Privacy policy
Last updated: 16 August 2026
Who is responsible for your data
The data controller for this website is TODO: legal entity name, tax ID (NIF/CIF) and registered address of the company operating Wisepassenger. Do not publish this policy without completing it. You can reach us for any privacy matter at admin@wisepassenger.com.
This policy describes how we process personal data under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
What we collect and why
Contact form and email. When you write to us we process the data you provide (name, agency name, IATA code if given, country, email address and the content of your message) in order to respond to your enquiry and, where it leads to an engagement, to prepare and perform the contract. The legal bases are our legitimate interest in answering enquiries addressed to us (Art. 6(1)(f) GDPR) and, where applicable, pre-contractual measures (Art. 6(1)(b) GDPR).
Client engagements. If you become a client we process the data needed to deliver the engagement and to meet legal obligations, including tax and accounting law (Art. 6(1)(b) and 6(1)(c) GDPR).
This website sets no analytics or advertising cookies and we do not build profiles of visitors. See the cookie policy for the limited technical storage used.
How long we keep data
Enquiries that do not lead to an engagement are kept for up to two years and then deleted. Client engagement records are kept for the duration of the relationship and thereafter for the periods required by Spanish commercial and tax law, typically six years for commercial documentation.
Messages sent over WhatsApp are subject additionally to WhatsApp's own terms and privacy policy; we recommend not sending sensitive information over that channel.
Who receives your data
We do not sell personal data and we do not share it with third parties for their own marketing. Data is disclosed only to service providers acting on our instructions, email delivery (Resend, Inc.) and website hosting (Vercel, Inc.), under data-processing agreements, and to public authorities where the law requires it.
Some providers process data outside the European Economic Area, in particular in the United States. Where that happens, transfers rely on the European Commission's adequacy decisions or on Standard Contractual Clauses.
Your rights
You may request access to your data, rectification, erasure, restriction of processing, portability, and you may object to processing based on legitimate interest. Write to admin@wisepassenger.com from the address concerned, or by post to the registered address above.
If you consider that we have not handled your data correctly, you may lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (www.aepd.es), or with your local supervisory authority.