1. Who processes your Personal Data?
2. What Personal Data do we collect about you?
3. For what purposes do we process your Personal Data?
4. Who are the recipients of your Personal Data?
5. How long do we keep your Personal Data?
6. What rights can you exercise regarding the processing of your Personal Data?
7. How do you exercise your rights?
8. How do we protect your Personal Data?
10. Changes to this Privacy Policy
Goldcar Spain, S.L., (or "Goldcar") whose registered office Crtra. Valencia N-332, Km.115, Edif. Goldcar, Postal Code 03550, Sant Joan D´Alacant, Alicante, Spain is the "Data Controller" of your Personal Data collected and processed via this website, our mobile applications, or our rental agencies in order to offer you mobility solutions.
The terms "Goldcar", "we", "us" or "our" that we use in this policy refer to Goldcar Spain, S.L.In accordance with the applicable regulations on the protection of personal data, Goldcar Spain, S.L., SA is the "Data Controller".
Goldcar Spain, S.L. is a member of the Europcar Mobility Group. The term "our Group" refers to Europcar Mobility Group.
When you communicate Personal Data to us or when we collect Personal Data about you, we undertake to use it in accordance with this Policy.
As a provider of mobility solutions, we collect and process various categories of Personal Data in connection with this website and our mobile applications and in order to provide you with our products and services.
By Personal Data, we mean not only data that identifies you directly, but also data that identifies you indirectly.
The categories of Personal Data that we collect in the context of our services and the use of our website and our mobile applications include the following:
- Your identification data: surname, first name, email address, telephone number, postal address, date of birth, account identifier.
- If applicable, identification data of additional driver(s): surname, first name, email address, telephone number and postal address.
- Your driver's license and that of any additional driver(s).
- Payment data: account numbers, card numbers, etc.
- Financial data: your order forms, your customer invoices etc.
- As the case may be, data relating to traffic violations.
- Information about your flight in the event that the pickup location of your vehicle is an airport.
- Information on your vehicle reservation, in particular to feed the loyalty programs of which you would be a member.
- Data relating to your navigation on our website or our mobile applications.
- Data relating to your satisfaction surveys or from your interactions on our dedicated social media pages.
- Voice, audiovisual and electronic data: recordings of your communications by email, chat or telephone with our customer service department.
- Information collected through our Connected Vehicle (if the vehicle that you rent is a connected vehicle): vehicle status, damage or accident information, vehicle performance data, operational and diagnostic data, mileage information, acceleration and braking speeds, fuel consumption and fuel levels, tire pressure, odometer readings, vehicle location and other vehicle information. For any information regarding the data processing of Goldcar's connected vehicles, please consult the dedicated Privacy Policy.
- Data related to cookies and other similar technologies. For information on the use of cookies, please consult our policy.
We collect most of your personal data directly from you, but we may receive data from third parties, including the competent authorities in charge of managing fines for traffic violations.
We collect and process your Personal Data for various purposes and on the following legal bases:
| Purposes of the processing | Legal basis of the processing |
| The creation and management of your customer account. | This processing activity is based on the acceptance of the terms and conditions of use of our website or our mobile applications. |
| The management of your reservation and rental contract, in particular for: - Confirming, modifying or cancelling your reservation. - To communicate with you regarding your reservation and rental (for example, to provide you with information about your reservation and rental, to send you reminder notifications before you return your vehicle, to answer your questions or suggestions). - Manage your rental. - Manage your payment and invoices. - Manage the collection of amounts due (including subsequent costs specified in the rental services contract such as toll charges, fines for traffic violations, or compensation for damage to the vehicle). - Managing claims. - Purchase and manage insurance for your Vehicle. | These processing activities are necessary for the execution of the rental services contract that you enter into with us. You can choose to register your credit card for your subsequent payments. |
| The management of commercial documents (customer invoices, purchase orders, certain electronically concluded contracts). | This processing activity is based on our legal obligations, in particular related to the general companies obligation to keep the documentation related to their activities set forth in article 30 of Spanish Commercial Code. |
| The checking of your driver's license. This validation can be carried out (i) manually by our customer service department or (ii) using a facial recognition device. | (i) This processing is necessary for the performance of the rental services contract that you enter into with us. (ii) The use of the facial recognition solution is based on your consent. |
| Fight against credit card fraud. | This processing is based on our legitimate interest in protecting ourselves against credit card fraud. |
