Privacy policy

Controller

FREEDOMRENT, S.L.

Tax ID (CIF)

B25875139

Address

C/ Zeus 4, Esc. 7, Pta. A, 29649 Mijas (Málaga), España

E-mail

mail@freedomrent.es

We are not required to appoint a data protection officer. For any question about your data, write to the e-mail above.

• When you browse: our hosting provider logs technical data (IP address, browser, page visited, date and time) to serve the site and protect it against attacks. We use no analytics or advertising cookies: see the cookie policy.
• When you check dates and prices: the calendar and the price calculation ask for no personal data.
• If you write to us on WhatsApp or by e-mail: your name, phone number or e-mail and what you tell us, to reply and prepare your booking.
• If you send a booking request on the website: e-mail, phone, language, dates, number of travellers and the main driver’s details (name, identity document, nationality, date of birth, address and driving licence). To prevent abuse we store an encrypted fingerprint (hash) of your IP address, not the address itself.
• If you rent: the agreement and all drivers’ details, payments, the handover and return report with photos of the vehicle and the vehicle’s location data (see the section on the GPS tracker).
• Card payments: card details are handled directly by our payment provider; we never see or store them. The deposit is pre-authorised on the main driver’s credit card at pick-up.

We do not ask for data about the other travellers, only how many there are.

• Performance of a contract and steps you ask us to take before it (Art. 6(1)(b) GDPR): answering your questions, handling the booking request, the agreement, payments, pick-up and return.
• Legal obligations (Art. 6(1)(c) GDPR): keeping records and reporting data to the Spanish Ministry of the Interior (Royal Decree 933/2021, SES.Hospedajes platform), invoicing and accounting, and identifying the driver to traffic authorities in case of a fine.
• Legitimate interest (Art. 6(1)(f) GDPR): website security and fraud prevention, protecting the vehicle with the GPS tracker its insurer requires, and defending against possible claims.

The website automatically checks the driver’s age and how long they have held their licence, because the insurance requires it; if the requirements are not met, booking is not possible. You can write to us to have a person review it. We do no profiling and send no advertising.

The insurer requires the motorhome to carry a tracker connected to an alarm centre to cover theft. It records position, date and time, speed, ignition status and technical alarms; it records no sound or images.

We only check the location if an alarm goes off, if the return is more than 3 hours late without notice, if the vehicle leaves the authorised territory, after an accident or an assistance request, or in case of theft or a well-founded suspicion of misappropriation. Every check is logged. Annex I to the agreement, which you sign at pick-up, explains it in detail.

• Public authorities where the law requires it: Ministry of the Interior (SES.Hospedajes), the police, the Directorate-General for Traffic (DGT) and the Tax Agency.
• The vehicle’s insurer (Occident GCO, S.A.U.) and the roadside assistance service (RACE), if there is an incident or you ask for assistance.
• Our tax and accounting advisers.
• If you booked through a platform (for example Yescapa), that platform, which is responsible for the data you gave it.
• Providers processing data on our behalf under contracts that oblige them to protect it: web hosting (Vercel Inc.), database (Neon, servers in the EU), e-mail delivery (Resend), anti-bot protection of the form (Cloudflare), card payments (Stripe), GPS tracker and alarm centre (Targa Telematics España, S.L.U.) and our e-mail provider.
• If you choose to write to us on WhatsApp, WhatsApp (Meta) processes those messages under its own terms.

We never sell your data or share it for marketing.

Some providers are US companies or may access data from outside the European Economic Area. In those cases the transfer relies on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.

• Booking requests whose e-mail was not confirmed: deleted automatically one day after the confirmation link expires.
• Requests declined or expired without payment or agreement: deleted automatically after 30 days.
• WhatsApp or e-mail enquiries that do not lead to a booking: as long as needed to answer them, one year at most.
• Contact and driver details of a rental: 3 years after the return, as Royal Decree 933/2021 requires; then they are deleted and only the name, dates and amounts remain for the accounts.
• Invoices and accounting records, including the signed agreement: 6 years, as commercial and tax law require.
• GPS location data: 30 days after the agreement ends, unless there is an incident (accident, theft or claim); then until it is resolved.
• Technical server logs: a few days.

You can ask us for access to your data, to rectify or erase it, object to its processing, restrict it, or receive it in a portable format, by writing to mail@freedomrent.es. We will reply within one month; if we have reasonable doubts about your identity, we may ask you to prove it.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the authority in your country.

The website works only over an encrypted connection (HTTPS). Confirmation and payment links are signed and expire, access to data is restricted and we store no card details.

If we change it, we will publish the new version here with its date. If the change is significant and you have a booking with us, we will tell you by e-mail.