Data controller
The controller responsible for processing personal data is:
- Trade name
- Iguataxi
- Controller
- Alejandro Manuel Vera
- Status
- Persona humana
- Argentine tax ID (CUIT)
- 20-44555229-2
- Address
- Aurelia Pennon
- iguataxi@gmail.com
- Iguataxi WhatsApp
- Website
- iguataxi.com
Scope of this Policy
This Policy applies to data processed through iguataxi.com, the enquiry, booking, confirmation, withdrawal and cancellation forms, the official email address and conversations initiated by users through WhatsApp.
It also covers operating data that must be disclosed to a driver or carrier to provide a transfer. Browsing the site is not presented as contractual acceptance of this Policy: its main purpose is to provide information.
Personal data we process
Identification and contact
- first and last name
- telephone and WhatsApp number
- email address
- nationality, only when supplied in the booking form and on an optional basis
Data needed for the service
- date and time
- origin, destination, hotel or accommodation
- number of passengers
- suitcases, cabin baggage and special luggage
- flight number, where applicable
- necessary operating assistance or adaptation
- transfer-related notes
Booking and contractual evidence
- price and currency
- quote, booking or request code
- confirmation date and time
- version and URL of the disclosed Terms
- checkbox and electronic acceptance record
- cancellation policy and special terms
- withdrawal or cancellation requests and their receipts
Technical and measurement data
- pages visited and page path
- source, medium, campaign and referrer URL
- browser, device, operating system and session statistics
- client or cookie identifier
- clicks on WhatsApp links and successful booking-form submissions
- IP address technically received by Google to derive approximate location and discarded before being logged in GA4, according to Google's documentation
Sensitive data and special assistance
Iguataxi does not intentionally request sensitive data or medical diagnoses. If a person needs assistance or an adaptation for the transfer, they should disclose only the minimum operating information. If a user voluntarily includes sensitive information in a free-text field, its use will be limited to what is strictly necessary and only where an appropriate legal basis exists.
How we obtain data
- Directly from the user when they complete and submit a form.
- During email or WhatsApp conversations and while coordinating or providing the service.
- From the adult booking on behalf of other passengers.
- Automatically through Google Analytics, but only after the analytics category is enabled. The advertising category updates Consent Mode signals; the audited container has no Google Ads tag.
- Through Google Maps only when the user clicks “View map” and voluntarily loads the integration.
Purposes
- answer enquiries and prepare quotes
- handle requests and confirm bookings
- provide the transfer and coordinate the driver, vehicle, origin, destination and time
- manage changes, cancellations, withdrawal and service termination
- respond to complaints and exercise or defend rights
- keep reasonably necessary contractual evidence
- protect the security of the service and contact channels
- produce usage statistics and measure events when the user enables analytics
- manage Consent Mode advertising preferences and signals separately
Iguataxi will not use data for new, incompatible purposes without prior notice and consent where required.
Grounds for processing
Argentine Law 25,326 establishes free, express and informed consent as a rule and recognises specific exceptions. Iguataxi applies the Argentine framework as follows:
Enquiry or contractual relationship
Data needed to answer a request, prepare and confirm a booking or provide the service is processed within the relationship requested by the user and the exception under Law 25,326 for data arising from a contractual relationship where it is necessary for its development or performance.
Consent
Consent will be requested where Law 25,326 requires it. The analytics and advertising choices are voluntary, separate and revocable. Rejecting them does not prevent booking or the use of essential functions.
Legal obligations
Data may be processed or retained where a specific applicable rule requires it or where it is needed to respond to a valid request from a competent authority.
Iguataxi does not present GDPR “legitimate interests” as a general equivalent basis under Argentine law.
Required and optional data
To request a transfer, the minimum required data is the user's name, a contact channel, origin, destination, date and number of passengers. The form marks other details needed to reply through the selected channel and size the service—such as time and luggage—as required.
Nationality, flight number, special luggage, operating assistance and notes are optional unless the specific transfer makes a detail indispensable. If the absence of a detail prevents proper service, Iguataxi will explain this when requesting it.
Drivers and other recipients
Iguataxi may coordinate a service through associated drivers, independent carriers or collaborating companies. Only data needed to carry out the relevant transfer will be disclosed.
Data disclosed to drivers or carriers must be used solely to manage that service. This Policy does not claim that data protection or international transfer agreements exist unless they have been documented.
Operating data that may be disclosed
- name
- contact telephone
- origin, destination and hotel or accommodation
- date and time
- passenger and luggage counts
- flight number
- relevant assistance or operating instructions
Technology providers
Formspree
Forms are submitted to the Formspree endpoint configured on the site. Formspree processes and transmits the fields so Iguataxi can receive the request. The repository contains no first-party database for these forms, but that does not remove Iguataxi's responsibility or the processing Formspree performs in its infrastructure.
Google Tag Manager
GTM manages the site's tags. The audited public container activates Google Analytics and Conversion Linker; it contains no Google Ads tag. GTM is not downloaded until the user enables analytics or advertising.
