Data Protection

Last updated: April 17, 2026

1. Our Commitment to Your Privacy

At Costablancars, we are fully committed to protecting and respecting your personal data. This Data Protection page explains how we collect, use, store and protect the information you share with us when using our website www.costablancars.com or when contacting us directly.

We comply with all applicable data protection legislation, including Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD).

2. Who Is Responsible for Your Data?

• Company name: Costablancars
• Address: Calle Isla Tabarca, 10, 03189 Orihuela (Alicante), Spain
• Email: info@costablancars.com
• Phone: +34 610 31 82 05
• Website: www.costablancars.com

3. What Data We Collect and Why

We only collect data that is necessary for the purposes described below:

• Name, email and phone number — to respond to your enquiries and keep you informed about vehicles or services you have expressed interest in.
• Vehicle information — details of any car you wish to buy, sell, part-exchange or have valued.
• Communication records — messages sent via our contact form, WhatsApp, phone or email, so we can provide an accurate and consistent service.
• Browsing data — anonymous technical data collected via cookies to help us improve our website (see our Cookie Policy for full details).

We never collect sensitive data (such as financial account details, health information or national identity numbers) through our website.

4. How We Use Your Data

Your data is used exclusively for the following purposes:

• Responding to vehicle enquiries and providing tailored offers.
• Processing vehicle purchases, sales or part-exchanges.
• Managing vehicle transfer paperwork with the DGT (Spanish Traffic Authority).
• Sending promotional communications, only with your explicit prior consent.
• Complying with legal, accounting and tax obligations.
• Improving our website and user experience through anonymous analytics.

5. Legal Basis for Processing

• Pre-contractual and contractual relations — when you enquire about or purchase a vehicle.
• Legal obligation — when we are required to process data by Spanish law (e.g. DGT vehicle transfers, tax records).
• Legitimate interest — to improve our services and respond to customer queries.
• Consent — for marketing communications, which you may withdraw at any time.

6. How Long We Keep Your Data

• Enquiry and contact data: retained for up to 1 year from the last communication, unless an ongoing commercial relationship exists.
• Purchase and sale records: retained for up to 6 years in accordance with Spanish commercial and tax legislation.
• Marketing data: retained until you withdraw your consent.

Once the retention period expires, your data is securely deleted or anonymised.

7. Who Has Access to Your Data?

We do not sell, rent or trade your personal data. Your data may only be shared with:

• DGT (Dirección General de Tráfico) — when required to complete vehicle transfer procedures under Spanish law.
• Trusted third-party providers — such as our accountant or IT support, who are contractually bound to protect your data and use it only for the agreed purpose.
• Legal and regulatory authorities — when required by law or court order.

All third parties who handle your data on our behalf are subject to a Data Processing Agreement in accordance with GDPR Article 28.

8. International Transfers

We do not transfer your personal data outside the European Economic Area (EEA). In the unlikely event this becomes necessary, we will ensure all required safeguards are in place as required by GDPR Chapter V, and you will be informed accordingly.

9. How We Protect Your Data

We take data security seriously. The measures we have in place include:

• Restricted access to personal data — only authorised personnel may access it.
• Secure communication channels for handling customer information.
• Regular review of our data handling procedures.
• No storage of sensitive financial information (e.g. card numbers) on our systems.

10. Your Rights

Under GDPR and LOPDGDD, you are entitled to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct any inaccurate or incomplete data.
• Erasure — request that we delete your data when it is no longer necessary.
• Restriction — ask us to limit the processing of your data in certain circumstances.
• Portability — receive your data in a structured, commonly used, machine-readable format.
• Objection — oppose processing based on legitimate interest or for direct marketing purposes.
• Withdraw consent — at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@costablancars.com. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es.

11. Minors

Our website and services are not intended for individuals under the age of 14. We do not knowingly collect personal data from minors. If we become aware that a minor has submitted personal data, we will delete it immediately.

12. Changes to This Page

We may update this Data Protection page from time to time to reflect changes in legislation or our internal practices. Any changes will be published here with a revised date. We recommend checking this page periodically.

13. Contact

• Email: info@costablancars.com
• Phone: +34 610 31 82 05
• Address: Calle Isla Tabarca, 10, 03189 Orihuela (Alicante), Spain
• Website: www.costablancars.com