Last updated: September 2026
This Privacy Policy explains how BVCAR Tenerife (“we”, “us” or “our”) collects, uses and protects personal information when you visit or use our website.
We respect your privacy and are committed to processing your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (GDPR).
1. Data Controller
The data controller responsible for the processing of personal data collected through this website is:
BVCAR Tenerife
For privacy-related questions or requests concerning your personal data, please contact us using the contact details provided on our website.
2. What personal data we collect
Depending on how you use the website, we may collect the following types of information:
- Contact information, such as your name, email address and telephone number, when you contact us or submit an enquiry.
- Booking or rental information, when you request or arrange a vehicle rental or related service.
- Technical information, such as IP address, browser type, device information, operating system and information about how you interact with our website.
- Website usage information, including pages visited, approximate location and information about your interaction with the website.
- Any other information that you voluntarily provide to us when contacting us or using our services.
We only request information that is reasonably necessary for the relevant purpose.
3. How we use your personal data
We may use personal data for the following purposes:
- to respond to enquiries and requests;
- to process and manage bookings or rental requests;
- to provide and administer our services;
- to communicate with you regarding your enquiry or booking;
- to maintain the security and proper operation of the website;
- to understand how visitors use our website and improve its content, functionality and performance;
- to comply with legal and regulatory obligations;
- to establish, exercise or defend legal claims where necessary.
We will not use your personal data for purposes that are incompatible with the purposes described in this Privacy Policy.
4. Legal basis for processing
Depending on the circumstances, we process personal data on one or more of the following legal bases:
- Performance of a contract — when processing is necessary to provide a service or manage a booking.
- Pre-contractual steps — when you contact us to request information or make an enquiry before entering into a contract.
- Legitimate interests — for purposes such as website security, fraud prevention, service improvement and the management of our business, where these interests are not overridden by your rights.
- Legal obligation — where processing is required by applicable law.
- Consent — where consent is required, for example for certain non-essential cookies or analytics technologies.
Where processing is based on consent, you may withdraw your consent at any time.
5. Analytics and cookies
We use cookies and similar technologies to operate the website, remember preferences, analyse website usage and, where applicable, support advertising or third-party services.
Our website may use Yandex Metrica and related technologies for analytics and website optimisation. These services may collect information about visitors’ interactions with the website, including technical and usage information.
For more information about the cookies used on this website and how to manage them, please see our Cookie Policy.
6. Sharing personal data with third parties
We may share personal data with trusted third-party service providers where this is necessary to operate our website or provide our services.
These may include providers of:
- website hosting and technical infrastructure;
- booking and vehicle rental systems;
- analytics and website optimisation services;
- communication and email services;
- payment services, where applicable;
- security and fraud-prevention services.
Third-party providers are only given access to information that is reasonably necessary for the relevant service.
Some third-party providers may process data independently under their own privacy policies. Where applicable, we recommend reviewing their privacy information.
7. International data transfers
Some service providers we use may process personal data outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we will take appropriate measures to ensure that the transfer is carried out in accordance with applicable data protection law, including the use of an adequacy decision or appropriate safeguards where required.
8. How long we keep personal data
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.
The retention period depends on the type of information and the reason for processing. For example, information relating to enquiries or bookings may be retained for as long as necessary to manage the relationship and to comply with applicable accounting, tax or legal obligations.
Analytics and technical information may be retained for periods determined by the relevant service provider and the applicable configuration.
When personal data is no longer required, it will be deleted or securely anonymised where appropriate.
9. Data security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
However, no method of transmission or storage over the Internet can be guaranteed to be completely secure.
10. Your data protection rights
Under applicable data protection law, you may have the right to:
- access your personal data;
- correct inaccurate or incomplete information;
- delete your personal data in certain circumstances;
- restrict the processing of your personal data;
- object to certain types of processing;
- receive your data in a portable format where applicable;
- withdraw consent where processing is based on consent.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your personal data has been processed unlawfully.
If you are located in Spain, the relevant supervisory authority is the Spanish Data Protection Agency (AEPD).
11. Children’s privacy
Our website is not specifically directed at children, and we do not knowingly collect personal data from children for purposes unrelated to providing our services.
12. Third-party websites
Our website may contain links to websites or services operated by third parties.
We are not responsible for the privacy practices, content or security of third-party websites. We recommend reviewing the privacy policies of those websites before providing them with personal information.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, the technologies we use or applicable legal requirements.
Any changes will be published on this page with a revised “Last updated” date.
14. Contact
If you have any questions about this Privacy Policy or would like to exercise your data protection rights, please contact us using the contact details available on our website.