Privacy policy

Last updated: 1 November 2026

Controller: Vilafant Gestió SL, tax ID B65763526, Rambla de l'Exposició, 45, 08800 Vilanova i la Geltrú, Spain. Contact: josep@mul.tax, +34 644 377 787.

Purposes and legal basis

• Answering enquiries from the contact form: pre-contractual steps (Art. 6(1)(b) GDPR).
• Handling train and flight claims you instruct us on, using the data and documents you send: performing your instruction (Art. 6(1)(b) GDPR).
• Keeping the client database (name, email, phone, language, instructions and consents): performing your instruction and legal obligations (Art. 6(1)(b) and (c) GDPR).
• Sending newsletters and advertising by email: only with your consent, confirmed through a link we send you (Art. 6(1)(a) GDPR and Art. 21 of Spanish Law 34/2002), which is optional and is never a condition of any service.
• Proving consents: we store the date, text version, language, form and IP address (Art. 6(1)(c) GDPR).

Withdrawing consent: you can stop advertising at any time with the unsubscribe link or by writing to josep@mul.tax. Withdrawal does not affect earlier processing.

Retention: enquiries that do not lead to an instruction: 1 year from the last contact. Clients, claims and commercial records: 6 years from the last accounting entry (Art. 30 of the Spanish Commercial Code). Identification documents of tax and accounting clients: 10 years (Art. 25 of Spanish Law 10/2010). After these periods, data needed to deal with liabilities are blocked (Art. 32 of Spanish Organic Law 3/2018). Encrypted copies of ID, passport and tickets and the ID number: 1 year from the closure of the claim, or 18 months from the instruction if it is not recorded as closed. Advertising: until you withdraw consent; we then keep proof of your decision for 3 years.

Recipients: to file a claim we give the necessary data to the transport operator or the competent body. We do not pass data to third parties for their own purposes unless the law requires it. Namecheap (web hosting and email) acts as processor and, if you use the site chats, so do Tidio (live chat) and Cloudflare and Anthropic (AI assistant).

International transfers: Namecheap, Inc. may transfer data to the United States. The safeguard is the European Commission's Standard Contractual Clauses (Decision 2021/914), incorporated into its data processing addendum. You can request a copy at josep@mul.tax.

Trip check: the prior check of a train delay asks for no personal data.

Your rights: access, rectification, erasure, objection, restriction and portability, at josep@mul.tax. You may also complain to the Spanish Data Protection Agency (aepd.es).

Cookies: we only set Tidio live chat cookies if you accept them in the notice. We do not use advertising or analytics cookies.