1. Data controller
BaoVans Rental Services SLU
CIF/NIF: B75363176
Address: C/ Villarroel, 58 – P.0, Local, 08011, Barcelona, Spain
2. What data we process
- Identification data such as name and surname.
- Contact details such as email address, phone number and postal address.
- Booking and rental data, including dates, chosen vehicle, extras and operational communications.
- Billing and payment-related information required to process charges and invoices.
- Customer support and incident data arising from emails, phone calls, WhatsApp messages or forms.
- Technical and browsing data, such as IP address, device or browser information, logs and cookie-related data.
3. Purposes and legal bases
3.1 Bookings and contracted services
We process personal data to manage requests, availability, bookings, contracts, pick-up and return operations, modifications and communications linked to the rental service.
Legal basis: performance of a contract or pre-contractual measures at the data subject’s request.
3.2 Payments, deposits and billing
We process the necessary data to charge bookings, manage deposits, refunds, billing, claims and related financial operations.
Legal basis: performance of the contract and compliance with legal obligations.
3.3 Accounting, tax and legal compliance
We process data to comply with tax, accounting, commercial, consumer and administrative obligations.
Legal basis: compliance with a legal obligation.
3.4 Customer service and incident management
We process data to answer questions, handle claims, manage support requests, incidents and reservation-related communications.
Legal basis: performance of the contract and, where applicable, legitimate interest.
3.5 Marketing communications
We may send promotions or commercial communications where consent has been given or where permitted by law in relation to similar services, always allowing an easy opt-out.
Legal basis: consent and/or legitimate interest where applicable.
4. Payment information
Payments may be processed through a secure external payment gateway (virtual POS / TPV or equivalent provider).
- We do not store full card data on our own servers.
- The payment provider applies the security standards required by the financial and card networks.
5. Recipients of data
Your personal data may be shared with or accessed by:
- Payment providers and financial institutions.
- Hosting, booking software, maintenance, support and IT providers.
- Insurance, roadside assistance or service providers where necessary for the contracted service.
- Public administrations, courts, law enforcement or competent authorities where legally required.
6. International data transfers
Some technology providers may involve international data transfers outside the EEA. In such cases, the applicable safeguards required by data protection law will be used, such as adequacy decisions, standard contractual clauses or equivalent mechanisms.
7. Data retention
- For as long as there is a contractual or commercial relationship.
- For the periods required by tax, accounting, consumer or legal regulations.
- Until consent is withdrawn or deletion is requested, when legally possible.
8. User rights
You may exercise, where applicable, the following rights:
- Access
- Rectification
- Erasure
- Objection
- Restriction of processing
- Portability
- Withdrawal of consent
To exercise your rights, contact:
Email: info@baovans.com
Postal address: C/ Villarroel, 58 – P.0, Local, 08011, Barcelona, Spain
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you consider that your data has been processed unlawfully.
9. Security
We have implemented reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. The website uses secure HTTPS connections and works with providers that apply recognised security standards.
10. Cookies
Further information about cookies and similar technologies is available in our Cookie Policy.
11. Changes to this policy
We may update this Privacy Policy to reflect legal, technical or operational changes. The current version will always be available on this page.