| Verifying that you are not recorded on a Sanction List (namely any list of designated individuals as issued and amended from time to time by: (a) the U.S. government, including OFAC’s list of Specially Designated Nationals and Blocked Persons (or "SDNs") and lists maintained by the U.S. Department of State; (b) the United Nations Security Council, (c) the European Union and any Member State (including the EU’s consolidated list of persons subject to EU financial sanctions); and (d) the United Kingdom (including the consolidated list of financial sanctions targets issued by the UK’s Office of Financial Sanctions Implementation ("OFSI")) | This processing is based on our legal obligation to comply with above mentioned laws and regulations and based on our "legitimate interest" in ensuring that it and its subsidiaries are compliant with the International sanction regime, as applying this regime is part of the applicable requirements to trade with some foreign countries. |
| Conducting satisfaction surveys to improve your experience with our products/services. | This processing is based on our legitimate interest to have a better knowledge of its customers needs and to improve its services and customer service. |
| Chatting in real time on our website. | This processing is based on our legitimate interest in answering users questions about our products and services. |
| Conducting business development and marketing activities, including: i- Sending emails and SMS notifications about special offers and promotions. ii- Recording your rental history to suggest our products and services to you when you search for new bookings or to send you special offers and benefits. iii- Managing your loyalty program and membership card. iv- Organizing contests and prize draws. v - Sending emails about a booking we have not completed or about the status of your booking requests. vi - The management and updating of the prospect database. | Our commercial and marketing activities, i.e. the sending of commercial messages to promote our products and services (i to iv) are subject to your consent. In the event that you are already our customer, you may receive commercial messages for products and services similar to those we have already provided to you. The sending of these messages will be based on our legitimate interest in communicating about our products and services. Processing activities included in category (v) are based on our legitimate interest to simplify and speed up the reservation process for our customers. Processing activities included in category (vi) are based on our legitimate interest to manage our prospect database. |
| The management of fines for traffic offences, in particular for: - Transfer to agencies or authorities in charge of Infringements the identity of the main driver mentioned on the rental contract. - To comply with the fine collection procedure to which we may be subject. - The provision of fine management services. | This processing activity is based on our legal obligations, in particular Royal Decree 6/2015 approving Act Law on Traffic Circulation of Motor Vehicles and Road Safety. This processing will be based on the customer's request for the provision of the service (contractual relationship). |
| The management and maintenance of account blocking for clients with contractual risks based on: - Payment incidents resulting in legal proceedings. - Traffic accidents or repeated damage or incivilities towards our employees. - The use of our vehicles in violation of the general rental conditions. | This processing activity is based on our legitimate interest, in particular our interest in asserting our rights, to prevent risks and fraud related to the execution of your contract, to prevent and manage abusive behaviors towards our employees. In this respect, we seek to maintain a fair balance between the need to process your Personal Data and respect for your rights and freedoms, in particular the protection of privacy. If you appear on this list of at-risk clients, your reservation request will be rejected. You may challenge this decision by sending an email to the following address: dpo@goldcar.com. |
| Video surveillance on our premises. | This processing activity is based on our legitimate interest in ensuring the safety of property and persons in our stations, by a deterrent effect or in such a way as to be able to identify the perpetrators of damage, theft or aggression. |
| Analysis of navigation data on our website and mobile applications. | This processing is based on our legitimate interest in improving our products and services. |
If necessary, your personal data may be communicated:
a) To our employees, our authorized representatives, other companies of our Group and our franchise network, our agents and intermediaries mandated to provide you with our products and services.
b) To our subcontractors, in particular our IT service providers for hosting, maintenance or development purposes, who assist us in providing you with our products and services or collection agencies which help us recover unpaid orders. These may be entities that are members of our Group or external service providers.
c) Advertising agencies, marketing agencies, social networking and digital agencies to help us carry out advertising, marketing and sales campaigns and to analyze the effectiveness of these campaigns.
d) Concerning the information necessary for the processing of fines, to the agency or authorities in charge of infringements or to its foreign counterparts in the case of fines committed abroad as well as to Gesthispania or entities managing fine payment services, where the customer requests the service.
e) Concerning the information necessary for the processing of toll charges, to toll concessions.
f) To our partners or those of our Group, in particular to enable you to collect loyalty points when you are a member of their program.
