PRIVACY POLICY
(GDPR – European Union & Morocco)
1. Data Controller
NexDrive Plaza S.L.
Calle Rioja 13, 1C, 41001 Seville – Spain
NIF/CIF: B24793309
Email:
[email protected]
NexDrive Plaza S.L. is responsible for processing personal data collected through the website and related services.
2. Data Collected
We may collect the following categories of data:
- Identification data: first name, last name, date of birth.
- Contact details: phone number, email address, postal address.
- Booking data: pickup location, dates, reserved vehicle, preferences.
- Payment data: information necessary to process secure payments.
- Connection and browsing data: IP address, browser, cookies, security logs.
- Professional information for partners and affiliated agencies.
Full banking data is never stored on our servers.
Online payments are processed through secure payment providers compliant with PCI-DSS standards, including Paycomet (Grupo Banco Sabadell).
3. Purposes of Processing
Personal data is processed for the following purposes:
- User account management;
- Reservation and contract management;
- Payment and refund processing;
- Communication with customers and partners;
- Customer support services;
- Fraud prevention and transaction security;
- Compliance with legal and tax obligations;
- Sending commercial and marketing communications only with prior consent where required.
4. Legal Basis for Processing
Data processing is carried out on the following legal bases:
- Performance of a contract;
- User consent;
- Compliance with legal obligations;
- Legitimate interest related to security, fraud prevention, and service improvement.
5. Secure Payments
Payments made on the website are secured using SSL/TLS encryption technologies.
Transactions are processed by PCI-DSS certified providers, including Paycomet / Banco Sabadell.
NexDrive Plaza S.L. never has access to users’ complete credit card details.
Verification and fraud prevention systems may be used to protect users and limit unauthorized transactions.
6. International Data Transfers
Certain data may be transferred to operational partners located in Morocco as part of the execution of reservations and related services.
When transfers outside the European Union are carried out, NexDrive Plaza S.L. implements appropriate safeguards in accordance with Article 46 of the GDPR, including standard contractual clauses.
Primary data hosting is located within the European Union.
7. Data Retention
Personal data is retained only for the period necessary for the purposes for which it was collected, as well as to comply with applicable legal, tax, and contractual obligations.
8. User Rights
In accordance with the GDPR and applicable regulations, users have the following rights:
- Right of access;
- Right to rectification;
- Right to erasure;
- Right to object;
- Right to restriction of processing;
- Right to data portability;
- Right to withdraw consent at any time.
Any request may be sent to: [email protected]
Users may also file a complaint with the competent data protection authority.
9. Cookies and Similar Technologies
The website may use technical, analytical, and marketing cookies to improve user experience, measure audience traffic, and secure services.
Users may manage their preferences through their browser settings or the cookie management banner.
10. Security and Insurance
NexDrive Plaza S.L. applies appropriate technical and organizational measures to ensure the confidentiality, integrity, and security of personal data.
The company maintains Professional Liability Insurance and Cyber Protection coverage applicable within the European Union and Morocco.