Introduction

The purpose of this Privacy Policy is to inform users visiting the website https://www.estacionsantapola.es/en/ about how their personal data is processed, the purposes for which it is processed, the legal basis for that processing, who receives the information, how long it is kept and the data protection rights available to them.

This policy applies to personal data processed by Estación de Autobuses de Santa Pola, S.L. as a result of browsing the website, using its forms or contact channels and, where applicable, interacting with profiles or services linked to the company.

Data controller

The controller of personal data is Estación de Autobuses de Santa Pola, S.L., tax ID B54787957, with registered office at avenida de Denia 155, 03015 Alicante, Spain.

For communications relating to privacy and data protection, users may contact the controller at the address given above or through the contact channels provided on the website.

Protection and processing of personal data

Estación de Autobuses de Santa Pola, S.L. undertakes to process users’ personal data lawfully, fairly, transparently and confidentially, in accordance with data protection legislation in force, in particular Regulation (EU) 2016/679 (General Data Protection Regulation), Spanish Organic Act 3/2018 on the Protection of Personal Data and the guarantee of digital rights, and Act 34/2002 on Information Society Services and Electronic Commerce.

Personal data will be collected for specified, explicit and legitimate purposes, and will not be further processed in a manner incompatible with those purposes. The data processed will also be adequate, relevant and limited to what is necessary in relation to each of the purposes described in this policy.

The company has implemented appropriate technical and organisational measures to guarantee the security, confidentiality, integrity and availability of personal data, including access control procedures, systems and communications security, incident management, information backup and data protection awareness activities.

Purposes of processing, legal basis and recipients

The personal data processed by Estación de Autobuses de Santa Pola, S.L. may come from the forms provided on the website, communications sent by the user, browsing of the website, or interaction with services and channels linked to the company.

Contact, suggestions or complaints form.Purpose: to manage, process and respond to enquiries, suggestions, requests or complaints sent by the user through the website or the contact channels available. Legal basis: the data subject’s consent and, where applicable, the controller’s legitimate interest in dealing with and managing the communications received. Recipients: data will not be disclosed to third parties, except where required by law or necessary to handle the request properly.

Informational or commercial communications.Purpose: to send information about services, activities, news or communications of interest from Santa Pola Bus Station, where the user has requested or authorised it. Legal basis: the data subject’s consent. Recipients: data will not be disclosed to third parties, except where required by law.

Social media and digital channels.Purpose: to manage the company’s presence on social media, respond to interactions, messages or requests from users, and communicate information about its services or activities. Legal basis: the data subject’s consent and the legitimate interest in maintaining communication channels with users. Recipients: data may be processed by the platforms that own each social network in accordance with their own privacy policies.

Website browsing and use of cookies.Purpose: to enable browsing of the website, remember the user’s consent preferences and, where applicable, carry out statistical measurement or enable third-party functionality integrated into the website. Legal basis: the user’s consent for non-technical cookies, and compliance with legal obligations or legitimate interest for technical or necessary cookies. Recipients: third-party service providers may be involved, depending on the cookies actually installed on the user’s device.

Data provided by the user

The data requested in the forms or contact channels is necessary to handle the corresponding request. If the user does not provide the required data, or does not accept this Privacy Policy where necessary, it may not be possible to deal with their request properly.

The user warrants that the personal data provided is truthful, accurate, complete and up to date, and undertakes to report any changes to it.

Estación de Autobuses de Santa Pola, S.L. will not be responsible for the inaccuracy of the data provided by the user, nor for the consequences of providing false, incomplete or out-of-date data.

The website may also contain links to third-party websites, whose privacy and cookie policies are outside the control of Estación de Autobuses de Santa Pola, S.L. Users should review those policies before providing personal data on third-party pages.

Special categories of data

Users must not provide, through forms, emails, free-text fields or other channels on the website, specially protected data or special categories of personal data, such as data concerning health, political opinions, religion, trade union membership, racial or ethnic origin, genetic data, biometric data, sex life, sexual orientation, or data relating to criminal convictions and offences.

Should the user voluntarily provide this type of information without having been asked for it, that disclosure will be understood to be made under their sole responsibility.

Rights of data subjects

Users may at any time exercise their rights of access, rectification, erasure, objection, restriction of processing and data portability, and may withdraw the consent given where processing is based on that legal basis.

To exercise these rights, the data subject may contact Estación de Autobuses de Santa Pola, S.L. in writing at avenida de Denia 155, 03015 Alicante, Spain, quoting “Data Protection” as the reference.

Withdrawing consent will not affect the lawfulness of processing carried out before that withdrawal.

If the data subject considers that their rights have not been properly addressed, they may also lodge a complaint with the Spanish Data Protection Agency, through its electronic office or the channels provided by that supervisory authority.

Data retention period

Personal data will be kept for as long as necessary to fulfil the purpose for which it was collected and, subsequently, for the periods required by law to address any liabilities arising from the processing.

Once those periods have ended, the data will be deleted or, where applicable, blocked for as long as necessary to address any legal liabilities, remaining available only to Public Authorities, Judges and Courts where appropriate.

Browsing data and cookie policy

Browsing the website may involve the installation of technical, analytical, functional, performance or third-party cookies, always in accordance with the settings accepted by the user through the consent banner or panel provided on the page.

For full, up-to-date information about the cookies used on this website, including their name, ownership, duration, purpose and how to configure or reject them, users can consult the Cookie Policy available at the following link:https://www.estacionsantapola.es/en/cookie-policy/

Minors

Children under 14 must not provide personal data through the website without the consent of their parents, guardians or legal representatives.

Should Estación de Autobuses de Santa Pola, S.L. detect that it has received personal data from a child under 14 without the corresponding authorisation, it will delete that data where legally appropriate.

Changes to the Privacy Policy

Estación de Autobuses de Santa Pola, S.L. may amend this Privacy Policy to adapt it to legislative developments, case law, instructions from supervisory authorities, technical changes or changes to the processing carried out through the website.

Users are advised to review this policy periodically and, in any event, each time they are about to provide personal data through the website.

Applicable law and jurisdiction

This Privacy Policy is governed by Spanish and European legislation applicable to data protection and information society services.

Any dispute relating to the use of the website or the interpretation of this policy will be settled in accordance with the applicable consumer protection legislation and, where appropriate, by the Courts and Tribunals having jurisdiction under the legislation in force.