1. Data controller
The controller of your personal data is Proyecto Evo Express S.L., with registered office at Calle Salvador Espriu 38, 08754 El Papiol, Barcelona, España, NIF CIF ESB72526288. You can reach us at office@evo.express.
2. Purpose of the processing
We process the personal data you provide us for the following purposes:
- Handle inquiries, quotes and information requests received through the contact form, route calculator or WhatsApp.
- Maintain the contractual relationship with clients (preparation, performance and invoicing of transport services).
- Comply with applicable legal and tax obligations.
- Basic website analytics to improve our offering — only if you have given your consent.
3. Legal basis
- Performance of a contract or pre-contractual measures requested by the data subject (GDPR Art. 6.1.b) — for quotes and the client relationship.
- Consent of the data subject (GDPR Art. 6.1.a) — for commercial communications and non-essential cookies.
- Compliance with a legal obligation (GDPR Art. 6.1.c) — for retaining invoices and tax records.
- Legitimate interest (GDPR Art. 6.1.f) — for maintenance and security of the website.
4. Retention period
Data is kept for as long as necessary to fulfil the purpose for which it was collected and to determine any resulting liabilities. Accounting and tax data is kept for the period required by current regulations (minimum 6 years, Art. 30 Spanish Commercial Code).
5. Recipients
Data is not shared with third parties except where required by law. As data processors we use: Vercel Inc. (website hosting, EU servers), Resend (transactional email) and IOTRACK24 (fleet tracking system, only for active clients with a shipment in transit). All processors comply with the GDPR.
6. Your rights
As a data subject you may exercise the following rights at any time:
- Access — know which of your data we process.
- Rectification — correct inaccurate data.
- Erasure (right to be forgotten) — delete your data where applicable.
- Objection — object to processing based on legitimate interest.
- Restriction — restrict processing in certain cases.
- Portability — receive your data in a structured format.
- Complaint before the supervisory authority: Spanish Data Protection Agency (AEPD), www.aepd.es.
To exercise these rights, send an email to office@evo.express indicating the right you wish to exercise and attaching a copy of an identifying document.
7. Security measures
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or alteration: site-wide HTTPS encryption, role-based access, backups and activity logs.
8. Changes
We may update this policy to reflect legal or operational changes. The current version is identified by the last-updated date shown at the top of the document.