Privacy policy

Data controller

The controller of the personal data collected through this website is the GLS agency in Mazarrón — registered company name pending confirmation [SEED], tax ID B01968163, with its registered address in Mazarrón, Region of Murcia (Spain) [SEED]. Contact for data protection matters: logistica@logisticamazarron.com.

This policy is drafted in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), following the layered information model recommended by the Spanish Data Protection Agency (AEPD).

What data we process and why

Shipment management (Art. 6(1)(b) GDPR — performance of a contract): when you book a shipment we process the identification and contact details of the sender and the recipient (name, address, telephone, email), the shipment details (declared contents, weight, dimensions, approximate value) and the data required to take payment. Without this data we cannot provide the transport service.

Quotes and enquiries (Art. 6(1)(b) GDPR — pre-contractual steps): if you use the calculator and leave us your email address, or contact us through the contact form, we process your data to prepare the quote, answer your enquiry and follow it up commercially.

Marketing communications (Art. 6(1)(a) GDPR — consent): we will only send you offers and news if you have expressly ticked the consent box (opt-in). You may withdraw your consent at any time using the unsubscribe link included in every email or by writing to us, without affecting shipments already booked.

Service feedback (Art. 6(1)(f) GDPR — legitimate interest): after your shipment is delivered we may send you a single email inviting you to rate the service provided. You may object to receiving these invitations at any time using the link included in that email or by writing to logistica@logisticamazarron.com, without affecting your shipments.

Compliance with legal obligations (Art. 6(1)(c) GDPR): we retain payment receipts and shipment documentation to meet the tax, accounting and transport obligations imposed on us by law.

Recipients of the data

In order to provide the service, we disclose the strictly necessary data to General Logistics Systems Spain (GLS), the transport company that carries out collection and delivery of shipments, including its network of agencies and correspondents in the destination country.

We also use the following providers, which process data on the controller's behalf as processors under contracts compliant with Art. 28 GDPR: Stripe (payment processing), Supabase (database), Vercel (application hosting) and Resend (transactional email delivery).

Some of these providers may be established outside the European Economic Area. In that case, international transfers are covered by European Commission adequacy decisions or by standard contractual clauses. We do not sell or disclose your data to third parties for commercial purposes, and we will only disclose it to public authorities where required by law.

Retention periods

Data linked to booked shipments is kept for the duration of the contractual relationship and thereafter for the statutory limitation periods: as a general rule, up to 6 years for commercial documentation (Art. 30 of the Spanish Commercial Code) and 4 years for tax purposes (Law 58/2003, General Tax Law).

Data from quotes and enquiries that do not result in a contract is kept for a maximum of 12 months from the last contact, after which it is erased or anonymised. Data processed for marketing purposes is kept until you withdraw your consent or object to the processing.

When you exercise your right to erasure, the data will be blocked and only the data needed to deal with potential liabilities will be retained for the statutory periods. Payment receipts cannot be deleted while tax law requires them to be kept.

Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, portability and restriction of processing by writing to logistica@logisticamazarron.com, stating which right you wish to exercise. For your security, we may ask for additional information to verify your identity.

We will respond to your request within one month at most, extendable by a further two months in complex cases, in which case we will inform you of the extension. Exercising these rights is free of charge.

If you believe that the processing of your data does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid). We would nevertheless appreciate it if you contacted us first so we can try to resolve the matter directly.

Security, minors and updates

We apply appropriate technical and organisational measures to ensure the confidentiality, integrity and availability of data: encrypted communications (TLS), role-based access control with two-factor authentication for staff, activity logging and backups. Card data is handled directly by Stripe and never reaches our systems.

The website is not aimed at children under 14. If we detect that data has been collected from a minor without the authorisation of their legal guardians, we will delete it.

This policy may be updated to reflect changes in the law or in our processing activities. The current version will always be published on this page, indicating the date of the last update.