Privacy Policy

1. Information We Collect

At ByME Transport and Relocation Group S.L. (hereinafter "ByME" or "we"), user privacy is a fundamental priority. This Privacy Policy describes what personal data we collect, how we use it, with whom we share it and what rights you have under the General Data Protection Regulation (GDPR) and the Spanish Organic Law 3/2018 (LOPDGDD).

We collect personal information that you voluntarily provide when interacting with us through our website, mobile applications, emails, online forms, or telephone calls. The types of data we may collect include:

• Identification data: Name, surname, ID/passport number (required for customs procedures or contracts).
• Contact data: Email address, telephone number and postal address (origin and destination of the move).
• Transactional data: Information about contracted services, order history, billing details and payment receipts.
• Service-related data: Goods inventories, item valuations, preferred service dates, and any other information necessary for the logistics of your move.
• Browsing data: IP address, browser type, visit duration and pages consulted, collected through cookies and similar technologies (see our Cookie Policy).

It is the user's responsibility to ensure that the data provided is truthful, accurate and up to date. ByME is not responsible for incidents arising from errors in the information provided by the client.

2. Use of Information

We process your personal data for the following legitimate purposes:

• Service provision: Managing quotes, organising moves, coordinating transport and storage services, and carrying out necessary customs procedures.
• Customer support: Responding to your queries, incidents or information requests sent through our contact channels.
• Administrative and tax management: Issuing invoices, managing payments and collections, and complying with accounting and tax obligations.
• Commercial communications: Sending you information about offers, news or complementary services related to your move, provided you have given express consent or there is a legitimate interest based on a prior contractual relationship. You may unsubscribe at any time.
• Service improvement and security: Analysing the quality of our services, conducting satisfaction surveys, detecting fraud and ensuring the security of our web platform.

The legal basis for processing your data is:

• The performance of a contract or pre-contractual measures (quotes).
• Compliance with legal obligations (tax, administrative).
• The consent of the data subject (for commercial communications or non-essential cookies).
• The legitimate interest of ByME (for security, service improvement and fraud prevention).

3. Sharing Data with Third Parties

ByME does not sell or rent your personal data to third parties. However, in order to provide our services efficiently, we may need to share certain information with:

• Service providers: Transport companies, customs agencies, insurers, storage companies and logistics partners involved in executing your move. These third parties only have access to the data necessary to perform their functions and are required to treat it confidentially.
• Payment platforms and financial institutions: To process payments and comply with banking regulations.
• Authorities and public bodies: When required by law (tax authorities, law enforcement, courts) or necessary for international customs procedures.
• Professional advisors: Auditors, lawyers and accountants, bound by professional secrecy.

In the case of international moves outside the European Economic Area (EEA), your data may be transferred internationally to destination or transit countries. In such cases, we ensure appropriate safeguards are applied to protect your information.

4. User Rights

As the owner of your personal data, you have the right to:

• Access: Request confirmation of whether we are processing your data and obtain a copy thereof.
• Rectification: Request that we correct inaccurate data or complete incomplete information.
• Erasure ("Right to be forgotten"): Request that we delete your data when it is no longer necessary for the purposes for which it was collected, unless there is a legal obligation to retain it.
• Objection: Object to the processing of your data for reasons related to your particular situation, or for direct marketing purposes.
• Restriction: Request that we restrict the processing of your data in certain circumstances (for example, while we verify its accuracy).
• Portability: Request to receive your data in a structured format and request its transfer to another controller.

To exercise your rights, you may send us a written request to legal@bymegroup.com, accompanied by a copy of your ID or equivalent identification document. We will respond within a maximum period of one month.

You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD) if you consider that we have not processed your data correctly: www.aepd.es.

5. Data Security

ByME applies appropriate technical and organisational security measures to protect your personal data against loss, misuse, unauthorised access, alteration and destruction.

We use encryption protocols (SSL/TLS) for data transmission on our website. We restrict access to personal information to those employees, contractors and agents who need to know it in order to operate, develop or improve our services, and who are subject to strict contractual confidentiality obligations.

However, no internet transmission or storage system is 100% secure. If we detect a security breach that may affect your rights, we will notify you and the competent authorities in accordance with the law.

6. Data Retention

We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected (for example, the execution of the move and the warranty period).

Subsequently, the data will be duly blocked for the legally established periods to address possible legal, tax or administrative liabilities (generally 5 years for tax obligations and 6 years for commercial documentation). Once such liabilities have prescribed, we will proceed with the secure deletion of the information.

7. Contact

If you have any questions about our Privacy Policy, the processing of your data, or wish to make a suggestion, you may contact our Privacy Officer:

• Email: legal@bymegroup.com
• Postal address: Calle de Fuengirola 26, Arroyomolinos, Madrid, Spain.

8. Abuse Protection and Use of reCAPTCHA

To protect the input forms on our website (such as the contact form or quote request) against spam, bots and automated abuse, we use the Google reCAPTCHA v3 service.

This service makes it possible to distinguish whether the data entered in the form comes from a natural person or an automated programme. The use of reCAPTCHA involves sending your IP address and possibly other data required by Google for the reCAPTCHA service to Google.

However, your IP address will be abbreviated beforehand by Google within the member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and abbreviated there.

By using this service, you consent to the processing of your data by Google in the manner and for the purposes indicated. The use of reCAPTCHA is subject to Google's Privacy Policy and Terms of Service.