Privacy policy

Who is responsible

Operator / Responsable

Enzodrive S.L. — trading as Enzomobility

NIF

B26851139

Business contact address / Dirección de contacto

Calle Hegel 6, Málaga, Spain

Legal, privacy and complaints contact

Legal@enzomobility.com

Information we use

We use your name, email, international phone number, chosen car, dates and local times, collection and return locations, delivery addresses when relevant, coverage, extras, payment choice, discount code and driver-eligibility confirmations. We keep booking references, quotes, payment references, cancellation information and an operational history. We do not receive your full card number through the reservation form; online card payments are handled by Stripe.

Technical information includes server access logs and a hashed network identifier used to prevent abusive requests. Essential browser session storage remembers your selected trip and, during payment recovery, the booking details needed to restore checkout. Optional visit-attribution storage is used only after your cookie choice.

Purposes and legal bases

We process booking information to take steps you request before a contract and to perform your rental contract, including availability, payment, collection, returns and transactional messages (GDPR Article 6(1)(b)). Applicable tax, accounting, rental-registration or other legal duties use Article 6(1)(c). Website security and handling legal claims rely on our legitimate interests, with regard to your rights (Article 6(1)(f)). Optional analytics relies on consent; refusing it does not prevent booking.

Providing the necessary booking fields is required to make a reservation. Rental messages are service communications, not a marketing subscription. We do not treat acceptance of rental terms as consent to advertising.

Who receives information

Authorised rental staff use your booking and contact details. WordPress/WooCommerce and hosting services support the website; Stripe handles online payments; Twilio Messaging handles booking SMS; Twilio SendGrid handles confirmation email when configured. A referral code can associate a reservation with a partner for commission accounting. Partners are not given the private customer booking-management link by this system.

Information may also be disclosed to advisers or public authorities when required by applicable law. Provider processing may take place outside the European Economic Area. The applicable transfer mechanism and provider arrangement must be considered for the actual service used; contact us for details or a copy of relevant safeguards. Provider information: Stripe privacy and Twilio privacy.

How long information is kept

Booking and payment records are retained for the rental and the applicable tax, accounting, rental-registration, dispute or legal-claim periods. Cancellation does not automatically erase legally required records. Records should then be deleted or anonymised when no lawful reason remains. We can explain the period or criteria applicable to your particular records at the contact above.

The cookie choice is stored for up to 180 days. Trip and checkout recovery data are stored in browser session storage; see the cookie policy for individual storage purposes and durations.

Your rights

You may request access, correction, deletion, restriction or portability where applicable, object to legitimate-interest processing, and withdraw consent without affecting earlier lawful processing. Email Legal@enzomobility.com with enough information to identify your request; do not send full card details. We may need to verify identity. We normally respond within one month; a legally permitted extension is explained if needed.

You may complain to the Spanish Data Protection Agency (AEPD) or the competent authority where you live or work in the EEA. Booking availability is checked automatically, but we do not use that check to make a profiling decision about your personal characteristics.

Security and private booking links

The site uses HTTPS. Staff operations require authentication. Treat your booking-management token and private link as confidential. We do not include that bearer token in the manager’s notification or the customer SMS. Contact us if your booking link may have been disclosed.

Cookies and updates

Read our cookie policy and use Cookie settings in the footer to change optional storage choices. This policy is updated when the service or processing changes.