Privacy Policy
1. Purpose and scope
This Privacy Policy explains how AUTO SEXI S.L., trading under the brand name BayGo, collects and processes users’ personal data when they use the baygo.es website and associated customer service channels, as well as the rights users have in relation to their personal data.
2. Basic information on data protection
| Manager | AUTO SEXI S.L., trading under the brand name BayGo. |
|---|---|
| Objectives | To manage vehicle booking and rental contracts, invoicing, customer service, compliance with legal obligations, candidate management, commercial marketing (with consent) and the improvement of our services. |
| Legal basis | Performance of the contract, compliance with legal obligations, consent of the data subject and legitimate interest. |
| Recipients | Data processors necessary for the provision of the service and public authorities in compliance with legal obligations. |
| International transfers | Some data processors transfer data to third countries (the United States), with appropriate safeguards in place in accordance with the GDPR. |
| Rights | Access, rectification, erasure, objection, restriction, data portability and the right not to be subject to automated decision-making, as well as the right to lodge a complaint with the AEPD. |
| Further information | You can find full details in the following sections of this policy. |
3. Data controller
Details of the data controller
- Company name: AUTO SEXI S.L.
- Tax Registration Number: B-18513572
- Registered address: Paseo de San Cristóbal, 4, ground floor, flat 6, 18690 Almuñécar (Granada)
- Trademark: BayGo
- Website: baygo.es
- Email address for data protection matters: support@baygo.es
AUTO SEXI S.L. (hereinafter ‘BayGo’) is responsible for the processing of personal data that it collects and processes via baygo.es and associated customer service channels.
BayGo has not appointed a Data Protection Officer as this is not a legal requirement given the nature and scale of its operations. For any enquiries regarding data protection, users may contact us at the email address provided.
4. Personal data we collect
Under the General Data Protection Regulation (GDPR), personal data means any information relating to an identified or identifiable natural person. Anonymised data and purely statistical data are not considered personal data.
The categories of personal data that BayGo may collect and process are as follows:
Personal details. First name, surname, date of birth, nationality and, when collecting the vehicle, identity document number (ID card or passport).
Contact details. Postcode, address at your destination, telephone number and email address.
Driving licence details. Number, date of issue, expiry date, category and country of issue of the driving licence, as well as the corresponding details for the second driver or any additional drivers named in the booking.
Payment details. References and identifiers for transactions made via the payment gateway. BayGo does not store the full details of the user’s card or account: these are processed directly by the payment service provider using its own security measures and in accordance with its own privacy policy.
Booking and hire details. Collection point, collection and return dates and times, vehicle selected, cover and extras included, flight number or point of origin (where applicable), hire history, customer credit balances, refunds, amendments and cancellations.
Contract and billing details. Amounts paid, invoices issued, and the customer’s tax details when requesting an invoice as a business or self-employed person.
Data derived from customer service. Communications via support channels (email, telephone, forms, social media, chat), complaints, enquiries and their resolution.
Details regarding penalties and incidents. Information on fines, traffic offences, accidents, thefts or incidents arising from the use of the vehicle during the hire period.
Data relating to candidates in recruitment processes. When a user submits their application, BayGo collects the data contained in their CV and the supporting documents provided (academic and professional details, work experience and contact details).
Technical and browsing data. IP address, browser type and version, operating system, device, approximate geolocation data, pages visited, time spent on the site, traffic source and other similar data collected via cookies and similar technologies (see the Cookie Policy for further details).
Social media data. When a user interacts with BayGo’s official social media profiles (Facebook, Instagram, Google, etc.), BayGo may access the public data on the user’s profile and any communications the user makes via those platforms.
BayGo does not collect data falling within special categories of personal data (ethnic or racial origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, data concerning a person’s private life or sexual orientation), unless the user voluntarily provides such data via customer service channels in the context of a specific complaint or enquiry, in which case it will be processed solely for the purpose of resolving that enquiry.
If the regulations require certain personal data to be collected, or if such data is necessary for the conclusion of the contract, and the user refuses to provide it, BayGo will be unable to provide the service.
