PapayaSpot PapayaSpot
  • Features
  • How it works
  • Pricing
  • Blog
  • Contact
English Español Français Deutsch Italiano Português
Start for free

Privacy Policy

Last updated: April 2026

1. Data controller

The data controller is Juan Peñuelas Martínez, with NIF (Spanish Tax ID) 03132912J, located at Calle Carnavajo 17, 19290 Fontanar, Guadalajara, Spain. Contact: info@papayaspot.com.

2. Data we collect

We collect the following data:

  • Full name
  • Corporate email address
  • Company you belong to
  • Vehicle license plate (optional)
  • Spot booking history
  • Push notification tokens (for sending alerts)

3. Purpose of processing and legal basis

Your data is used for: (a) managing your account and authentication (legal basis: performance of contract, Art. 6.1.b GDPR); (b) processing parking spot bookings (performance of contract); (c) sending you service notifications via email and push (legitimate interest, Art. 6.1.f GDPR); (d) analyzing website usage through cookies (consent, Art. 6.1.a GDPR).

4. Sub-processors

We use the following third-party providers that process data on our behalf:

  • Google Cloud / Firebase (Firebase Auth, Cloud Firestore, Cloud Functions, FCM) — USA — Standard Contractual Clauses (SCCs) and Google Data Processing Amendment
  • Stripe, Inc. — USA — Payment processing — SCCs and Stripe DPA
  • Brevo (Sendinblue) — France/EU — Transactional email delivery
  • Google Analytics (GA4) — USA — Website analytics (only with cookie consent) — SCCs

5. International transfers

Some of our providers are located in the United States. Transfers are made under the Standard Contractual Clauses (SCCs) approved by the European Commission and, where applicable, the EU-US Data Privacy Framework.

6. Data retention

Your account data is retained as long as your account is active. When you delete your account, your personal data (name, email, license plate, tokens) is deleted and future reservations are cancelled. Historical reservation records are anonymized for auditing purposes and retained for a maximum of 3 years. Billing data is retained for 5 years in compliance with Spanish tax regulations.

7. Your rights

Under the GDPR, you have the right to: access your data, rectify it, delete it, restrict or object to its processing, and request its portability. You can exercise these rights by writing to info@papayaspot.com. You can also delete your account directly from the app (Profile > Delete account). If you believe your rights have not been adequately addressed, you may file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

8. Security

We use Firebase Authentication and Cloud Firestore with encryption in transit (TLS) and at rest (AES-256) to protect your data. Data access is restricted through role-based Firestore security rules.

9. Cookies

Our website uses analytics cookies (Google Analytics) and advertising cookies (Google Ads) only when you accept the cookie banner. You can withdraw your consent at any time via the "Manage cookies" link in the footer. For more information, see our cookie policy on this page.

PapayaSpot

Smart parking management for businesses. Bookings, calendar, and control in one platform.

Product

  • Features
  • How it works
  • Pricing

Company

  • About
  • Contact
  • Privacy
  • Terms
  • Delete account

Access

  • Log in
  • Create account

© 2026 PapayaSpot. All rights reserved.

Sitemap

We use cookies to analyze site traffic and improve your experience. Privacy policy