Privacy Policy

1. Data Controller

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR), and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), we inform you that the data controller is:

2. Purpose of Data Processing

At Azul Cars, we process the personal data you provide for the following purposes:

• Vehicle rental management: Processing reservations, contracts, payments, invoicing, and delivery/return of vehicles.
• Customer relationship management: Responding to enquiries, managing your account, and providing customer support via email, phone, or WhatsApp.
• Marketing communications: Sending newsletters, promotional offers, and information about our services and those of our group companies (Bluebnc Yachting, Azul Stays, Balearic Blue, Isle of Mallorca), provided you have given your express consent.
• Legal compliance: Fulfilling legal obligations, including those related to traffic regulations (DGT), tax requirements, and anti-money laundering regulations.
• Website improvement: Analysing usage patterns to improve our website, services, and user experience.
• Concierge services: Managing personalised concierge requests, including restaurant reservations, activity bookings, and itinerary planning.

3. Legal Basis for Processing

The legal basis for processing your personal data is:

• Contract performance: Processing necessary for the performance of the vehicle rental contract (Article 6.1.b GDPR).
• Consent: For marketing communications and non-essential cookies (Article 6.1.a GDPR).
• Legitimate interest: For fraud prevention, security, and service improvement (Article 6.1.f GDPR).
• Legal obligation: For compliance with tax, traffic, and other regulatory requirements (Article 6.1.c GDPR).

4. Categories of Personal Data

We may collect and process the following categories of personal data:

• Identification data: Full name, date of birth, nationality, passport/ID number.
• Contact data: Email address, telephone number, postal address.
• Driving licence data: Licence number, issuing country, expiry date, licence category.
• Financial data: Credit/debit card details (processed securely via Stripe), billing address.
• Rental data: Booking references, rental dates, vehicle preferences, delivery/return locations.
• Communication data: Messages sent via contact forms, WhatsApp, email, or our AI concierge.
• Technical data: IP address, browser type, device information, cookies (see our Cookie Policy).

5. Data Retention

Your personal data will be retained for the following periods:

6. Data Recipients

Your personal data may be shared with the following categories of recipients:

• Group companies: Companies within the Azul Privé ecosystem (Bluebnc Yachting, Azul Stays, Balearic Blue, Isle of Mallorca) for cross-service coordination, only with your consent.
• Payment processors: Stripe, Inc. for secure payment processing.
• Insurance companies: For vehicle insurance and claims management.
• Public authorities: Dirección General de Tráfico (DGT), tax authorities, and law enforcement when legally required.
• Service providers: Email delivery (Resend), analytics, CRM (HubSpot), and cloud hosting providers, all bound by data processing agreements.

7. International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or the service provider is certified under an adequacy decision.

8. Your Rights

Under the GDPR and LOPDGDD, you have the following rights:

• Right of access: To obtain confirmation of whether your personal data is being processed and to access it.
• Right to rectification: To request the correction of inaccurate or incomplete data.
• Right to erasure: To request the deletion of your data when it is no longer necessary for the purposes for which it was collected.
• Right to restriction: To request the limitation of processing in certain circumstances.
• Right to data portability: To receive your data in a structured, commonly used, and machine-readable format.
• Right to object: To object to the processing of your data, including for direct marketing purposes.
• Right to withdraw consent: To withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at [email protected] or write to us at Carrer del Canal de Sant Jordi, 29, L3, 07610 Palma de Mallorca, Spain. We will respond within one month.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD) at www.aepd.es.

9. Security Measures

Azul Cars implements appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage. These measures include encryption of data in transit (TLS/SSL), secure payment processing via Stripe, access controls, and regular security reviews.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the updated policy on our website with a revised "Last updated" date.