Privacy Policy

1. Introduction and Scope

Welcome to carbarcelon.com. This Privacy Policy explains how we collect, process, store, and protect your personal data when you use our vehicle rental booking services in Barcelona, Catalonia, Spain. It applies to all visitors, registered users, and customers who interact with our website or contact us directly.

This policy is issued by the operator of carbarcelon.com, a car rental intermediary service based in Barcelona, Catalonia, Spain. We act as a data controller for the personal information you provide when searching for, booking, or enquiring about vehicle hire through our platform.

This policy complies with Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, or GDPR), as well as Spain's Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD). If you have questions about how your data is handled, please contact us using the details provided in Section 10.

2. Data Controller Contact Details

For all matters relating to your personal data, including requests to exercise your rights, you may contact us at:

carbarcelon.com
Barcelona, Catalonia, Spain
Email: [email protected]
Phone: +34 614 877 351

We aim to respond to all data-related enquiries within 30 calendar days of receipt. For complex requests, we may extend this period by a further two months, in which case we will notify you of the extension and the reason within the initial 30-day window.

3. Information We Collect

When you use carbarcelon.com to search for or book vehicle rental in Barcelona, we may collect the following categories of personal data depending on how you interact with our services.

3.1 Personal Identification Data

This includes your full name, date of birth, email address, telephone number, residential address, and, where required for booking verification purposes, your driver's licence number and issuing country. Driver's licence information may be required to complete a booking with our rental partners operating at Barcelona El Prat Airport or city centre locations.

3.2 Booking and Transaction Data

We collect details related to your vehicle rental booking, including pickup and drop-off locations in Barcelona or surrounding areas such as the Port of Barcelona, Passeig de Gracia, or the Eixample district, rental dates, vehicle category selected, add-ons requested (such as child seats or GPS navigation), and any special requirements you communicate to us.

3.3 Payment Information

We do not directly store full payment card details. Payment transactions are processed by trusted third-party payment processors who comply with the Payment Card Industry Data Security Standard (PCI DSS). We may retain transaction reference numbers, the last four digits of a payment card, and payment status records for the purpose of accounting, dispute resolution, and legal compliance.

3.4 Browsing and Technical Data

When you visit carbarcelon.com, we automatically collect certain technical information including your IP address, browser type and version, operating system, referring URL, pages viewed, time spent on site, and device identifiers. This data is collected through cookies and similar tracking technologies as described further in our Cookie Policy.

3.5 Location Data

With your consent, we may collect approximate location data to help suggest relevant pickup points near your current position in Barcelona, whether that is near the Sagrada Familia, the Gothic Quarter, or along the Diagonal avenue. You may withdraw this consent at any time through your browser or device settings.

3.6 Communications Data

If you contact us by email, telephone, or through any contact form, we retain records of that correspondence including the content of your messages, attachments, and metadata such as timestamps and contact details.

4. How We Use Your Data

We process your personal data only where we have a lawful basis to do so. The following describes our main processing purposes and the legal basis for each.

4.1 Processing Vehicle Rental Bookings

The primary purpose for which we collect your data is to fulfil your vehicle rental booking request. This includes confirming availability, issuing booking vouchers, communicating pickup instructions for Barcelona airport or city locations, and passing necessary details to our rental supply partners. The legal basis is the performance of a contract (GDPR Article 6(1)(b)).

4.2 Customer Support and Communication

We use your contact details to respond to queries about your booking, resolve complaints, provide assistance during your rental period in and around Barcelona, and send booking confirmations or changes. The legal basis is the performance of a contract and our legitimate interest in providing quality customer service.

4.3 Service Improvement and Analytics

We analyse aggregated browsing and transaction data to understand how users interact with carbarcelon.com, identify popular vehicle categories and rental routes, and improve the overall booking experience. Our legal basis for this processing is our legitimate interest (GDPR Article 6(1)(f)).

4.4 Marketing Communications

With your explicit consent, we may send you promotional emails or notifications about vehicle rental deals, seasonal offers, or destination guides relating to Barcelona and Catalonia. You may opt out of marketing communications at any time by clicking the unsubscribe link in any email or by contacting us directly. The legal basis is consent (GDPR Article 6(1)(a)).

