Privacy Policy

Last updated: March 2026

1. Who We Are

RentaCarBestPrice.com ("we", "us", "our") is a car rental comparison and booking platform operated by Absoluttweb. We act as the data controller for the personal data collected through this website.

Contact: privacy@propertyinvestmentspain.com

2. What Data We Collect

We collect the following personal data when you use our service:

  • Account data — email address (used for login via magic link), full name, phone number.
  • Identity data — passport or ID number, required by rental companies at vehicle collection.
  • Address data — home address and accommodation address in Spain.
  • Booking data — rental dates, locations, car selection, price, payment amounts, booking reference.
  • Payment data — processed securely by Stripe. We store only a reference ID; we never store card numbers.
  • Technical data — IP address, browser type, pages visited. Collected automatically for security and analytics.

3. Why We Collect It (Legal Basis)

We process your data based on the following legal grounds under GDPR:

  • Contract fulfilment (Art. 6(1)(b)) — to create and manage your bookings, process payments, and communicate booking confirmations.
  • Legitimate interest (Art. 6(1)(f)) — to improve our service, prevent fraud, and provide customer support.
  • Consent (Art. 6(1)(a)) — for optional features such as saving personal data to your profile for faster future bookings.

4. How We Use Your Data

  • Create and manage car rental bookings on your behalf.
  • Send booking confirmations and vouchers via email.
  • Share necessary details (name, passport, contact) with the rental company for vehicle collection.
  • Process deposit payments through Stripe.
  • Pre-fill booking forms when you choose to save data to your profile.
  • Provide customer support and resolve disputes.

5. Who We Share Data With

  • Rental companies — name, passport/ID, contact details, and booking information needed to fulfil the rental contract.
  • Stripe — payment processing. Subject to Stripe's Privacy Policy.
  • Supabase — database and authentication hosting (EU region). Subject to Supabase's Privacy Policy.
  • Resend — transactional email delivery. Subject to Resend's Privacy Policy.

We do not sell your personal data to third parties.

6. Data Retention

  • Account data — retained for as long as your account is active. You may delete your account at any time.
  • Booking data — retained for 3 years after the rental end date for legal and accounting purposes.
  • Passport/ID numbers — retained on your profile only if you opt in to "Save to profile". You can remove this data at any time from your account settings. For completed bookings, passport data is retained for 90 days after the rental end date, then automatically deleted.
  • Payment references — retained as long as required by tax and accounting regulations (typically 7 years).

7. Your Rights

Under GDPR you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — correct inaccurate data via your profile page or by contacting us.
  • Erasure — request deletion of your personal data ("right to be forgotten"). You can delete individual fields (passport, addresses) directly from your profile, or request full account deletion.
  • Portability — receive your data in a machine-readable format.
  • Restriction — request that we limit processing of your data.
  • Objection — object to processing based on legitimate interest.

To exercise any of these rights, contact us at privacy@propertyinvestmentspain.com. We will respond within 30 days.

8. Cookies

We use essential cookies required for authentication and session management. These cannot be disabled as they are necessary for the service to function. We do not use advertising or tracking cookies.

9. Security

We protect your data through:

  • Encryption in transit (TLS/HTTPS) and at rest.
  • Row-level security ensuring users can only access their own data.
  • Secure authentication via magic link (no passwords stored).
  • PCI-compliant payment processing through Stripe (we never handle card data).

10. Children

Our service is not directed at individuals under 18 years of age. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on the website. The "Last updated" date at the top reflects the most recent revision.

12. Contact & Complaints

For questions or complaints about this policy or our data practices:

You also have the right to lodge a complaint with your local data protection authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).