1. Data controller
Vanesa Carrión Ralo, Tax ID ES53602612P, Av. País Valencià 4 bajo. Email: info@forwarding.es.
2. Data we process
Identification and contact data (name, surname, email, phone), company data (company name, VAT number), delivery addresses, parcel data (sender, weight, dimensions, declared contents, inspection photos), billing and payment data (processed by Stripe; we never store card details), communications through the platform and, for LocalHubs, business registration documents (Modelo 036/037).
3. Purposes and legal bases
- Receiving, storing and forwarding parcels: performance of a contract (art. 6.1.b GDPR).
- Preparing customs documents and communicating with carriers and customs authorities: performance of a contract and legal obligation (art. 6.1.b and 6.1.c GDPR).
- Invoicing and tax/accounting obligations: legal obligation (art. 6.1.c GDPR).
- Answering enquiries sent through forms: consent and legitimate interest (art. 6.1.a and 6.1.f GDPR).
- Managing the LocalHub network: performance of the partnership agreement.
- Protecting the registration, login, password recovery, contact and LocalHub application forms against spam, bots and fraudulent access using Google reCAPTCHA: legitimate interest in keeping the platform and user accounts secure (art. 6.1.f GDPR).
4. Recipients
Necessary data is shared with your assigned LocalHub, carriers (the courier chosen for each shipment, such as Correos Express, DHL, FedEx, UPS, DPD or GLS, and the shipping platforms through which they are booked), customs authorities when required by the destination, the payment gateway Stripe Payments Europe Ltd., Google Ireland Limited (reCAPTCHA service) and technology providers (hosting, email) acting as data processors. Shipments outside the European Economic Area involve international transfers necessary for the performance of the contract (art. 49.1.b GDPR).
5. Retention
Data is kept for as long as the contractual relationship lasts and afterwards for the legal limitation periods (generally 6 years for commercial and accounting records).
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to info@forwarding.es with a copy of your ID. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Security
We apply appropriate technical and organisational measures to ensure the confidentiality, integrity and availability of your data, including password hashing and secure communications (HTTPS).
8. Spam protection: Google reCAPTCHA
Our public forms use Google reCAPTCHA v3, a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), to check that submissions are made by a person and not by an automated program. It runs in the background without asking you to solve any challenge.
To do so, Google analyses information such as your IP address, the browser and device you use, the page from which you submit the form and your interaction with it, and returns a risk score. We only receive and use that score to accept or reject the submission; we do not store the data analysed by Google. The reCAPTCHA script is only loaded on pages containing these forms.
Google may process this data on servers located in the United States. These transfers are covered by the EU-US Data Privacy Framework, under which Google LLC is certified, and by the European Commission's Standard Contractual Clauses. You can find out how Google processes data in its Privacy Policy (https://policies.google.com/privacy) and Terms of Service (https://policies.google.com/terms).
You may object to this processing by writing to info@forwarding.es. Please note that if you block reCAPTCHA we will not be able to process the protected forms; in that case you can contact us directly by email.