5. How we collect data
Information that you provide to us directly. This includes when you make a booking on baygo.es, contact us by email or phone, submit a complaint, subscribe to our newsletter, send a comment or review, apply for a job, or provide your details via any of our customer service channels.
Information provided by the user at the time of vehicle collection. When collecting the vehicle, the hirer and authorised drivers must present proof of identity (ID card or passport) and a driving licence; this information is included in the hire agreement.
Information collected automatically. When you browse baygo.es, technical data about your device, browser and browsing activity is automatically collected using cookies and similar technologies. Further details can be found in the baygo.es Cookie Policy.
Information received from third parties:
- Payment service provider: references and identifiers for the transactions carried out.
- Google: analytics data on the use of baygo.es and, where the user consents, public reviews and ratings associated with BayGo’s business listing.
- Meta (Facebook, Instagram): data relating to user interaction with BayGo’s adverts or official profiles, where the user has given their consent via their privacy settings.
6. Purposes, legal bases and retention periods
BayGo processes users’ personal data for the purposes, on the legal grounds and for the periods set out below:
| Purpose | Legal basis | Retention period |
|---|---|---|
| Management of bookings and tenancy agreements | Performance of the contract | 5 years from the end of the contract |
| Invoicing and accounting obligations | Legal obligation (Commercial Code) | 6 years from the date of issue of the invoice |
| Tax obligations | Legal obligation (General Tax Law) | 4 years |
| Customer service, enquiries and complaints | Performance of the contract and legitimate interest | 5 years since the closure |
| Identification of the driver to the authorities | Legal obligation | The statutory deadline |
| Handling of incidents, damage, theft and claims | Performance of the contract and legitimate interest | Five years since the case was closed |
| Post-tenancy satisfaction survey | Legitimate interest | Up to 12 months after the tenancy |
| Marketing and business communications | Express consent | For as long as consent is maintained, plus one year after cancellation |
| Statistical analysis and website optimisation | Legitimate interest | Analytical cookies: up to 26 months |
| Management of candidates in recruitment processes | Candidate’s consent | 1 year from receipt |
| Social media support | Consent when interacting | As long as the interaction continues |
| Protection against potential claims | Legitimate interest | Until the limitation period for bringing an action expires |
Additional retention periods. Notwithstanding the above retention periods, BayGo may retain personal data, duly blocked, for as long as necessary to meet any legal, judicial or tax obligations arising from the processing.
Change of purpose. Personal data is used only for the purposes for which it was collected. If BayGo considers it reasonably necessary to use it for a different purpose, it will notify the user in advance, explaining the legal basis for the new processing, provided that the new purpose is compatible with the original one.
7. Recipients and data processors
BayGo does not disclose personal data to third parties for commercial purposes. In the course of its business, BayGo uses external service providers (data processors) who process personal data on BayGo’s behalf, following its instructions and in accordance with the data processing agreements signed with them under Article 28 of the GDPR. These suppliers process data solely for the purpose of providing the service contracted by BayGo and are subject to the security and confidentiality safeguards required by the regulations.
Categories of data processors
In order to provide its services, BayGo uses suppliers from the following categories, amongst others:
- Payment service providers, for transaction processing and fraud prevention.
- Providers of technology services, hosting, system maintenance and IT infrastructure.
- Providers of booking management and customer relationship services, including booking management systems and the sending of service-related communications.
- Providers of customer service and enquiry and complaints management services.
- Providers of communications, marketing and analytics services for managing commercial mailings and analysing website usage.
Other recipients
- Public authorities and competent bodies (the Tax Agency, the Directorate-General for Traffic, law enforcement agencies, and courts) in compliance with legal obligations.
- Professional advisers (solicitors, tax advisers, auditors) where necessary to protect rights or comply with accounting and legal obligations, subject to a duty of confidentiality.
- Insurance companies, in the event of claims or accidents, to process the relevant claims.
Further information. Users may request further information about the data processors providing services to BayGo by writing to support@baygo.es.
8. International transfers
Some of the suppliers providing services to BayGo (in particular, technology, payment, communications and analytics providers) may be based outside the European Economic Area or process data there, primarily in the United States.
