Privacy Policy

At CELERING SMART MOBILITY SERVICES, S.L., we are committed to ensuring that your personal data is protected and not used for purposes other than those indicated in this Privacy Policy. For this reason, we inform users and interested parties about all matters relating to the processing of their personal data, thus complying with the applicable data protection regulations in our country: Regulation (EU) 2016/679 of 27 April 2016 (General Data Protection Regulation – GDPR) and Organic Law 3/2018 of 5 December on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).

This Privacy Policy applies to data processing carried out through this website: www.celering.com (hereinafter, the “Website”) and/or any other sources expressly indicated.
We recommend that you read it carefully before using this Website or providing your personal data through it.
You can contact us for any questions regarding this matter at: protecciondedatos@celering.com.

TABLE OF CONTENTS

In this Policy you will find all the information relating to the processing of your personal data and the rights you can exercise to maintain control over them. Specifically, you will find information about:

Who is responsible for processing your data.
The requirements you must meet to provide us with your personal data.
The types of data processing we carry out through the Website and their main characteristics, explaining:
- What data we collect and how we collect it.
- For what purposes we collect the data.
- What is the legal basis for processing it.
- How long we keep it.
To whom your data is disclosed.
Whether there are any international data transfers.
Your rights and how to exercise them.
How we protect your personal information.
Modifications to this Policy.

1. WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA?

Below, we present the list of companies within the Celering group that may act as Data Controllers:

Celering Travel, S.L.U., with Tax ID (NIF) B88459193; and
Celering Smart Mobility Services, S.L.U., with Tax ID (NIF) B88056866.

It will be specified in the first-layer information clauses or in the contracts you sign with us which of the group companies acts as the Data Controller of your personal data.

Contact details of both companies:
Address: c/ Bravo Murillo 318, 1st Floor, 28020 Madrid (Madrid)
Contact telephone: 910 376 253
Contact email: protecciondedatos@celering.com

Both companies shall hereinafter be referred to as “CELERING.”

1.1. Our Data Protection Officer (DPO)

At CELERING, we provide you with the contact details of our Data Protection Officer, to whom you may address any queries related to this Privacy Policy or the processing of your personal data.

Email: protecciondedatos@celering.com

2. WHAT REQUIREMENTS MUST YOU MEET TO PROVIDE US WITH YOUR PERSONAL DATA?

2.1. Minimum age

To provide us with your personal data, you must be at least 14 years old and/or have the legal capacity required to use this Website.

2.2. Accuracy

When you provide your data to use our services, you guarantee that the data and information provided are real, truthful, up to date, and that they belong to you and not to third parties.

You must also inform us of any modification to the data provided, being in any case responsible for the accuracy and veracity of the data supplied at all times.

2.3. Age and Accuracy Verification

CELERING reserves the right to verify your age and identity information at any time, if necessary, by requesting an official identification document or equivalent procedure.
In the event of fraud detection, or if it is confirmed or suspected that you are under the indicated age, CELERING reserves the right to delete, temporarily deactivate, or cancel your account.

3. WHAT DATA PROCESSING DO WE CARRY OUT THROUGH THE WEBSITE AND WHAT ARE THEIR MAIN CHARACTERISTICS?

Below we explain how we process your personal information and provide, in detail, all the relevant information regarding your privacy:

3.1. When you contact us through our channels (contact form, chat, email):

How do we collect your data?	Contact form Chat Emails sent to the address hola@celering.com or other CELERING email addresses.
What data do we collect?	Identification and contact information. We collect your identifying information (name and surname) and email address, as well as any other information you voluntarily include in your communications with us. We may request additional information if necessary to fulfil your request or inquiry.
For what purposes do we process your personal data?	Responding to your requests. The main purpose of processing this data is to respond to your inquiries, answer your questions, and/or provide you with the requested information, as well as, where applicable, to follow up on your requests. Improving customer service. All information resulting from questions, inquiries, and advice provided to interested parties, as well as how these requests are handled, allows us to understand how we provide our customer service and improve its quality. Furthermore, all the collected information, once the retention period indicated below has ended, will be anonymized and used to analyze the most frequent questions, automate common inquiries, prepare FAQs, or be retained for statistical purposes to develop commercial strategies.
What is the legal basis that allows us to process your data? Is it mandatory to provide this data?	Consent. The data provided for the purposes indicated above will be processed on the basis of your consent, granted when you voluntarily contact us through the available means to request information or make a request. Legitimate interest. All information collected by the customer service department will be processed for statistical purposes, helping us improve the quality of the service provided. You can request more information about the balancing of our legitimate interests by contacting us at protecciondedatos@celering.com. The information you must provide will be indicated with an asterisk (*) or similar marking. Without such information, it would not be possible to handle your requests or inquiries.
How long do we keep your information?	All your personal information will be processed while your requests are being handled and, if necessary, for their follow-up. Once this period has ended, CELERING will keep this information blocked for the time required by law to address potential liabilities and demonstrate compliance with our obligations. After this period, CELERING will only process the information in an anonymized manner, so it will no longer be possible to link statistical data to specific users.
To whom do we disclose your personal information?	We do not make any disclosures for this processing other than those indicated, in general, in section 4, “To whom do we disclose your personal information?”. Some channels through which you may contact us are managed by service providers acting as Data Processors. You will find more information about how these service providers act in section 4 mentioned below.

3.2. When you subscribe to our newsletter and other marketing communications:

How do we collect your data?	Newsletter or marketing communication subscription form. Newsletter opt-in checkbox. Data derived from the contractual relationship between the parties.
What data do we collect?	Identification and contact data. For sending marketing communications by electronic means, we use the identifying information (name) and contact data you include in the subscription form or in the forms where you tick the corresponding checkbox. If you maintain a contractual relationship with us, we may use your email address based on that relationship.
For what purposes do we process your personal data?	To send publications and marketing communications related to our products and services. If you have given your explicit consent, we may send you, by any means (including electronic ones such as email, SMS, MMS, social networks, etc.), our newsletter and marketing communications related to activities CELERING organizes or participates in (initiatives, events, etc.), as well as information about our products and services.
What is the legal basis that allows us to process your data? Is it mandatory to provide this data?	The sending of marketing communications is based on: Consent, when you tick the corresponding box in any Website form; or Legitimate interest, when there is a pre-existing contractual relationship between the parties, in accordance with e-commerce regulations (LSSI). You may unsubscribe from these marketing communications at any time through the mechanism indicated in each email or by sending an email to protecciondedatos@celering.com .
How long do we keep your information?	When the processing of your data is based on consent, your information will be kept as long as you remain subscribed to our mailing list for this type of information, and once unsubscribed, it will remain blocked for the legally established periods to address potential liabilities. If the marketing communications are sent based on our contractual relationship, all your personal information will be kept for the duration of that relationship. Once it ends, CELERING will keep such information blocked for the time required by law to address possible liabilities and demonstrate compliance with our obligations.
To whom do we disclose your personal information?	There are no specific disclosures of your personal data for the purposes indicated in this section. However, we may use the services of email marketing providers or other advertising and marketing service providers, who will have limited access to your data and will be bound by a duty of confidentiality. (For more information on how our service providers act, see section 4, “To whom do we disclose your personal information?”)

3.3. When you post comments on our website

How do we collect your data?	Through the comment submission form in our publications.
What data do we collect?	Identification and contact data. We collect your identifying information (name) and email address, as well as, if you wish to include it, the URL of your website. Information included in your comments. In the space provided, you may include your opinion or contribution, as well as any information you voluntarily choose to provide.
For what purposes do we process your personal data?	To publish your comments, opinions, or contributions. You may interact with other users to exchange opinions, suggestions, or questions by leaving a comment on our posts. Please note that comments are public, which means they will be published and accessible to other users visiting the Website. For this reason, we recommend that you do not provide any sensitive or confidential information in your comments. To save your data on your device for future comments. If you tick the corresponding box, your identifying data, email address, and website (if applicable) will be saved in your browser so that you do not have to enter them again when posting new comments.
What is the legal basis that allows us to process your data?	Consent. All comments you make are based on your consent, granted when you voluntarily post and share opinions on our publications. Likewise, the storage of your data for future comments will also be based on your consent, if you tick the corresponding box.
How long do we keep your information?	Your comment will remain published as long as the post in which you commented remains available on our Website. Afterwards, where applicable, CELERING will keep such information blocked for the legally required period to address potential liabilities and to demonstrate compliance with our obligations.
To whom do we disclose your personal information?	We do not make any disclosures other than those indicated, in general, in section 4, “To whom do we disclose your personal information?” Some of the channels through which you can contact us are managed by service providers acting as Data Processors. You can find more information about how these providers act in section 4 mentioned below.

