This is a translation for your convenience. In case of discrepancy, the Spanish version prevails.
At SDS Group we take care of your personal data. This policy explains what data we process, for what purposes and what your rights are, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and Ley Orgánica 3/2018 de Protección de Datos Personales y garantía de los derechos digitales (Spanish Organic Law on the Protection of Personal Data and Guarantee of Digital Rights, LOPDGDD).
1. Data controller
- Controller: Dmytro Ivanchenko
- Tax ID (NIF/CIF): Z2866572H
- Registered address: La Punta II/25, 03185 Torrevieja (Alicante)
- Email: sdsgroup95@gmail.com
- Telephone: +34 614 70 34 90
2. What data we process
- When you contact us via WhatsApp, Instagram, Telegram, telephone or email: your name, telephone number or username, and the content of your message (dates, location, type of vehicle, etc.).
- When you contract a service: identification data (DNI, NIE or passport), driving licence, address, contact and payment details and, where applicable, vehicle data.
- When you browse the website: technical data needed to display the page (IP address, browser) and, only if you accept them, browsing data collected by analytics or advertising cookies (see the Cookie Policy).
The form on the contact page does not send your data to our server. It only prepares a message that you choose to send from your own WhatsApp or email account.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Responding to your enquiries and sending you quotes | Your consent and the taking of pre-contractual steps at your request (Art. 6(1)(a) and 6(1)(b) GDPR) |
| Managing bookings, rental contracts, purchase and sale, and associated services | Performance of a contract (Art. 6(1)(b) GDPR) |
| Complying with legal obligations: tax, accounting and record-keeping obligations, including those laid down for vehicle rental (Real Decreto 933/2021, Royal Decree 933/2021), and handling procedures before the DGT (Dirección General de Tráfico, Spanish Directorate-General for Traffic) | Legal obligation (Art. 6(1)(c) GDPR) |
| Measuring the use of the website and the effectiveness of our advertising | Your consent via the cookie panel (Art. 6(1)(a) GDPR) |
| Website security and fraud prevention | Legitimate interest (Art. 6(1)(f) GDPR) |
We do not make automated decisions or carry out profiling that produces legal effects concerning you.
4. Recipients
We do not sell or transfer your data. We only disclose it where necessary:
- Public authorities, where required by law (for example, the Ministerio del Interior (Ministry of the Interior), the Agencia Tributaria (Spanish Tax Agency) or the DGT).
- Insurance companies, for vehicle cover and claims handling.
- Providers that supply services to us (web hosting, email), under a data processing agreement.
- Messaging platforms (WhatsApp, Instagram and Facebook, of Meta Platforms Ireland Ltd.; Telegram), when you choose to contact us through them. Their use is also governed by their own privacy policies.
- Google Ireland Ltd. (Google Analytics) and Meta Platforms Ireland Ltd. (Meta Pixel), only if you accept the corresponding cookies.
Some of these providers may transfer data outside the European Economic Area. In that case, they do so with appropriate safeguards, such as the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses.
5. Retention
We keep your data for as long as our relationship with you lasts and, thereafter, for the periods required by law (for example, 6 years for commercial and accounting records, and the limitation periods for any potential liabilities). If you only sent us an enquiry, we delete the data once it is no longer needed, and no later than 12 months after the last contact.
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw your consent at any time. To do so, write to us at sdsgroup95@gmail.com stating which right you wish to exercise. We may ask you to verify your identity.
If you consider that we have not handled your request properly, you may lodge a complaint with the Agencia Española de Protección de Datos (Spanish Data Protection Agency) (www.aepd.es).
7. Security
We apply appropriate technical and organisational measures to protect your data against loss, unauthorised access or misuse.
8. Minors
Our services are intended for adults. For rentals, a valid driving licence is also required.
9. Changes to this policy
We may update this policy to reflect changes in the law or in our services. We will always publish the current version on this page, together with the date of its last update.