Version of October 2026
This is a translation of the Spanish original. In case of discrepancy, the Spanish version prevails.
This policy explains how PARKINGS ADMIN processes personal data, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and with Ley Orgánica 3/2018 de Protección de Datos Personales y garantía de los derechos digitales (LOPDGDD).
PARKINGS ADMIN provides a service to car parks. It therefore processes personal data in two different roles, and telling them apart matters because it changes who you should address to exercise your rights:
| Activity | Data | Purpose | Legal basis |
|---|---|---|---|
| Enquiries by e-mail or telephone | Name, e-mail, telephone, company and message | Handle the enquiry and, if requested, prepare a quotation | Legitimate interest in replying and steps taken prior to entering into a contract (art. 6.1.f and 6.1.b GDPR) |
| Customers and USERS of the SERVICE | Name, e-mail, job title, access credentials and activity log | Provide the SERVICE, manage the account and give support | Performance of the contract (art. 6.1.b GDPR) |
| Invoicing and collection | Tax details, address, contact person and bank details | Invoice and collect by SEPA direct debit | Performance of the contract and legal obligation (art. 6.1.b and 6.1.c GDPR) |
| Relationship with CHANNELS, AFFILIATES and suppliers | Name, e-mail and telephone of the contact persons | Manage the relationship and the technical integrations | Legitimate interest (art. 6.1.f GDPR) |
| Security of the SERVICE | IP address, browser, access logs and API usage logs | Prevent unauthorised access and fraud, and diagnose errors | Legitimate interest (art. 6.1.f GDPR) |
| Commercial communications | Name and e-mail | Give notice of news about the SERVICE | Consent, or legitimate interest where the person is already a customer (art. 6.1.a and 6.1.f GDPR and art. 21.2 LSSI-CE) |
| Public website statistics | Pages visited, referring page, device type and country, with no cookies and no identifiers | Understand how the website is used and improve it | Legitimate interest (art. 6.1.f GDPR) |
You may unsubscribe from commercial communications at any time by writing to info@parkingsadmin.com.
As data processor, PARKINGS ADMIN processes on behalf of each CAR PARK the following data, which it receives from the CAR PARK itself, from the sales CHANNELS and from the AFFILIATES:
With these data the SERVICE allows the CAR PARK to manage its bookings, validate vehicle access and obtain statistics about its activity, including returning-customer statistics, which are calculated from the registration plate. PARKINGS ADMIN does not use these data for its own purposes.
If you have booked a space, the controller of your data is the car park, and the channel or the hotel you booked with is the controller of the data you gave it. Please address them to exercise your rights. If you write to us, we will pass your request on to the car park without delay.
PARKINGS ADMIN does not sell or disclose personal data to third parties, save where legally obliged to. BOOKING data are made available to the CAR PARK they belong to and, where the CAR PARK has configured it, are sent to the access control systems it has integrated with the SERVICE and to the CHANNEL or AFFILIATE the BOOKING came from.
In order to provide the SERVICE we rely on the following suppliers, which act as processors or sub-processors under a contract compliant with article 28 GDPR:
| Supplier | Service | Location of the data | Safeguards |
|---|---|---|---|
| Amazon Web Services EMEA SARL | Hosting, database, file storage, logs and artificial intelligence assistant (Amazon Bedrock) | European Union (Spain) | Processing within the European Economic Area |
| Functional Software, Inc. (Sentry) | Application error logging | European Union (Germany) | European Commission standard contractual clauses |
| Amazon Web Services EMEA SARL (Amazon SES) | Sending the SERVICE's e-mails | European Union (Ireland) | Processing within the European Economic Area |
| Google Ireland Limited and Google LLC | Mailbox receiving the booking e-mails (Google Workspace), bot protection on sign-in (reCAPTCHA) and, only inside the application, rendering of statistical charts (Google Charts) | European Union and United States | EU-U.S. Data Privacy Framework and standard contractual clauses |
| Umami Software, Inc. | Public website visit statistics, with no cookies and no visitor identifiers | European Union | European Commission standard contractual clauses |
Where a supplier processes data outside the European Economic Area, the transfer relies on the safeguards set out in the table.
| Data | Retention period |
|---|---|
| Personal data of the BOOKINGS: name, e-mail, telephone, postcode, city, hotel room, vehicle model and colour, flight or transport details and comments | Deleted 12 months after the close of the BOOKING's SETTLEMENT month. |
| Vehicle registration plate of the BOOKINGS | After the same period of 12 months, it is replaced by a code encrypted with a secret key (pseudonymisation) that does not allow the plate to be read. The code is used only to calculate the CAR PARK's returning-customer statistics and is deleted when the contract with it ends. |
| Non-personal data of the BOOKINGS: dates, amounts, channel, country and language | Kept for invoicing, SETTLEMENT and statistics. |
| Subscriber data of the CAR PARK: name and registration plate | For as long as the CAR PARK keeps the subscription. Deleted when the CAR PARK cancels the subscriber or when the contract ends. |
| Technical logs of the SERVICE: API requests, integrations with access systems, plate readings from the cameras, booking e-mails received and attached vouchers | 6 months. |
| Diagnostic logs in the cloud | 90 days. |
| Database backups | 7 days. |
| Account data of the CUSTOMER and of its USERS: name, e-mail and activity log | For the term of the contract. Deleted within 30 days of the account being closed. |
| Invoicing data | The periods required by commercial and tax law, generally 6 years. |
| Commercial contacts | Until the person objects or withdraws their consent. |
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and may withdraw at any time any consent you have given, without affecting the lawfulness of the processing carried out beforehand. To do so, write to info@parkingsadmin.com or to the contact address given in section 1, stating the right you wish to exercise and providing evidence of your identity.
If you consider that we have not dealt with your request properly, you may lodge a complaint with the Spanish data protection authority, Agencia Española de Protección de Datos (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid.
We apply technical and organisational measures appropriate to the risk, among them: encryption of communications, hosting in the European Union, access control with per-USER profiles, individual credentials for the API, activity logs, backups, and staff access limited to what is necessary and subject to confidentiality.
PARKINGS ADMIN does not take decisions based solely on automated processing that produce legal effects on individuals. The SERVICE includes an artificial intelligence assistant that helps the CAR PARK interpret the statistics of its activity. The assistant works with aggregate figures, not with customers' contact details, and runs on Amazon Bedrock within the European Union.
We may update this policy to reflect legal changes or changes to the SERVICE. The version in force is always the one published on the website, with its update date.