3.4. Browsing the Website (Cookies)

On this Website, we use cookies and other tracking or analytical tools to collect information about how users interact with the Website.

For more information about the processing we carry out through these tracking tools, please refer to our Cookies Policy.

3.5. CELERING’s profiles on social networks

CELERING maintains profiles on major social networks, such as Facebook, X (Twitter), Instagram, LinkedIn, and YouTube.

When you become a follower of one of our pages on these social networks, the processing of your data will be governed by the terms of use, privacy policies, and access rules belonging to the corresponding social network and previously accepted by the user.

In this sense, CELERING will process your data for the purpose of:

Properly managing our presence on the social network,
Informing you about activities, products, or services, and
Any other purpose permitted by the rules of the social network in question.

Please note that we have no influence or control over the information collected by the social network or how it processes that data.
For this reason, we recommend that you stay informed about the purpose and scope of data collection carried out through these social networks by reviewing their respective privacy policies.

4. WHOM DO WE DISCLOSE YOUR PERSONAL INFORMATION?

In general, CELERING does not disclose your data to third parties.
However, in addition to the specific disclosures indicated in section 3 (regarding each type of processing), we inform you below of the communications that we may carry out in general and that apply to all the processing operations described above, together with their corresponding lawful bases.

Companies within the CELERING Group (Celering Travel, S.L.U. and Celering Smart Mobility Services, S.L.):
Your personal data may be processed by companies within the Celering Group, for example, for internal purposes such as administrative, commercial, development, or support management.
In such cases, the group companies act as Data Processors, in accordance with the provisions of the following subsection
Service providers essential for the execution of the services we offer you
(for example, IT hosting companies or platforms used to send marketing communications).
These entities have signed the corresponding confidentiality and data processing agreements, and they will only process your data according to our instructions, not being allowed to use it for their own or unrelated purposes.
Public authorities.
We may disclose your data and any other information in our possession or accessible through our systems to competent public authorities when there is a legal obligation to do so.
This may include cases such as preventing or investigating misuse of services or fraudulent activities through our Website.
In such situations, personal data you provide may be retained and made available to administrative or judicial authorities.
In the event of a corporate transaction.
In the case of a merger, acquisition, sale of all or part of our assets, or any other type of corporate operation involving a third party, we may share, disclose, or transfer user data to the successor entity (including during the pre-transaction phase).
To third parties after aggregation or anonymization.
We may disclose or use aggregated or anonymized data (i.e., data that cannot be linked to an identified or identifiable individual) for any purpose.
To third parties with the user’s consent or other legitimate basis.
If we wish to share data with third parties outside the scope of this Privacy Policy, we will in any case request your consent or inform you of such disclosure and its legal basis.

Please note that this Privacy Policy only refers to the collection, processing, and use of personal data by us through your interaction with our Website.

Access to third-party websites through links available on the Website is subject to their own privacy policies, over which we have no control.
Therefore, before providing any personal information, we recommend that you review the privacy policies of those third-party websites.

5. ARE YOUR PERSONAL DATA TRANSFERRED TO THIRD COUNTRIES OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)?

Some of our service providers are located in countries outside the European Economic Area (EEA).

The location of these companies outside the EEA implies the existence of an international transfer of your personal data, which could entail a lower level of protection than that provided by European regulations.

However, CELERING has implemented measures to ensure that such transfers do not result in a lower level of protection of your personal data.

Specifically, service providers located outside the EEA have a valid mechanism to lawfully perform international data transfers:

Either they have signed the Standard Contractual Clauses (SCCs) approved by the European Commission — an agreement by which the non-EU company guarantees compliance with European data protection standards; or

In the case of U.S.-based companies, as an alternative to the SCCs, they may be certified under the EU–U.S. Data Privacy Framework (DPF).

