GDPR Privacy Policy
Last updated: 2026-07-23
This Privacy Policy applies to the processing of personal data on the benidormbuggy.com website, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR).
1. Data Controller
Company name: CAPRIOLO IBERIA BIKES, S.L., NIF/CIF B-10847861. Commercial name: The G.O.A.T. Group / Benidorm Buggy. Registered office and business address: Parcial 33 Buleavar 3, 03570 Villajoyosa, Alicante, Spain. Phone: +34 642 591 189. Website: benidormbuggy.com. E-mail: caprioloiberiabikes@gmail.com.
2. Personal Data Processed
When using the Website and during the booking process, the following personal data may be processed: full name, e-mail address, phone number, billing information, booking details (date, time, type of rented vehicle, number of participants), IP address and browsing data (cookies).
Providing a name, e-mail address and phone number during booking is mandatory, as these are necessary to identify the customer, confirm the booking, communicate about the service and fulfil contractual obligations.
3. Purpose of Data Processing
Managing buggy, quad, vehicle and other service bookings; identifying the customer and confirming bookings; communication related to bookings, changes or cancellations; providing customer support before and after the service; invoicing and compliance with legal obligations; customer service and complaint handling; ensuring the proper and secure operation of the Website; and marketing communications, only with explicit consent.
4. Legal Basis for Data Processing
Consent of the data subject (Art. 6(1)(a) GDPR); performance of a contract (Art. 6(1)(b) GDPR); compliance with a legal obligation (Art. 6(1)(c) GDPR); and the legitimate interest of the data controller (Art. 6(1)(f) GDPR).
5. Data Processors
The Data Controller may use the following data processors: our online booking system, hosting service providers, accounting and invoicing systems, e-mail delivery providers, and payment service providers — Stripe for card payments and NOWPayments for cryptocurrency payments.
All data processors act solely on the instructions of the Data Controller and in compliance with GDPR requirements. Some providers may process data outside the EU under appropriate safeguards. We never sell your data.
6. Data Retention Period
Booking and contractual data: for the period required by law, generally up to 8 years. Marketing-related data: until consent is withdrawn. Technical data: for a maximum of 12 months.
7. Rights of Data Subjects
You have the right to receive information about the processing of your personal data, to access your data, to request correction of inaccurate data, to request deletion (the "right to be forgotten"), to request restriction of processing, to data portability, and to withdraw consent at any time. Requests can be submitted by e-mail to caprioloiberiabikes@gmail.com.
8. Right to Lodge a Complaint
If you believe that the processing of your personal data violates GDPR provisions, you have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es.
9. Cookies
The Website uses cookies to ensure proper operation, to collect statistical data and to support marketing activities. Detailed information is provided in our separate Cookie Policy.
10. Data Security
The Data Controller applies appropriate technical and organisational measures to ensure the security of personal data, particularly to protect against unauthorised access, alteration or loss of data.
11. Final Provisions
The Data Controller reserves the right to amend this Privacy Policy at any time. The current version will always be available on the Website.