Google Analytics 4
With analytics consent, GA4 measures page views, session statistics, source/campaign, browser, device, approximate location and WhatsApp or booking events. The detected property is G-8QHBG6MWQC.
Google Ads
The audited public container contains no AW tag and activates no Google Ads conversion measurement or remarketing. The advertising preference separately updates the Consent Mode ad_storage and ad_user_data signals; ad_personalization remains denied.
Google Maps
The contact-page map remains blocked until the user chooses to load it. When “View map” is pressed, the browser connects to Google and may disclose technical data such as IP, device and referrer page.
WhatsApp / Meta
WhatsApp processes certain information under its own policies and terms. When a user sends data to Iguataxi through WhatsApp, Iguataxi also processes the content and contact data to reply, quote, book, coordinate and provide the service.
Google email
The official email address uses the gmail.com domain. Google may process technical data and the content of messages sent to that account under its own policies and terms.
International transfers
Some processing may involve sending data abroad or making it accessible outside Argentina. The verified operation involves Formspree—with infrastructure it reports in the United States—Google and Meta/WhatsApp, which operate globally, and potentially drivers or carriers located in Brazil or Paraguay.
Sharing a name, telephone, hotel, origin, destination or time with a driver in another country is an international transfer even if it occurs solely to provide the transfer.
Iguataxi does not assume that the United States, Brazil or Paraguay are adequate jurisdictions, or that European frameworks automatically satisfy Argentine requirements. Transfers must be limited to necessary data and supported by a valid exception, safeguard or mechanism under section 12 of Law 25,326, Decree 1558/2001 and complementary AAIP rules.
This Policy does not claim that contractual clauses with providers or carriers exist unless documentary evidence has been verified.
Data retention
Data is retained only as long as needed for each purpose and for additional periods reasonably required to comply with law, exercise rights, defend claims or preserve contractual evidence.
Enquiries without a booking
They will be deleted or dissociated when no longer needed, within a reasonable period appropriate to the enquiry and channels used.
Bookings and contractual evidence
Only necessary data will be kept for a reasonable period linked to performance, contractual responsibilities and the defence of rights; no blanket five- or ten-year term applies to all data.
Withdrawal and cancellation requests
Sufficient evidence of the request, code, timestamp and handling will be retained for the period reasonably required to demonstrate the response and address claims.
Analytics and advertising
The local preference lasts no more than 180 days. GA4's internal retention depends on an external setting not visible in the repository. Because the current container has no Google Ads tag, no nonexistent or unverified Ads retention period is stated.
Security and confidentiality
Iguataxi adopts reasonable technical and organisational measures proportionate to the nature of the data. The code verifies HTTPS connections for the site and forms, data minimisation, prior blocking of non-essential tags and voluntary loading of Google Maps.
Absolute security is not possible and Iguataxi does not claim that every provider holds particular certifications. If a security incident occurs, Iguataxi will take the containment, assessment and communication measures required by applicable law.
Data relating to minors
A booking must be made by an adult. Where a transfer includes a minor, Iguataxi will process only the minimum data supplied by their parent, guardian or responsible adult that is necessary for safety and service delivery.
Iguataxi does not request unnecessary data about minors or import age rules from other regimes as a basis under Argentine law.
Rights under Argentine law
Under Law 25,326 and its implementing rules, data subjects may:
- request access and learn what data is processed, its source, purpose and recipients
- request correction or updating of inaccurate or incomplete data
- request deletion where legally appropriate
- require confidentiality and use consistent with the stated purpose
- withdraw consent for future processing where consent is the applicable basis
- exercise any other right recognised by current rules
Time limits
An access request must be answered within 10 calendar days of a formal request. Any required rectification, updating or deletion must be carried out within 5 business days of the claim.
Access may be exercised free of charge at intervals of no less than six months, unless the person demonstrates a legitimate reason under section 14(3) of Law 25,326.
Additional rights where the GDPR applies
The EU General Data Protection Regulation does not automatically apply because a passenger is European or visits Argentina. It applies additionally only where the specific processing falls within its territorial scope.
In that event, Iguataxi will identify the legal basis required by the GDPR and the person may exercise, as applicable, rights to object, restrict processing, data portability, withdraw consent and any other rights under that regime, in addition to rights under Argentine law.
How to exercise rights
The data subject or their representative may write to the official email address, stating the right they wish to exercise, the details needed to identify their relationship with Iguataxi and a response channel. Iguataxi may request reasonable proof of identity to avoid disclosing or changing another person's data.
No special wording is required. We recommend retaining proof of submission and receipt.
- Controller: Alejandro Manuel Vera — Iguataxi
- Rights email: iguataxi@gmail.com
Changes and version
This Policy may be updated to reflect legal, technical or operating changes. The current version and date will be published on this page.
Where a change introduces a new purpose or processing that requires consent, Iguataxi will request it where appropriate. Continued browsing will not be treated as automatic acceptance of an update.
- Version
- 2026.08
- Last updated
- August 20, 2026