Privacy Policy
Last updated: May 24, 2026
This Privacy Policy describes our policies and procedures on the collection, use and disclosure of your information when you use our Service in compliance with Spanish and European Union data protection laws, including the General Data Protection Regulation (GDPR) and the Spanish Organic Law on Data Protection (LOPDGDD).
This notice explains what data we collect through iberiacampervans.com, why we use it, who may receive it, how long we keep it, and which rights you have under the GDPR and Spanish LOPDGDD.
Data Controller Information
The data controller responsible for your personal data is:
- Company Name: Iberia Campervans
- Tax ID: B75577858
- Address: Aviador Zorita 49, 6C, 28020 Madrid, Spain
- Email: contact@iberiacampervans.com
- Phone: +34658781812
- Data Protection Officer: Iberia Campervans has not appointed a Data Protection Officer because it is not currently required for our ordinary processing activities. Privacy requests can be sent to contact@iberiacampervans.com.
Types of Data Collected
We collect only the personal data needed to operate the campervan rental website, respond to enquiries, process bookings and payments, maintain security, and understand website performance:
- Contact information: full name, email address, phone number, and any details you include in forms, emails, WhatsApp messages, or customer support requests.
- Booking information: rental dates, selected vehicle, pickup and return details, price, reservation status, customer notes, and related rental records.
- Payment information: order/payment identifiers, payment status, amount, billing information where supplied, and payment provider response data. Full card details are handled by payment providers and should not be stored by us.
- Driver and identity eligibility data: age confirmation, driving licence details, and other information needed to verify eligibility for rental, insurance, or contract purposes.
- Communication data: emails, booking confirmations, owner notifications, support messages, and records of interactions with us.
- Usage and technical data: IP address, browser/device data, language preference, approximate country, pages visited, event data, diagnostics, and cookies or similar identifiers.
Legal Basis for Processing
We process your personal data for the following purposes and legal bases:
- Booking and rental management: to answer availability requests, create reservations, prepare rental documents, and perform the rental contract. Legal basis: contract performance or steps before entering into a contract.
- Payments and deposits: to calculate prices, process payments or card holds, record payment status, and manage refunds or disputes. Legal basis: contract performance and legal obligations for accounting/tax records.
- Customer communication and support: to respond to enquiries, send booking emails, resolve issues, and maintain service records. Legal basis: contract performance and legitimate interest in customer service.
- Legal, accounting, and compliance: to keep business records, comply with Spanish tax/commercial obligations, handle claims, and cooperate with lawful requests. Legal basis: legal obligation and legitimate interest.
- Website analytics and performance: to understand site traffic, diagnose errors, improve booking flows, and measure content performance. Legal basis: consent where required for non-essential cookies; otherwise legitimate interest for strictly necessary security/diagnostic processing.
- Marketing and advertising measurement: to measure campaigns, understand conversions, and send marketing communications where applicable. Legal basis: consent.
- Security and fraud prevention: to protect the website, booking process, payments, and business operations from misuse or fraud. Legal basis: legitimate interest and, where applicable, legal obligation.
Tracking Technologies and Cookies
The website may use cookies, pixels, tags, local storage, and similar technologies for language preferences, security, analytics, and marketing measurement.
The codebase includes Google Tag Manager, Google Analytics, Meta/Facebook Pixel, and Vercel Analytics. These tools may collect usage data such as pages visited, approximate location derived from IP address, device/browser information, events, and advertising identifiers where available.
Non-essential analytics and marketing technologies should only run where legally valid consent has been given. You can withdraw consent by clearing your browser cookies or contacting us, and we will keep the website's consent mechanism under review.
Recipients and Service Providers
We share personal data only where necessary to provide the service, operate the website, comply with the law, or protect our rights. Relevant recipients and processor categories include:
- Hosting and deployment providers, including Vercel and infrastructure/CDN providers used to deliver the website.
- Backend and database providers used by the project, including Strapi and Supabase services where configured.
- Email and SMTP providers used to send booking confirmations, owner notifications, and support messages.
- Payment providers and banking/acquiring services used to process payments, deposits, refunds, and payment status checks.
- Analytics providers, including Google Analytics, Google Tag Manager, and Vercel Analytics.
- Marketing and advertising providers, including Meta/Facebook Pixel where enabled.
- Public authorities, courts, insurers, professional advisers, or law enforcement where required by law or necessary to protect legal rights.
International Data Transfers
Some service providers, including analytics, marketing, hosting, email, or payment providers, may process data outside the European Economic Area. Where this happens, we rely on adequacy decisions, Standard Contractual Clauses, provider data processing terms, or other safeguards required by GDPR.
Whether Providing Data Is Required
Contact, booking, payment, and identity/driver eligibility data may be necessary to answer your request, prepare or perform a rental contract, take payment, meet tax/accounting duties, and comply with rental or insurance requirements. If you do not provide required data, we may be unable to confirm a booking, provide the vehicle, process payment, or respond to your enquiry.
Data Retention
We retain your personal data only for as long as necessary for the purposes outlined in this Privacy Policy and in compliance with Spanish data protection laws:
- Booking Data: 7 years (Spanish commercial law requirement)
- Payment Records: 6 years (Spanish tax law)
- Communication Data: 3 years or until resolved
- Marketing Data: Until consent is withdrawn
- Usage Data: 2 years for analytics purposes
After these periods, we securely delete or anonymize your data unless required to retain it longer by Spanish law.
Your Rights under Spanish and EU Law
Under the GDPR and Spanish LOPDGDD, you have the following rights regarding your personal data:
- Right of Access: Request information about your personal data we process
- Right to Rectification: Correct inaccurate personal data
- Right to Erasure: Request deletion of your personal data
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a structured format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent for marketing communications and non-essential cookies where processing is based on consent
- Right to Lodge a Complaint: Contact the Spanish Data Protection Authority (AEPD) if you believe your data protection rights have been infringed
To exercise these rights, contact us at: contact@iberiacampervans.com
You also have the right to file a complaint with the Spanish Data Protection Authority (AEPD): www.aepd.es
Automated Decision-Making
We do not use your personal data for decisions based solely on automated processing that produce legal or similarly significant effects. Payment providers and fraud-prevention services may run automated checks under their own systems and policies.
Age Restriction
IMPORTANT: IMPORTANT: Our services are exclusively available to individuals who are 18 years of age or older. We do not provide campervan rental services to anyone under the age of 18. By using our Service, you confirm that you are at least 18 years old.
Links to Other Websites
Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.
We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
Changes to this Privacy Policy
We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.
We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the 'Last updated' date at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page
Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, you can contact us:
- By email: contact@iberiacampervans.com
- Privacy Policy Page: https://www.iberiacampervans.com/legal/privacy_policy
- For complaints: Spanish Data Protection Authority (AEPD): www.aepd.es