PRIVACY POLICY — Fab Mobility

Last Updated: 18/11/2025

1. Controller Identification (Art. 13.1 a, b RGPD)

Fab Mobility
Location: Lanzarote, Spain
Phone: +34 620 466 745
Email: info@fabmobility.es / fabmobilityreservas@gmail.com
Website: https://fabmobility.com

Fab Mobility is the Data Controller of all personal data processed through this website, our booking forms and our automated support systems.

2. Categories of Personal Data Processed (Art. 14.1 d RGPD)

We may process the following personal data:

2.1. Identification and contact information

• Full name

• Phone number

• Email address

2.2. Booking-related data

• Hotel name or delivery address

• Room number (if provided)

• Preferred delivery date & time

• Preferred collection date & time

2.3. Special categories of data (Art. 9 RGPD)

These data are necessary to guarantee suitability and safe use of mobility equipment:

• Age of the user

• Approximate weight

• Physical mobility characteristics or limitations voluntarily provided

➡️ These data qualify as “health-related data”.
We process them under explicit consent and strict minimisation criteria.

2.4. Technical and browsing data

• IP address

• Browser type/device

• Cookies (if enabled)

2.5. Communications and system logs

Collected through:

• Contact Form 7

• Emails

• Telephone or WhatsApp messages

• Automated assistant via n8n (AI-assisted workflow)

3. Purposes of Processing (Art. 13.1 c, 14.1 c RGPD)

Your data are processed for the following purposes:

3.1. To manage mobility equipment bookings

• Confirm reservations

• Schedule deliveries and collections

• Assign suitable equipment based on age/weight

• Manage modifications or cancellations

3.2. To communicate with the customer

• Confirmations

• Instructions and updates

• Resolving questions or incidences

3.3. To ensure safety and suitability

Health-related data are used solely to determine the correct equipment and avoid risks.

3.4. To operate automated workflows securely

n8n is used to:

• Process form submissions

• Generate bookings in calendar systems

• Send confirmation emails

• Assist users requesting changes

3.5. Compliance with legal obligations

Including contractual responsibilities and consumer rights.

4. Legal Basis (Art. 6 & 9 RGPD)

4.1. Consent (Art. 6.1.a, Art. 9.2.a RGPD)

When the user submits a form and accepts this privacy policy.

4.2. Contractual execution (Art. 6.1.b RGPD)

To provide the requested service (booking and delivery of mobility equipment).

4.3. Legitimate interest (Art. 6.1.f RGPD)

To ensure service safety and prevent incorrect equipment assignments.

4.4. Legal compliance (Art. 6.1.c RGPD)

For invoicing or mandatory retention of records.

5. Retention Periods (Art. 13.2 a RGPD)

➡️ Sensitive data (age, weight, mobility conditions) are not stored long-term.

6. Data Recipients (Art. 13.1 e, 14.1 e RGPD)

We may share data ONLY with the following categories of recipients:

6.1. Internal personnel

Delivery team and customer service.

6.2. Data processors (encargados del tratamiento)

• Hosting provider: Hostinger (EU servers)

• SMTP email provider

• n8n automation services in private VPS

• Calendar and email API providers (Google Workspace or equivalent)

➡️ All third parties operate under GDPR-compliant Data Processing Agreements (DPAs).

6.3. No transfers for marketing or resale

Fab Mobility never sells, exchanges or commercialises personal data.

7. International Transfer Safeguards (Art. 44–49 RGPD)

We avoid international transfers whenever possible.
If an email routing provider or calendar API operates outside the EU:

• Standard Contractual Clauses (SCCs) are applied

• Providers are GDPR-certified

• Data is minimised and encrypted during transmission

8. Security Measures (Art. 32 RGPD)

Fab Mobility implements the following protections:

• Encrypted HTTPS website

• SMTP with secure authentication

• Private VPS with firewall and access control

• Encrypted PostgreSQL databases

• Redis used only for temporary operational memory

• Internal access limited to authorized staff

• Automatic deletion of sensitive mobility data

• AI agent with no long-term retention and no external exposure

• Regular system and security updates

9. Data Subject Rights (Art. 13.2 b–f, 15–22 RGPD)

You may exercise any of the following rights:

• Right of access

• Right to rectification

• Right to erasure (“right to be forgotten”)

• Right to restrict processing

• Right to data portability

• Right to object

• Right to withdraw consent at any time

• Right not to be subject to automated individual decision-making
  (Fab Mobility does not perform automated decisions.)

To exercise your rights, contact:

📩 info@fabmobility.es
📞 +34 620 466 745

Response time: Within 30 days as required by GDPR.

10. Data Collection from Third Parties (Art. 14 RGPD)

If a booking is made on behalf of another person (e.g., family member), Fab Mobility may contact the user directly to:

• Confirm the legitimacy of the booking

• Inform about privacy rights

• Request explicit consent if needed

11. Children’s Data (Art. 8 RGPD)

Our services are designed for adults.
We do not knowingly collect information from minors under 18.

12. Updates to This Policy (Art. 13.2)

This Privacy Policy may be updated to reflect regulatory changes or service improvements.
The latest modification date is always shown at the top.

13. Contact

Fab Mobility
📞 +34 620 466 745
📩 info@fabmobility.es
🌐 https://fabmobility.com