Therefore, the use of such providers does not entail a lower level of data protection than that offered by providers established within the EEA.

6. WHAT RIGHTS CAN YOU EXERCISE AS A DATA SUBJECT?

You may exercise the rights granted to you by law in relation to the processing of your personal data by contacting our Data Protection Officer (DPO) at the following email address: protecciondedatos@celering.com.

Any rights request we receive will be resolved as soon as possible and, in any event, within the maximum period established by law from the date of receipt. In certain cases, we may request a copy of your identification document or another valid ID to verify your identity.

The rights you are entitled to as a data subject are as follows:

Right to withdraw consent

You may withdraw your consent in relation to all processing based on it at any time.
However, withdrawal of consent will not affect the lawfulness of processing based on consent prior to its withdrawal.

Right of access

You have the right to know whether your data is being processed, and if so, to obtain a copy of it, as well as information regarding:

The origin and recipients of the data;
The purposes for which the data are processed;
Whether there is any automated decision-making process, including profiling;
The data retention period; and
The rights provided for by the regulations.

Right to rectification

You have the right to obtain the rectification of your personal data or to have incomplete data completed.

Right to erasure (“right to be forgotten”)

You have the right to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or, where applicable, when we are no longer authorized to process it.

Right to data portability

You have the right to request the portability of your data when the processing is based on your consent or on the performance of a contract, provided that the processing is carried out by automated means.
If you exercise this right, you will receive your personal data in a structured, commonly used, and machine-readable format.
You may also request, where technically feasible, that your data be transmitted directly to another entity.

Right to restriction of processing

You have the right to request the restriction of processing of your data in the following circumstances:

When you have requested the rectification of your personal data, during the period in which we verify its accuracy.
When you believe we are not authorized to process your data, and instead of requesting its deletion, you ask us to limit its use.
When you no longer need us to process your data, but you want us to retain it for the establishment, exercise, or defense of legal claims.
In cases where processing is based on our legitimate interests and you have exercised your right to object, you may request restriction of processing while we verify whether our legitimate grounds override yours.

Right to object

You have the right to object at any time to the processing of your personal data based on our legitimate interests, including profiling.

Unsubscribing from commercial communications:
You may object at any time to receiving this type of communication by sending an email to protecciondedatos@celering.com.
You can also unsubscribe by following the instructions included at the bottom of each electronic communication we send you.

Right to lodge a complaint with the Supervisory Authority

If at any time you believe that we have infringed your right to data protection, you may lodge a complaint with the competent Supervisory Authority.
In Spain, this is the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD), accessible at www.aepd.es.

7. HOW DO WE ENSURE THE CONFIDENTIALITY OF YOUR INFORMATION?

The security of your personal data is a priority for us.
Therefore, CELERING has implemented all necessary security measures to ensure the effective use and processing of the personal data provided by users, safeguarding their privacy, confidentiality, and integrity.

We use the necessary technical means to prevent alteration, loss, unauthorized access, or misuse of your data, in accordance with the state of the art at any given time.

Consequently, we comply with recommended security standards to protect them.
However, due to the very nature of the Internet and potential malicious acts by third parties beyond our control, it is impossible to guarantee total security.

We are committed to acting swiftly and diligently in the event that the security of data is compromised and to informing you if such a breach could significantly affect your rights or freedoms.

8. MODIFICATIONS TO THIS POLICY

CELERING reserves the right to modify the content of this Privacy Policy at any time, especially when there are legislative, case-law, or interpretative changes by the Spanish Data Protection Agency (AEPD) that affect the data processing carried out by CELERING through this Website.

Any new version of this Privacy Policy will enter into force on the effective date published.

If the revised version includes any substantial change that affects the processing of your data, we will notify you at least 30 days in advance, either by publishing a notice on our Website or by contacting you directly via email.

Nevertheless, we recommend that you review this Privacy Policy periodically to remain informed about how your personal data are processed and protected, as well as the rights available to you.

This Privacy Policy was last updated on 11 April 2024.