Privacy policy

This policy explains how we handle your personal data when you fill in any of the forms on this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

Data controller

The controller is the website owner, whose identification and contact details are given at the end of this page, under “Website owner”.

Purpose

We process your data to contact you about the launch of Passby: to let you know when there are campaigns in your area (drivers) or to reply to your request for information (businesses).

Legal basis

The consent you give us by ticking the box to accept this policy when you send the form (Art. 6(1)(a) GDPR). You can withdraw it at any time.

Data we process

• Drivers’ form: name, email, phone (optional), postcode, DGT environmental label, kilometres per week, type of car ownership, and acceptance of this policy.
• Businesses’ form: name, company, email, phone (optional), sector, approximate monthly budget, message (optional) and acceptance of this policy.
• In both forms we store the date of submission as proof of your consent.
• The anonymous survey is optional and does not collect personal data: we only store, for statistical purposes, whether you own a car, your willingness, the minimum monthly payment range, coverage, language and date.

Approximate location

Cloudflare uses the visitor’s IP address to infer their approximate location and choose the website language. This data is not stored.

Retention

We will keep your data until you withdraw your consent or, at most, for 24 months after our last contact with you. After that period we will delete it.

Recipients and data processors

We do not share your data with third parties for their own purposes. To provide the service we use these providers, which act as data processors:

• Supabase: the database where the forms are stored, with servers in the European Union (Ireland).
• Cloudflare: website hosting and cookie-free visitor analytics.

We do not transfer data outside the European Union, unless the processor offers such transfers with the appropriate safeguards provided for in the GDPR (for example, standard contractual clauses).

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent, by writing to the email given under “Website owner”. We will reply within the legal period of one month.

Complaints

If you believe we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.