We may also disclose your personal data in accordance with applicable laws and regulations to the relevant authorities.
Use of Facebook
All Facebook features and services available on our website or applications are governed by the Facebook Privacy Policy, which you can read for more information about your rights and settings options.
By using one of our website/applications, you can:
- Use Facebook social plug-ins, such as "like" or "share" our content on the Facebook Platform.
- Accept cookies from our website or applications (also known as "Facebook Pixel"), which will help us understand your activities, including information about your device, how you use our services, the purchases you make, and the ads you view, whether or not you have a Facebook account or are logged in to Facebook.
When you use these Facebook features, we collect data that helps us to:
- Display ads that may be of interest to you on Facebook (or Instagram, Messenger or any other Facebook service).
- Measure and analyze the effectiveness of our website, applications and advertisements.
In order to provide you with our products and services, we may use service providers located outside the European Union (in particular in the United States, New Zealand, Australia, Morocco, Israel, Ecuador and Turkey). In the event that the vehicle is booked abroad, data transfers will be carried out in the country in question in order to provide you with our mobility solutions.
Depending on the assumptions, some recipients may be located in countries recognized by the European Commission as providing an adequate level of protection of personal data or in countries that have not been recognized by the European Commission as providing such a level of protection. In any case, we have implemented appropriate protection measures to protect your personal data in accordance with data protection regulations.
For more information about the countries to which your personal data may be transferred, their level of data protection and the potential protective measures implemented by Goldcar, click here.
Your personal data are kept for different periods of time, depending on the purposes of the processing concerned:
| Purposes of the processing | Data retention periods |
| The creation and management of your customer account. | For the duration of the business relationship and 5 years after the end of the business relationship. |
| The processing of your reservation and rental contract, in particular for: - Confirming, modifying or cancelling your reservation. - Communicate with you regarding your reservation and rental (for example, to provide you with information about your reservation and rental, to send you reminder notifications before you return your vehicle, to answer your questions or suggestions). - Manage your rental. - Manage your payment and invoices. - Manage the collection of sums due (including subsequent costs such as fines for traffic violations, or compensation for damage to the vehicle). - Managing claims. - Taking out and managing your vehicle insurance. | For 5 years after the end of the rental contract. |
| Monitoring of connected vehicles. | The data are kept for a period of 12 months. In the event of damage or offences against property, investigation of damage and accidents caused to the vehicle, personal data may be retained until the cases are resolved (including until the closure of any legal or judicial proceedings). |
| The management of commercial documents (customer invoices, purchase orders, certain electronically concluded contracts). | 10 years from the end of the financial year or from the delivery or service. |
| Prevention of credit card fraud. | 13 months after the effective payment. |
| Verifying that you are not recorded on a Sanction List. | For 5 years from the collection of your data. |
| The improvement of our products and services according to your preferences by carrying out satisfaction surveys. | 3 years from our last contact. |
| Chatting in real time on our website. | 3 years from our last commercial contact. |
| Conducting business development and marketing activities, including: - Sending emails and SMS notifications about special offers and promotions. - Recording your rental history to suggest products/services to you when searching for new bookings or to send you special offers and benefits. - Sending emails relating to a booking that we have not completed or reporting the status of your booking requests. - Managing your loyalty program and membership card. - Organizing contests and prize draws. - The management and updating of the prospect database. | - If you are a Goldcar customer, 3 years from the end of the business relationship with EC. - If you are not a Goldcar customer, 3 years from the collection of your personal data OR from the last time you requested information from us. |
| The management of fines, in particular for: - Transfer to the National Agency for the Automated Processing of Infractions the identity of the main driver mentioned on the rental contract. - Provision of payment management services. | For the time necessary to identify the driver responsible for committing the offence giving rise to the contravention, which should not exceed two years from receipt of the contravention. However, relevant information may be retained for a longer period of time from receipt of the ticket, as part of an interim record keeping policy. In the case of requesting the service, the data will be kept for the time necessary for the provision of the services, and for the period of limitation of the corresponding legal actions. |
| The management and maintenance of personal data of the a list of customers representing certain risks to our business and/or staff, with regard to: - Payment incidents resulting in legal proceedings. - Traffic accidents or repeated damage. - Inappropriate or abusive conduct towards our employees or our customers. - The use of our vehicles in violation of the general rental conditions. | 3 or 5 years from the date of creation or modification of the last rental and depending on the nature of the event. |
| Video surveillance on our premises. | A few days up to a month. |
| Analysis of navigation data on our website and mobile applications. | Goldcar cookies policy. |
Within the limits and conditions allowed by the regulations in force, you can:
- Access to your Personal Data and obtain further information on the characteristics of the processing we carry out.
