Privacy policy

This policy explains how we process the personal data you give us when you use the ZapUp support centre (soporte.zapup.es): when you read the help, open a request, track your case or write to us by email. The Spanish version is the legally binding one.

1. Data controller

Owner

MAGIASLINK, S.L. (ZapUp)

Tax ID (CIF)

B21937222

Address

Calle Salamanca 33, 4, 10 · 46005 Valencia, Spain

Contact

info@zapup.es

2. What data we process

• Contact details: first name, last name, email address and, if you give it to us, phone number.
• Details of your request: the description of the problem, your answers to the form (for example, rental date, station or business, payment method and last digits of the card) and any files you attach, such as screenshots or receipts.
• Communications: the messages we exchange with you about the case.
• Technical data: IP address and basic browser data, used only to protect the service against abuse (anti-bot verification and sending limits).

We will never ask for your full card number, its CVV or passwords. If we receive them by mistake, we delete them.

3. What we use it for and legal basis

• Handling and resolving your request (incidents, refunds, complaints): performance of the contractual relationship you have with ZapUp as a user of the service and, before that, your own request.
• Sending you emails about your case (confirmation, replies and status changes): the same basis, as they are necessary to manage your request.
• Protecting the support centre against spam and fraudulent use: ZapUp's legitimate interest in keeping the service secure.
• Complying with legal obligations, for example consumer or tax obligations when there is a refund.

We do not use your data for advertising or to build commercial profiles.

4. How long we keep it

While your case is open and, once closed, for as long as necessary to handle any claims. After that, the data is blocked and kept only for the periods required by law; when those periods end, it is deleted. Files you upload but never send are deleted automatically.

5. Who we share it with

We do not sell or transfer your data. To provide the service we rely on providers acting as data processors, under contract and with GDPR safeguards:

• Supabase — database and file storage, hosted in the European Union (Frankfurt).
• Cloudflare — web hosting, security and anti-bot verification (Turnstile).
• Resend and Google — sending support emails.
• Stripe — looking up rental payments and issuing refunds.

Some of these providers may process data outside the European Economic Area. In that case they do so under the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time by writing to info@zapup.es, including your case number (ZS-…) if you have one. We will reply within one month at the latest.

If you believe we have not processed your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Cookies

The support centre does not use advertising or analytics cookies. Only essential technical elements are used: Cloudflare Turnstile anti-bot verification on the help form, a preference stored in your browser to remember the language you chose and, for the ZapUp team, the session cookie of the internal panel.

8. Changes to this policy

If we change this policy we will publish the new version on this page, with its update date. If the change is significant, we will also let you know by email if you have an open case.