Book now

Privacy policy

Last updated: 29/10/2026

At Si-Cars we protect your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights (LOPDGDD).

1. Data controller

2. What data we process

The data you give us in the booking form or by email and phone: first name and surname, email, phone numbers, flight numbers, dates and times, home address, address during your stay in Spain and comments. At vehicle delivery, also the driving licence and ID document details needed for the contract. We also process minimal technical data (IP address and technical cookies) for website security.

3. Purposes and legal basis

PurposeLegal basis
Handling your request, checking availability and confirming the bookingPre-contractual steps at your request (art. 6.1.b GDPR)
Formalising and performing the rental agreement, vehicle delivery and returnPerformance of a contract (art. 6.1.b GDPR)
Issuing invoices and meeting accounting, tax and traffic obligations (fines, driver identification)Legal obligations (art. 6.1.c GDPR)
Answering your questions and complaintsLegitimate interest and performance of the contract
Keeping the website secure and preventing fraudLegitimate interest (art. 6.1.f GDPR)
Website usage statistics (only if you accept analytics cookies)Consent (art. 6.1.a GDPR)

We do not make automated decisions or build profiles with your data. We do not send advertising without your consent.

4. Retention

Unconfirmed requests are kept for up to 12 months. Booking and contract data are kept for as long as the relationship lasts and then for the legal periods: 6 years for accounting and commercial records (art. 30 of the Spanish Commercial Code) and 4 years for tax purposes, plus the limitation periods for possible liabilities.

5. Recipients

Your data is not sold or passed to third parties, except where required by law (Spanish Tax Agency, Directorate-General for Traffic, courts and police) or when necessary for the service (the vehicle's insurer in case of an accident). Our web hosting, email and accounting providers access data as processors, under contract and with safeguards under art. 28 GDPR. We do not transfer data outside the European Economic Area.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to info@si-cars.com and stating which right you are exercising. If you believe your request was not handled correctly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security

We apply appropriate technical and organisational measures: encrypted connection (HTTPS), password-protected access to the management panel, and access to data limited to the staff who need it.

8. Minors

The service is aimed at adults with a driving licence. We do not knowingly process data of children under 14.

9. Changes

We may update this policy to reflect legal or service changes. The version in force is always the one published on this page.