NovaGo Privacy Notice
Last updated and effective date: 20 August 2026
Version: 1.0.0 (Draft subject to final legal review)
1. Data Controller
In accordance with Regulation (EU) 2016/679 General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), the data controller is:
- Controller: {{FULL_LEGAL_NAME}} (trading as NovaGo)
- Legal Form: Individual entrepreneur / sole trader
- Tax Identification Number (NIF): {{NIF}}
- Business Address: {{BUSINESS_ADDRESS}}
- Privacy & Data Protection Email: privacy@novago.es
2. Purposes & Legal Bases of Processing
| Purpose | Processed Data | Legal Basis (GDPR) |
|---|---|---|
| Booking management & dispatch coordination | Name, email, phone number, itinerary, pickup date/time, optional flight number. | Contract performance / precontractual steps (Art. 6.1.b GDPR). |
| Payment processing & fraud prevention | Transaction identifiers, amount, masked card digits (via Stripe). | Contract performance & legal compliance (Art. 6.1.b & 6.1.c GDPR). |
| Transport regulatory compliance | Taxi service register (Decret 314/2016) and VTC trip reporting data. | Legal obligation (Art. 6.1.c GDPR). |
| Customer care & dispute resolution | Communications, support inquiries, incident records. | Legitimate interest & legal obligation (Art. 6.1.f & 6.1.c GDPR). |
3. Data Recipients
- Assigned Carriers and Drivers: Strict data necessary for trip execution (passenger name, phone, itinerary).
- Public Transport Authorities: IMET and Catalan transport inspection authorities under statutory requirements.
- Technology Service Processors: Data processors under GDPR Art. 28 contracts (Stripe, secure hosting).
4. Retention Periods
- Booking and fiscal records: Retained for statutory periods (4–6 years under Spanish tax/commercial laws).
- Taxi / VTC service registers: Retained for a minimum of 1 year pursuant to sector regulations (Decret 314/2016).
5. Your Data Protection Rights
You have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data.
To exercise your rights, contact: privacy@novago.es or postal address {{BUSINESS_ADDRESS}}.
You may also file a complaint with the Spanish Data Protection Agency (www.aepd.es).