Privacy policy

This is a translation provided for convenience. In the event of any discrepancy, the Spanish version shall prevail.

At EcoMove Movilidad Sostenible S.L. we process your data for the sole purpose of managing your booking or answering your enquiry. We do not sell it, we do not share it for commercial purposes and we do not carry out profiling. The details are set out below, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

1. Data controller

Controller	EcoMove Movilidad Sostenible S.L.
Tax ID (CIF)	B-26975482
Address	Calle Pinosol 23, Local 8, Málaga
Contact email	reservas@paseosturisticosmalaga.com

2. What data we process and why

Tour bookings

Data	First name and surname, email, telephone, country, preferred language, pick-up point, comments, booking details (tour, date, time, number of passengers and amount) and, for security purposes, IP address and browser.
Purpose	To manage and confirm the booking, provide the contracted service and communicate with you about it.
Legal basis	Performance of a contract or of pre-contractual measures (Art. 6(1)(b) GDPR).
Retention	For the duration of the relationship and, thereafter, for the limitation period of the applicable legal obligations (tax and accounting, up to 6 years).

Contact form

Data	Name, email, telephone (optional), subject and message.
Purpose	To answer your enquiry.
Legal basis	Your consent when submitting the form (Art. 6(1)(a) GDPR).
Retention	For as long as necessary to reply and, at most, 1 year from the last contact.

Job applications

Data	Name, email, telephone, languages, type of driving licence and any information you include in your message.
Purpose	To assess your application for recruitment processes.
Legal basis	Your consent (Art. 6(1)(a) GDPR).
Retention	A maximum of 1 year, unless you ask us to erase it sooner.

3. Recipients

We do not disclose your data to third parties unless required by law. However, some providers act as data processors, under a contract signed in accordance with Art. 28 GDPR:

• Web hosting provider, where the bookings database is stored.
• Email provider, to send you the confirmation and to communicate with you.

If the tour is provided by a vehicle belonging to a partner company, only the data strictly necessary to provide the service (name, telephone, pick-up point and number of passengers) will be disclosed to that company.

We do not carry out any international transfers of data outside the European Economic Area.

4. Charitable donation

The contribution of €3 per booking to the Asociación Nada es Imposible is paid as an aggregate sum. We do not disclose any personal data of our customers to the association.

5. Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw any consent you have given. To do so, write to us at reservas@paseosturisticosmalaga.com stating the right you wish to exercise and attaching a copy of a document proving your identity.

If you consider that we have not handled your request properly, you may lodge a complaint with the Agencia Española de Protección de Datos, the Spanish Data Protection Agency (AEPD) (www.aepd.es).

6. Security

We apply appropriate technical and organisational measures to protect your data: encryption of traffic via HTTPS, restricted and password-protected access to booking information, and regular backups.

7. Minors

Our services are contracted by adults. When minors travel as part of a booking, we only record how many there are, never their identifying details.

8. Changes to this policy

We may update this policy to adapt it to legislative changes or to new services. The version in force is always the one published on this page, with its date of last update.