4.5 Legal Compliance and Fraud Prevention

We may process your data to comply with applicable Spanish and EU legal obligations, including tax record-keeping requirements, and to detect, investigate, and prevent fraudulent bookings or other unlawful activity. The legal basis is compliance with a legal obligation (GDPR Article 6(1)(c)) and our legitimate interest in protecting our business and customers.

5. Sharing Your Data with Third Parties

We do not sell your personal data. We share your information only with trusted third parties where it is necessary to deliver our services or comply with legal obligations.

5.1 Rental Supply Partners

To fulfil your booking, we share relevant personal and booking data with the vehicle rental operator responsible for your reservation. These partners operate at locations including Barcelona El Prat Airport (IATA: BCN), central Barcelona, and other pickup points across Catalonia.

5.2 Payment Processors

Payment data is processed by PCI DSS-compliant third-party payment service providers. These processors act as independent data controllers for the payment transaction itself and are subject to their own privacy policies.

5.3 Insurance Providers

Where insurance products form part of your booking, relevant personal data may be shared with the insurance provider underwriting your cover. This is limited to the data strictly necessary for policy issuance and claims processing.

5.4 Technology and Analytics Providers

We use third-party technology platforms for website hosting, analytics, email delivery, and booking engine functionality. These providers process data on our behalf under data processing agreements and are not permitted to use your data for their own purposes.

5.5 Legal Authorities

We may disclose personal data to Spanish law enforcement authorities, courts, or regulatory bodies where required to do so by law, court order, or to protect the rights and safety of our customers or the public.

6. International Data Transfers

Where your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or reliance on an adequacy decision. We do not transfer personal data to countries without adequate data protection standards without first implementing these protections.

7. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including for the satisfaction of legal, accounting, and reporting requirements.

Booking records and associated personal data are typically retained for a period of six years from the date of the rental transaction, in accordance with Spanish commercial and tax law obligations. Communications data is retained for up to three years from the date of the last interaction. Marketing consent records are retained until you withdraw consent or for a maximum of three years from the date consent was given, whichever comes first. Browsing and technical data collected via cookies is retained in accordance with the periods disclosed in our Cookie Policy.

After the applicable retention period has elapsed, we will securely delete or anonymise your personal data so that it can no longer be associated with you.

8. Your Rights Under GDPR and Spanish Data Protection Law

As a data subject under the GDPR and Spain's LOPDGDD, you have the following rights regarding your personal data.

8.1 Right of Access

You have the right to request a copy of the personal data we hold about you, along with information about how it is used and with whom it is shared.

8.2 Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.

8.3 Right to Erasure

Also known as the "right to be forgotten", you may request that we delete your personal data where there is no longer a legitimate or legal basis for us to retain it.

8.4 Right to Restriction of Processing

You may request that we limit the processing of your personal data in certain circumstances, for example while a dispute about accuracy is being resolved.

8.5 Right to Data Portability

Where processing is based on your consent or a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

8.6 Right to Object

You have the right to object to processing of your personal data based on our legitimate interests, including for direct marketing purposes. Where you object to marketing, we will cease processing immediately.

8.7 Rights Related to Automated Decision-Making

We do not currently make any automated decisions (including profiling) that produce legal or similarly significant effects concerning you.

8.8 How to Exercise Your Rights

To exercise any of the above rights, please contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request. If you are not satisfied with our response, you have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Espanola de Proteccion de Datos - AEPD) at www.aepd.es.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include encrypted data transmission using TLS protocols, access controls limiting data access to authorised personnel only, regular security assessments of our systems and third-party suppliers, and staff training on data protection obligations.

While we take reasonable precautions to secure your data, no method of transmission over the internet is completely secure. We encourage you to use strong, unique passwords and to contact us immediately if you suspect any unauthorised use of your account or personal information.

10. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to operate core functionality, analyse usage, and (with your consent) deliver relevant marketing. A separate Cookie Policy is available on our website and provides full details of the cookies we use, their purpose, and how you can manage your preferences. By continuing to use carbarcelon.com, you acknowledge our use of cookies as described in that policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or business practices. When we make material changes, we will update the effective date shown at the top of this page and, where appropriate, notify you by email or by displaying a prominent notice on our website. We encourage you to review this policy periodically.

12. Contact Us About Privacy

If you have questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please get in touch with us directly.

carbarcelon.com - Privacy Enquiries
Barcelona, Catalonia, Spain
Email: [email protected]
Phone: +34 614 877 351

This Privacy Policy was last reviewed and updated in 2025.