Privacy Policy

Introduction

At ComparTrip, we take the privacy of our users very seriously. This Privacy Policy describes how we collect, use, store, and share the information obtained through our ComparTrip mobile application (hereinafter, "the Application").

By using our Application, you accept the practices described in this Privacy Policy. We recommend that you carefully read this document to understand how we handle your personal data.

ComparTrip has been developed with the goal of facilitating the management of shared trips, always maintaining the privacy and security of data as an absolute priority.

Data Controller

The controller of your personal data is:

Company name: ComparTrip S.L.
Registered office: Puebla de la Calzada, Extremadura, Spain
Email: info@compartrip.app
Data Protection Officer: dpd@compartrip.app

Data We Collect

We collect the following personal information when you use our Application:

Data provided directly by you:

Registration information: Username, email address, and password.
Profile information: Profile picture (optional).
Application activity: Information about groups created or joined, registered trips, compensation agreements, etc.

Data we collect automatically:

Device information: Device type, operating system, version, language, etc.
Usage logs: Information about how you use the Application, such as frequency and duration of use.
Diagnostic information: Data about errors and operation of the Application to improve our service.

Purposes of Processing

We use your personal data for the following purposes:

Service provision: To allow you to create and manage groups, register trips, establish compensation agreements, and use all the functionalities of the Application.
Communications: To send you notifications related to the Application's activity, such as group invitations, trip confirmations, agreement responses, etc.
Service improvement: To analyze how you use the Application and improve its functionalities.
Security: To protect the integrity of the Application and the security of all users.
Legal compliance: To comply with our legal obligations and respond to requests from competent authorities.

Legal Basis for Processing

The processing of your personal data is based on the following legal bases:

Performance of a contract: The processing is necessary for the execution of the service contract that you accept when using our Application.
Consent: In some cases, such as sending push notifications, we request your explicit consent.
Legitimate interest: We have a legitimate interest in improving our Application and ensuring its security.
Legal obligation: In certain cases, we are legally obligated to process and retain certain data.

Data Retention

We retain your personal data for the time necessary to fulfill the purposes for which they were collected, including compliance with legal, accounting, or reporting requirements:

Account and profile data are retained while you maintain your account active in the Application.
Activity data (groups, trips, agreements) are retained during the life of your account, and may continue to be visible to other users of the groups you have belonged to, even after you have deleted your account.
Diagnostic data and usage logs are retained for a maximum of 24 months.

When you delete your account, you can request the complete deletion of your personal data through our Data Protection Officer, subject to legal retention obligations that apply to us.

Data Sharing

ComparTrip does not sell or rent your personal data to third parties. However, we may share certain information in the following circumstances:

With other users: Your name, profile picture, and activity related to groups and trips are visible to members of the groups you belong to.
With service providers: We work with providers who help us operate, protect, and improve our Application. These providers have limited access to your data and are subject to strict confidentiality obligations.
By legal obligation: We may share information if we believe in good faith that it is necessary to comply with a legal obligation, protect the safety of our users, or investigate possible violations.

International Transfers

The personal data we collect are stored on servers located in the European Union. We do not transfer data to countries outside the European Economic Area (EEA) that do not provide an adequate level of data protection.

In case it is necessary to make any international data transfer, we will ensure that appropriate safeguards are applied in accordance with the General Data Protection Regulation (GDPR).

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, use, or disclosure. These measures include:

Encryption of data in transit and at rest.
Strict access controls to our systems and data.
Regular monitoring of our systems to detect potential vulnerabilities.
Training our staff on data protection and information security.

Despite our efforts, we cannot guarantee the absolute security of information transmitted through the Internet or stored in electronic systems. We recommend keeping your password secure and not sharing it with third parties.

Your Rights

As a data subject, you have the following rights regarding your personal data:

Right of access: You can request information about the personal data we have about you.
Right to rectification: You can correct inaccurate or incomplete data.
Right to erasure: You can request the deletion of your personal data in certain circumstances.
Right to restriction of processing: You can request that we restrict the processing of your data in certain circumstances.
Right to data portability: You can request a copy of your data in a structured, commonly used, and machine-readable format.
Right to object: You can object to the processing of your data in certain circumstances.
Right to withdraw consent: If the processing is based on your consent, you can withdraw it at any time.

To exercise these rights, you can contact our Data Protection Officer at dpd@compartrip.app. We will respond to your request within a maximum period of one month.

You also have the right to file a complaint with the Spanish Data Protection Agency if you consider that the processing of your personal data infringes the applicable regulations.

Changes to this Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes through the Application or by email.

We recommend reviewing this Policy periodically to stay informed about how we protect your information.