Privacy Policy

Yeyecar S.L. ("we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with the General Data Protection Regulation (GDPR - EU 2016/679) and Spanish Organic Law 3/2018 on Data Protection (LOPDGDD).

1. Data Controller

2. Personal Data We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, date of birth
• Identity Verification: Driving license details, ID/passport information, photographs
• Payment Information: Credit/debit card details (processed securely through our payment provider)
• Rental Information: Booking details, rental history, vehicle preferences

2.2 Information Collected Automatically

• Device Information: Device type, operating system, unique device identifiers
• Location Data: GPS location when using the app to find and unlock vehicles
• Usage Data: App interactions, features used, search history
• Vehicle Data: Unlock/lock events, trip start and end times

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

• Contract Performance: Processing necessary to provide car rental services (Art. 6(1)(b) GDPR)
• Legal Obligation: Compliance with Spanish traffic and tax laws (Art. 6(1)(c) GDPR)
• Legitimate Interest: Fraud prevention, service improvement, customer support (Art. 6(1)(f) GDPR)
• Consent: Marketing communications and optional features (Art. 6(1)(a) GDPR)

4. How We Use Your Data

We use your personal data to:

• Process and manage your bookings
• Verify your identity and driving eligibility
• Enable vehicle access through Bluetooth technology
• Process payments and prevent fraud
• Provide customer support
• Send transactional communications (booking confirmations, reminders)
• Improve our services and develop new features
• Comply with legal obligations (tax records, traffic violations)
• Send marketing communications (only with your consent, which can be withdrawn at any time)

5. Data Sharing and Disclosure

We may share your data with:

• Service Providers: Payment processors, identity verification services, cloud hosting providers (all under data processing agreements)
• Insurance Companies: In case of accidents or claims
• Law Enforcement: When required by Spanish law or court order
• Traffic Authorities: For traffic violations or penalties

We do not sell or rent your personal data to third parties.

6. Data Retention

We retain your personal data for as long as necessary to:

• Account Data: Duration of your account plus 6 years (Spanish tax requirements)
• Rental Records: 10 years (Spanish insurance and liability law)
• Payment Records: 6 years (Spanish tax law)
• Marketing Consent: Until you withdraw consent or 3 years of inactivity

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restriction: Limit how we process your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing or optional processing

To exercise these rights, contact us at +34 680 272 487. We will respond within one month as required by GDPR.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Secure Bluetooth communication for vehicle access
• Regular security audits and updates
• Access controls and authentication measures
• Employee training on data protection

9. International Data Transfers

Your data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure adequate protection through standard contractual clauses approved by the European Commission.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect data from children.

11. Right to Lodge a Complaint

If you believe we have not complied with data protection law, you have the right to lodge a complaint with:

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes through the app or email. Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

For questions about this Privacy Policy or your personal data: