Legal
Privacy notice
Last updated: 17 September 2026
This notice explains, in plain language, what personal data we handle when you book a ride with e-carriage and what we do with it.
Who is responsible for your data?
The cooperative formed by the ten licence holders of the electric horse-drawn carriages of Alcúdia, trading as "e-carriage tour alcúdia".
Registered name: Asociación de Galeras de Alcúdia
Tax ID: (still to be filled in)
Registered address: C/ Pollentia, 58, 3.º E, 07400 Alcúdia (Illes Balears)
Contact: info@ecarriage-alcudia.com · +34 622 486 999
What data do we handle?
If you book with a Google account: your name, your email and the account identifier Google gives us. If you give it to us, your phone number. The booking data itself: route, day, time, number of people and language. We never ask for payment details: the ride is always paid on the spot. We use technical cookies to keep you signed in.
What for, and on what legal basis?
To manage your booking, assign a driver among the cooperative's members and send you the confirmation or cancellation emails (performance of the transport contract, GDPR art. 6.1.b). And to temporarily block bookings from accounts with several unannounced no-shows, to protect the service for everyone else (legitimate interest, GDPR art. 6.1.f).
Who sees your data?
The member driver who accepts your ride receives, over Telegram, your first name and your surname initial, the number of people, the route and the time: what they need to find you, nothing more. As processors we work with Supabase (database and functions), Vercel (web hosting), Google (sign-in), Resend (sending emails) and Telegram (messaging with the members). Some of them are based outside the European Union; those transfers rely on the safeguards the GDPR provides for, such as the EU-US Data Privacy Framework or standard contractual clauses. We cannot state specific certifications or exact data-centre locations here: ask us if you need that.
How long do we keep it?
Your booking data for as long as it takes to manage it, and afterwards only for as long as the law requires. The record of an unannounced no-show is kept for 12 months; after that, an automated process deletes it every night.
What are your rights?
You can access your data, correct it, have it erased, object to its use, ask us to restrict its processing, or request portability, by writing to info@ecarriage-alcudia.com. If you are not satisfied, you can file a complaint with the Spanish Data Protection Agency, the Agencia Española de Protección de Datos (www.aepd.es).