Privacy Policy

The entity deciding how and why your personal data is used is Ibiza Luxury Car Rental, operating ibizaluxurycarrental.es for clients renting luxury and sports cars in Ibiza. We do not publish a separate company registration number or office address on this site; the fastest way to reach us for any data protection matter is [email protected].

We collect data directly from you, and a limited amount automatically as you browse.

• Enquiry and airport delivery form: name, email, phone number (optional), car of interest (optional), pick-up and drop-off dates, flight number on the airport delivery form, and your free-text message.
• The same forms also send us the page URL and referrer, so we know which part of the site you were viewing.
• Email, phone and WhatsApp: whatever you tell us when you contact us directly to ask about availability or confirm a booking.
• WhatsApp click record: when you tap a WhatsApp button, we log the page URL, referrer, language and the prefilled message text before WhatsApp opens; the conversation that follows happens inside WhatsApp itself.
• Server logs from our hosting: IP address, date and time, page requested and browser, kept briefly for security purposes.
• Browser storage: a note that you closed the cookie banner, a temporary record of the car you clicked so the enquiry form can be prefilled, and anonymous visitor and session identifiers used only to measure visits; none of these contain your name or contact details.

• Replying to your enquiry and preparing a written quote: pre-contractual steps taken at your request, under Article 6(1)(b) GDPR.
• Managing a confirmed rental, including delivery logistics and chauffeur arrangements: performance of the rental contract.
• Checking driving licence and ID at handover: performance of the contract and compliance with the legal obligations that apply to vehicle rental.
• Keeping server logs and WhatsApp click records for a short period: our legitimate interest in keeping the site and our booking channels secure and working correctly.
• Issuing invoices and keeping booking records: legal obligations under Spanish tax and accounting rules.
• Measuring how visitors use the site, without identifying you individually: our legitimate interest in understanding which pages and channels work, balanced against your right to privacy.

We do not use personal data for automated decision-making, we do not sell it, and we do not send marketing emails unless you ask us to.

A quote or written confirmation does not require identity documents. Once a rental is confirmed, we ask to see your driving licence and ID or passport at the moment the car is handed over. This is necessary to verify that you are legally entitled to drive the vehicle, to complete the rental agreement, and to meet the legal obligations that apply to car rental in Spain.

Personal data is only shared where it is needed to deliver the service you asked for or to run the site.

• Our own team, who handle enquiries and bookings through an internal messaging tool linked to our booking system.
• The captain or driver assigned to deliver the car or provide the chauffeur service for a confirmed booking, limited to the details needed to carry it out.
• Our hosting provider, which stores the static website and the booking system data on our behalf.
• Google, which serves the web fonts used on the site and receives the visitor's IP address for that purpose.
• jsDelivr, which serves the phone-number input library used in our enquiry forms.
• WhatsApp and its operator, Meta, if you choose to start a conversation through the WhatsApp button; that exchange is governed by WhatsApp's own privacy policy, not this one.

None of these recipients is permitted to use your data for their own marketing.

Google and Meta may process data on servers located outside the European Economic Area. Where this happens, it takes place under the safeguards those providers offer for international transfers, such as the European Commission's standard contractual clauses. We do not otherwise transfer personal data outside the EEA.

• Enquiries that do not turn into a booking: deleted after 36 months.
• Confirmed booking records, including the details needed for invoicing: kept for as long as Spanish tax and accounting rules require.
• Server logs: kept briefly, only as long as needed for security review.
• The visit-measurement identifier in local storage: expires automatically 30 days after your last visit, and you can clear it from your browser at any time.
• The session entry that remembers which car you clicked: removed when you close the tab or send the form.

Enquiry and booking data is stored in our booking system rather than sent loose by email, access to it is limited to our team and the driver assigned to a given booking, and our server logs are used solely to detect and respond to security issues. The site itself is a static website; it does not run the kind of database that is typically targeted for payment fraud, since we never collect card details online.

You may ask us, at [email protected], to:

• access the personal data we hold about you;
• correct it if it is inaccurate;
• delete it, where we are not required to keep it for tax or legal reasons;
• restrict or object to certain uses, including the legitimate-interest uses described above;
• receive the data you gave us in a portable format;
• withdraw consent at any time, for anything we process on that basis.

We reply within one month and may ask for proof of identity before acting on a request, to make sure we are not disclosing data to the wrong person.

If you believe your data has not been handled properly, you can lodge a complaint with the Agencia Española de Protección de Datos (AEPD) at www.aepd.es.

Our service is aimed at adults who hold a valid driving licence, and we do not knowingly collect data from children. This policy may be updated to reflect changes to our forms, tools or legal obligations; the version published on ibizaluxurycarrental.es is the one that applies.