Privacy Policy

At Autos Castelló (TOMEUETEN, S.L.) we take the privacy of your data seriously. This Privacy Policy explains what personal data we collect, for what purpose, on what legal basis we process it and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).

1. Data controller

2. What personal data do we process?

We process the data you voluntarily provide through the booking request form or other contact channels:

• Identifying and contact data: full name, phone and email address.
• Data relating to the request: pick-up and return dates, pick-up location, vehicle type, number of travellers and any additional notes you choose to include.
• Browsing data: basic technical information necessary for the operation of the site (see Cookie Policy).

We do not request special categories of data. Please do not include sensitive data in the notes field. If you provide third-party data, you guarantee that you have their consent to do so.

3. For what purpose do we process your data?

• To handle and manage your requests for information, quotes and vehicle bookings.
• To contact you to confirm the availability, terms and details of your rental.
• To maintain the commercial relationship and respond to any enquiries you raise.
• To comply with applicable legal obligations.

4. Legal basis

• Consent of the data subject (Art. 6.1.a GDPR), given by ticking the acceptance box and submitting the form.
• Application of pre-contractual measures and, where applicable, performance of a rental contract (Art. 6.1.b GDPR).
• Compliance with legal obligations applicable to the company (Art. 6.1.c GDPR).

5. How long do we keep your data?

We will keep your data for as long as necessary to handle your request and, where applicable, for as long as the commercial relationship is maintained. Once it ends, we will keep it duly blocked for the periods legally required to address possible liabilities, after which it will be deleted.

6. Who do we share your data with?

As a general rule, we do not share your data with third parties, except where legally required. Some providers who supply us with services (such as website hosting or communication services) may access the data as data processors, with whom the contracts required by Article 28 of the GDPR are signed.

7. International data transfers

The Website loads the Google Fonts typeface from Google LLC servers, which may involve the transfer of your IP address to that provider, with servers potentially located outside the European Economic Area. These transfers are covered by the appropriate safeguards provided for by the GDPR (standard contractual clauses and/or applicable adequacy frameworks).

8. What are your rights?

You may exercise the following rights over your personal data at any time:

• Access: to know what data of yours we are processing.
• Rectification: to correct inaccurate or incomplete data.
• Erasure: to request the deletion of your data.
• Objection: to object to the processing of your data.
• Restriction: to request the restriction of processing in the cases provided for by law.
• Portability: to receive your data in a structured, commonly used format.
• Withdraw consent given, without affecting the lawfulness of prior processing.

To exercise these rights, write to us at reservas@autoscastello.es or at the postal address indicated in section 1, identifying yourself appropriately. Likewise, if you believe that the processing does not comply with the regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

9. Data security

We apply appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in order to protect your data against destruction, loss, alteration or unauthorised access.

10. Changes to this policy

We may update this Privacy Policy to adapt it to legislative developments or changes in our services. We will publish any changes on this same page, indicating the date of the last update.