Privacy Policy
In accordance with the GDPR (EU) 2016/679 and LOPDGDD (Spain)
1. Data controller
Vantero Tec SL
C/. Fluvia 1
07009 Palma
Represented by: Thorsten Empt
Data protection contact:
Email: reservas@mallorca-mietwagen.com
Phone: +34634346699
2. Principles of processing
We only process personal data to the extent necessary to provide our services. Processing is always carried out in compliance with the European General Data Protection Regulation (GDPR) and the Spanish Data Protection Act (LOPDGDD).
Personal data is only processed with your consent or on the basis of a statutory permission.
3. Which data we collect
When booking a rental vehicle
- First and last name
- Date of birth
- Address (street, postal code, city, country)
- Email address
- Phone number
- Driver's licence number
- Flight number / hotel (if provided)
- Payment information (card data is processed exclusively by the payment provider)
When using the website
- IP address (anonymised)
- Browser type and version
- Date and time of access
- Pages visited
4. Purpose and legal basis
We process your data for the following purposes:
- Contract performance (Art. 6(1)(b) GDPR): rental contract execution, handover, invoicing, deposit handling
- Legal obligation (Art. 6(1)(c) GDPR): compliance with tax and commercial retention obligations
- Legitimate interest (Art. 6(1)(f) GDPR): protection of our fleet (GPS tracking upon contract breach), fraud prevention, service improvement
- Consent (Art. 6(1)(a) GDPR): sending information and offers (only with your explicit consent)
5. Disclosure to third parties
Your data is only shared if required for contract performance or legally obligated:
- Payment provider: for credit-card transactions
- Insurance companies: in case of damage, for claim handling
- Authorities: upon order of competent authorities (e.g. traffic offences)
- Email provider (SMTP): for sending booking confirmations and invoices
Transfers to third countries outside the EU do not take place unless the provider offers appropriate safeguards under Art. 46 GDPR.
6. Storage duration
Your personal data is stored only as long as necessary for the respective processing purposes:
- Contract data: for the rental period and beyond in accordance with statutory retention periods (in Spain generally 5 years after contract end)
- Invoice data: 5 years under Spanish tax law
- GPS data: deleted after rental end and deposit settlement
- Server log files: maximum 30 days
7. Your rights
Under GDPR you have the following rights:
- Access (Art. 15): request information about stored data
- Rectification (Art. 16): correct inaccurate data
- Erasure (Art. 17): request deletion unless retention obligations apply
- Restriction (Art. 18): request limitation of processing
- Data portability (Art. 20): receive your data in a machine-readable format
- Objection (Art. 21): object to processing
- Withdrawal of consent (Art. 7(3)): consent may be revoked at any time
To exercise your rights: reservas@mallorca-mietwagen.com
Right to lodge a complaint: you may lodge a complaint with the competent supervisory authority. In Spain this is the Agencia Española de Protección de Datos (AEPD): www.aepd.es
8. Cookies
Our website uses cookies. Detailed information is available in our cookie policy.
9. Analytics and external services
Payment processing
Credit-card payments are processed via an external payment provider (Stripe). Your card data is processed exclusively by the provider and is not stored on our servers.
10. SSL encryption
For security reasons this site uses SSL encryption (visible by "https://" in the address bar). Any data you send is encrypted and cannot be read by third parties.
11. GPS tracking of rental vehicles
All rental vehicles are equipped with GPS technology. Location and speed data is recorded only under the following conditions:
- The vehicle is not returned within the agreed rental period
- The vehicle is used outside the contractually agreed zone (Mallorca) or in port zones
The recording serves exclusively to protect our fleet and contractual rights. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
The data may be disclosed to competent authorities upon order.
12. Changes to this policy
We reserve the right to adapt this privacy policy to comply with current legal requirements or to reflect changes to our services. The updated version applies to your next visit.
Last updated: May 2026