- Have your Personal Data corrected, updated and deleted, it being specified that deletion can only be carried out when (i) the data is no longer necessary in relation to the purposes for which it was processed, (ii) you withdraw your consent and there is no other legal basis for the processing, (iii) you object to the processing of your personal data and there is no compelling legitimate reason for the processing (iv) it has been established that your personal data has been processed unlawfully, (v) the personal data must be deleted in order to comply with one of our legal obligations.
- Object to the processing of your Personal Data based on legitimate interest, which you can check by taking a look the table shown in the part “For what purposes do we process your Personal Data” and in particular the column "Legal basis of the processing".
- You object to the processing of your Personal Data for commercial prospecting purposes.
- Receive the personal data you have provided us with or request us to pass them on to a third party when the processing of your personal data (i) has been carried out by automated means and (ii) is based on your consent or on the execution of a contract binding us.
- Request the limitation of the processing of your Personal Data, which means that we will not be able to use your Personal Data for a defined period of time. You can exercise this right when:
a) You dispute the accuracy of your personal data for a period of time that allows us to verify the accuracy of your personal data.
b) The processing of personal data is unlawful and you object to the deletion of your personal data and instead demand that its use be restricted.
c) We no longer need your Personal Data but they are still required for the establishment, exercise or defense of legal claims.
d) You object to the processing for reasons relating to your particular situation, while we are checking whether the legitimate reasons pursued by Goldcar Spain, S.L. take precedence over your own.
- Withdrawing your consent to treatment based on your consent.
- Submit a complaint to a Supervisory Authority. In Spain, You have the right to lodge a complaint with the Agencia Española de Protección de Datos at the address C/Jorge Juan 6, 28001 Madrid, Spain or at the website https://www.aepd.es/esand
If you would like to know more about the provisions of this privacy policy or to contact our Data Protection Officer, you can also write to us at the following address:
Goldcar Spain, S.L. Edif. Goldcar Ctra. N-332 Km.115, 03550 Sant Joan d’Alacant, or by email to dpo@goldcar.com
To exercise your rights, you must prove your identity by clearly indicating your surname, first names, driver ID and any useful information enabling us to identify you (such as the place and date of your last vehicle rental). You must also give us the e-mail address or the physical address to which you would like the reply to be sent to you.
Goldcar Spain, S.L. is committed to protecting the information it collects through this website.
In particular, Goldcar uses appropriate physical, technical and organizational security measures to prevent unauthorized or unlawful processing, accidental loss of or destruction of or damage to your personal data.
Goldcar's systems are configured with data encryption, or scrambling technologies, and industry-standard firewalls. When you send personal information to a Goldcar website over the Internet, your data is protected by "Transport Layer Security" (TLS) technology to ensure safe transmission.
Any credit card transaction you make through Goldcar websites is done through our secure server technology. This technology notably:
a) Assures your browser that your data is being sent to the correct computer server, and that the server is secure.
b) Encodes the data, so that it cannot be read by anyone other than the secure server.
c) Checks the data being transferred to ensure it has not been altered.
On this site you will find various links to the websites of our partners (e.g. for travel services). We would like to draw your attention to the fact that this Privacy Policy does not apply to the processing of your Personal Data by our partners or other third parties, which may occur when you visit their websites, and that we are not responsible for such data processing. If you would like information on how these partners and third parties process your personal data, we invite you to consult their Privacy Policies.
This Privacy Policy was last updated on 01/05/2024.