. Data is only shared with the following data processors, to the extent strictly necessary for the provision of the service:
- Redsys Servicios de Procesamiento, S.L.U.: secure card payment processing.
- Shipping and courier companies: carriers engaged on a case-by-case basis for service execution (for example, SEUR or KM Logistics). Only the data strictly required for delivery is shared with them: recipient's name, destination hotel address and service contact phone number.
- SMTP provider (MailKit): sending email notifications.
- CallMeBot: sending WhatsApp notifications (only with explicit consent).
- Hosting provider: hosting of the website and database.
- Google Ireland Ltd. (Google Analytics): statistical analysis of website usage to improve the service, only if you accept analytics cookies. This tool may involve an international data transfer to the United States, covered by the EU-US Data Privacy Framework adequacy decision.
All providers are subject to data processing agreements in accordance with Art. 28 GDPR. When it is necessary to communicate data to law enforcement or public authorities, this will be done in compliance with the law and without the user's prior consent.
Your Rights
Under the GDPR and LOPDGDD, you have the following rights regarding your personal data:
- Access: know what data we process about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure (right to be forgotten): request deletion of your data when it is no longer necessary.
- Restriction: request restriction of processing in certain circumstances.
- Portability: receive your data in a structured, commonly used format.
- Objection: object to processing based on legitimate interest.
- Withdrawal of consent: at any time, for processing based on consent.
To exercise any of these rights, write to us at info@transotel.com indicating the right you wish to exercise, with a copy of your identity document. We will respond within a maximum of 30 days.
If you believe that the processing does not comply with the regulations, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.