In accordance with the GDPR, BayGo only permits such international transfers where there are adequate safeguards ensuring a level of protection equivalent to that in Europe, through one of the following mechanisms:
- European Commission adequacy decision, where the country of destination or the data controller has been formally recognised as providing an adequate level of data protection (such as the EU-US Data Privacy Framework for certain participating US data controllers).
- Standard Contractual Clauses (SCCs) approved by the European Commission.
- Other equivalent safeguards provided for under data protection legislation where none of the above apply.
Users may request further information about these transfers and the applicable safeguards by writing to support@baygo.es.
9. Your data protection rights
As a data subject, you may exercise the following rights recognised by the GDPR at any time:
Right of access. You have the right to obtain confirmation as to whether or not BayGo is processing your personal data and, where applicable, to access that data and information regarding its processing.
Right to rectification. Request the rectification of inaccurate or incomplete personal data.
Right to erasure (‘right to be forgotten’). You may request the erasure of your data where, amongst other reasons, it is no longer necessary for the purposes for which it was collected. This right is not absolute: BayGo may retain certain data where there is a legal obligation to do so or where it is necessary for the establishment, exercise or defence of legal claims.
Right to object. You have the right to object to the processing of your data in certain circumstances, particularly where it is based on BayGo’s legitimate interests or is carried out for direct marketing purposes. In the latter case, the right to object is unconditional.
Right to restriction of processing. You may request that processing be restricted in the circumstances set out in the GDPR, in which case BayGo will only retain the data for the purpose of establishing or defending legal claims.
Right to data portability. Where the processing is based on consent or on the performance of a contract and is carried out by automated means, you may request that your data be provided to you in a structured, commonly used and machine-readable format, or that it be transmitted to another controller where technically feasible.
Right to withdraw consent. Where processing is based on consent, you may withdraw your consent at any time, without this affecting the lawfulness of the processing carried out prior to withdrawal.
Right not to be subject to automated individual decision-making. You have the right not to be subject to decisions based solely on automated processing that produce legal effects or significantly affect you, except in the cases provided for by law. Further details are set out in clause 13.
Right to lodge a complaint with the supervisory authority. You may lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe that the processing of your data infringes the regulations:
- Online portal: sedeagpd.gob.es
- Website: aepd.es
- Postal address: 6 Jorge Juan Street, 28001 Madrid
10. How to exercise your rights
Users may exercise their rights at any time, free of charge, via the following channels:
- Email: support@baygo.es
- Postal address: AUTO SEXI S.L. (Data Protection), Paseo de San Cristóbal, 4, ground floor, flat 6, 18690 Almuñécar (Granada)
Identification of the data subject. To ensure that the data subject is the person exercising their rights, BayGo may request additional information to confirm the user’s identity (for example, a copy of their national identity card, passport or other reasonable form of identification). This request is a security measure to prevent data from being disclosed to unauthorised persons. BayGo will only retain this information for as long as is strictly necessary to process the request.
AEPD templates. Users may use the application templates made available by the Spanish Data Protection Agency on its website.
Response time. BayGo will respond to requests within one month of receipt. This period may be extended by up to two further months where the request is particularly complex or where a large number of requests have been received from the same data subject; in such cases, the user will be informed of the extension and the reasons for it within the initial one-month period.
Cases of refusal. If BayGo does not comply with the request, it will inform the user of the reasons within a maximum of one month, as well as of the possibility of lodging a complaint with the AEPD or taking legal action.
11. Processing of third-party data (additional drivers)
In some cases, the renter provides BayGo with personal data relating to other individuals, in particular the details of a second driver or additional drivers who are added to the rental agreement.
By providing personal data relating to third parties, the tenant warrants that they have obtained the consent or authorisation of those individuals to disclose their data to BayGo, and that they have previously informed them of the processing of their data by BayGo in accordance with this Privacy Policy and of the purposes for which it will be processed.
BayGo will process the data of additional drivers for the same purposes, on the same legal grounds and with the same safeguards as those described in this policy for the renter, where applicable. The renter shall be liable for any loss or damage that may arise from a breach of this obligation to provide information and authorisation.
