At AUTOTURISMO NEXIS S.A. de C.V., operating under the commercial brand Greenway Transfers, we are committed to protecting and respecting the privacy of our clients and users. This Privacy Policy is issued in compliance with Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and its Regulations.
1. Data Controller
The entity responsible for processing your personal data is:
Legal nameAUTOTURISMO NEXIS S.A. de C.V.
Commercial brandGreenway Transfers
AddressCancún, Quintana Roo, México
Emailprivacidad@greenwaytransfers.com
WhatsApp+52 998 485 9388
2. Personal Data We Collect
We collect the following personal data when you obtain a quote, make a booking, or contact us:
Identification and contact data
- Full name
- Email address
- Phone / WhatsApp number
- CURP (only when required for invoicing or official records)
Service data
- Transfer origin and destination
- Date and time of service
- Flight number (where applicable)
- Vehicle type and number of passengers
- Special preferences (child seats, accessibility requirements)
Payment data
- Selected payment method (credit/debit card or pay on boarding)
- Card payments are processed entirely by Stripe, Inc., a PCI-DSS certified payment processor. Greenway Transfers does not store card numbers, expiration dates, or security codes.
Technical data
- IP address
- Browser and device type
- Cookie data (see section 8)
3. Purposes of Processing
Primary purposes (necessary for the service)
- Process, confirm, and manage your transfer booking
- Coordinate service delivery with the assigned driver
- Send booking confirmations, reminders and updates by email and/or WhatsApp
- Process payments and handle refunds or cancellations
- Issue electronic tax receipts (CFDI) when requested
- Comply with legal and tax obligations before Mexican authorities
Secondary purposes (optional)
- Send information about promotions, discounts or new services
- Conduct service satisfaction surveys
- Improve our services through anonymized statistical analysis
If you do not wish your data to be used for secondary purposes, you may notify us at privacidad@greenwaytransfers.com. Exercising this right will not affect the contracted service.
4. Legal Basis for Processing
The processing of your personal data is based on the following legal grounds under the LFPDPPP:
- Contract performance: Processing is necessary to deliver the contracted transfer service.
- Consent: For secondary purposes such as marketing communications, we only process your data with your express consent.
- Legal obligation: For invoicing and compliance with tax obligations before Mexico's SAT and other authorities.
- Legitimate interest: For the security of our systems and fraud prevention.
5. Data Sharing and Disclosure
Your personal data may be shared with third parties only in the following circumstances:
| Recipient | Purpose | Legal basis |
|---|
| Assigned drivers and operators | Transfer service delivery | Contract performance |
| Stripe, Inc. | Secure card payment processing | Contract performance |
| Transactional email provider | Sending confirmations and notifications | Legitimate interest |
| Tax authorities (SAT) | CFDI issuance / tax compliance | Legal obligation |
| Public security authorities | Compliance with legal requirements | Legal obligation |
We do not sell, rent, or transfer your personal data to third parties for their own commercial purposes.
6. Data Retention
- Booking and service data: Retained for 5 years from the date of service, in accordance with commercial prescription periods under the Mexican Commercial Code.
- Tax data and CFDI: Retained for a minimum of 5 years under the Federal Tax Code.
- Marketing data: Retained until you withdraw your consent.
- Technical / log data: Retained for 90 days for security and incident resolution purposes.
Upon expiry of these periods, data will be securely deleted or anonymized.
7. Your Rights and How to Exercise Them
As a data subject, the LFPDPPP grants you the following rights:
A
Access
Know what personal data we hold about you and how we use it.
R
Rectification
Request correction of inaccurate or incomplete data.
C
Cancellation
Request deletion of your data when it is no longer necessary.
O
Opposition
Object to processing of your data for specific purposes.
Procedure
To exercise any of these rights, send an email to privacidad@greenwaytransfers.com with the subject line "Exercise of ARCO Rights", attaching:
- Full name and email address used for the booking
- Copy of official ID (INE, passport)
- Clear description of the right you wish to exercise
We will respond to your request within a maximum of 20 business days of receipt. If approved, changes will be made within the following 15 business days.
If you believe your request was not handled in accordance with the law, you have the right to file a complaint with Mexico's National Institute for Transparency, Access to Information and Personal Data Protection (INAI) at www.inai.org.mx.
8. Cookies and Similar Technologies
Our website uses cookies and similar technologies to enhance your browsing experience. Below is a description of the types of cookies we use:
| Type | Description | Duration |
|---|
| Essential | Required for the website to function (session, shopping cart, language, currency) | Session / 30 days |
| Analytical | Allow us to measure traffic and browsing behaviour in an anonymized way | Up to 2 years |
| Functional | Remember your preferences (language, currency) for future visits | 30 days |
You can manage or delete cookies from your browser settings. Disabling essential cookies may affect website functionality.
9. Security Measures
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction or improper disclosure, including:
- Data transmission encrypted via TLS/HTTPS protocol
- Payment processing compliant with PCI-DSS standard through Stripe
- Restricted access to personal data for authorized personnel only
- System access logs and audit trails
- Periodic security reviews
In the event of a security breach affecting your personal data, we will notify you in accordance with the timeframes established by the LFPDPPP and the INAI where applicable.
10. Minors
Our services are not directed to persons under 18 years of age. We do not intentionally collect personal data from minors. If you are a parent or guardian and believe a minor has provided us with personal data, please contact us at privacidad@greenwaytransfers.com so we can delete it.
Minors travelling as passengers are registered only under the consent and supervision of the booking holder (responsible adult).
11. Changes to this Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will notify you through a prominent notice on our website and/or by email with at least 30 days' advance notice.
The date of the last update will always appear at the top of this document. Continued use of our services after the publication of changes implies acceptance of the updated policy.