12. Processing of children’s personal data
BayGo’s services are intended exclusively for adults. BayGo does not provide rental services to anyone under the age of 18 and does not knowingly collect or process personal data relating to minors. You must be of legal age to book through baygo.es; driving the vehicles is also subject to the age and driving licence validity requirements set out in the General Terms and Conditions.
By providing their details, the user declares that they are of legal age and have the legal capacity to enter into a contract.
If BayGo discovers that it has collected personal data from a minor without the necessary authorisation, it will take the necessary steps to delete such data as soon as possible. If a user becomes aware that a minor has provided us with their data, they may report this to support@baygo.es so that we can proceed to delete it.
13. Automated decisions
As part of the booking and payment process, BayGo may use certain automated procedures to prevent fraud and ensure the security of transactions.
In particular, the payment service provider may use automated fraud verification and prevention mechanisms that may result in a transaction being automatically declined if signs of risk are detected. These mechanisms are applied by the payment service provider in accordance with its own policies and security measures.
Apart from the above, BayGo does not make decisions that produce legal effects on the user or significantly affect them based solely on the automated processing of their data. Should the user consider that an automated decision has affected them, they may request human intervention, express their point of view or challenge the decision by writing to support@baygo.es.
14. Marketing and business communications
BayGo may send the user marketing communications (newsletters, offers, promotions, updates) only if the user has given their express consent to do so by ticking the relevant box on the subscription or booking form. These communications are sent primarily by email via an email marketing service provider.
Withdrawal of consent. Users may withdraw their consent and unsubscribe at any time, free of charge and easily, via the unsubscribe link included in every communication, or by writing to support@baygo.es. Withdrawal does not affect the provision of the rental service or the receipt of operational communications relating to an ongoing booking (confirmations, reminders, changes, etc.), which are sent on the basis of the performance of the contract and do not constitute marketing.
Satisfaction survey. Once a rental has ended, BayGo may send the customer a satisfaction survey in order to assess and improve the quality of its services. This processing is based on BayGo’s legitimate interest. The customer may opt out of receiving these surveys at any time via the channels provided.
15. Social media
BayGo has official social media profiles (Facebook, Instagram, Google and other platforms). When users interact with these profiles (by following them, commenting, sending messages, rating or sharing content), BayGo processes the public data from the user’s profile and the content of communications, for the purpose of managing its presence on these platforms, responding to enquiries received and promoting its services.
The processing of user data within each social media platform is governed by that platform’s privacy policy, over which BayGo has no control. BayGo recommends that users review the terms and privacy settings of each social media platform they use.
Users can stop interacting with BayGo’s profiles at any time by unfollowing them or adjusting their privacy settings on the relevant social media platform.
16. Data security and data breaches
BayGo has implemented appropriate technical and organisational measures to ensure the security of personal data and to prevent its loss, misuse, alteration, unauthorised access or disclosure, in accordance with the requirements of the GDPR.
Access to personal data is restricted to employees, contractors and data processors who need to know such information in order to carry out their duties; all of them are bound by a duty of confidentiality.
BayGo has procedures in place to manage any suspected breach of personal data security. In the event of a security breach affecting a user’s personal data that could pose a risk to their rights and freedoms, BayGo will notify the Spanish Data Protection Agency and, where appropriate, the affected users, in accordance with the terms and timeframes set out in Articles 33 and 34 of the GDPR.
17. Cookie Policy
The baygo.es website uses cookies and similar technologies to ensure it functions properly, to analyse website usage and, where the user consents, for advertising and personalisation purposes.
Details of the cookies used, their purpose, their duration and how to manage or withdraw your consent can be found in the baygo.es Cookie Policy, which supplements this Privacy Policy.
18. Policy amendments and effective date
BayGo reserves the right to amend this Privacy Policy to bring it into line with new legislation, the guidelines of supervisory authorities, or changes to the way it processes data. Any amendments will be published on baygo.es and will take effect from the moment of publication.
Where changes substantially affect the processing of your data or involve a change in the purposes or legal basis, BayGo will notify you through the appropriate channels.
We recommend that users review this policy from time to time to stay informed about how BayGo processes and protects their personal data.
Last updated: June 2026