1. Data Controller

In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), users are informed that the personal data collected through the website will be processed by:

• Responsible: DAVIMA MOTORS, S.L.
• CIF: B12401659
• Adress: Carretera N-340, Km 1052, 12500 Vinaròs (Castellón), Spain
• Website: https://www.davima.net
• Privacy email: privacidad@davima.net

2. Purpose of data processing

Personal data collected through the website may be processed for the following purposes:

• Attention to queries
  • Manage information requests made by users through contact forms or through the means of communication available on the web.
• Reservation management
  • Manage vehicle bookings made through the website, including confirmation, tracking and communication with the customer.
• Online contract and payment management
  • Manage payments made through the website in relation to the services offered by DAVIMA.
• Vehicle rental management
  • Manage the provision of the vehicle rental service, including verifying the identity of the client and the documentation necessary to formalize the contract.
• Personnel selection processes
  • Manage resumes submitted by candidates through the website or by email to participate in current or future selection processes.
• Website improvement
  • Analyze website usage and improve the browsing experience through analytical tools and cookies.

3. Legal basis for the processing

The legal bases that legitimize the processing of personal data are:

• Consent of the interested party, when sending contact forms or resumes through the website.

• Execution of a contract, in the case of vehicle reservations and rentals.

• Compliance with legal obligations, especially in tax, accounting or security matters.

• Legitimate interest, to ensure the security of the website and improve its operation.

4. Categories of data processed

The personal data that may be collected includes:

• name and surname

• email address

• phone number

• postal address

• information needed to make reservations

• data required to process payments

• information contained in curriculum vitae

• Driver identification details (ID card, passport or driving license)

• Website browsing data (IP address, cookies, etc.)

5. Data retention

Personal data will be kept for the time necessary to fulfill the purposes for which it was collected and to comply with the corresponding legal obligations.

In particular:

• Consultations: for the time necessary to address the request and, where applicable, for the period necessary to manage any potential liabilities arising from it.

• Reservations and contracting: for the time necessary to manage the contractual relationship and subsequently for the periods required by the applicable tax, accounting or administrative regulations.

• Resumes: for a maximum of 12 months for current or future selection processes, unless the candidate requests their deletion beforehand.

• Billing-related data: during the periods established by the applicable tax and accounting regulations.

6. Data recipients

Personal data may be disclosed to third parties when necessary for the provision of the service, including:

• technology service and hosting providers

• payment platform providers

• reservation management software providers

• tax or accounting advisors

• public administrations when there is a legal obligation

Under no circumstances will personal data be sold or transferred to third parties for commercial purposes.

7. Communication of data to authorities

In compliance with Royal Decree 933/2021, of October 26, which establishes the obligations of documentary registration and information in activities of leasing motor vehicles without driver, DAVIMA MOTORS, S.L. may communicate certain personal data and the rental operation to the State Security Forces and Corps.

This processing is mandatory and is based on compliance with a legal obligation pursuant to Article 6.1.c of the GDPR.

8. International Transfers

In the event of using technology providers located outside the European Economic Area, DAVIMA will ensure that such transfers are carried out with the appropriate safeguards in accordance with the GDPR.

9. User Rights

Users may exercise the following rights at any time:

• right of access

• right of rectification

• right of rectification

• right to limit processing

• right of opposition

• right to data portability

To exercise these rights, the user can send a request to privacidad@davima.net

The application must include:

• name and surname

• specific request

• copy of identification document

Users also have the right to file a complaint with the Spanish Data Protection Agency (AEPD) if they believe that the processing of their data does not comply with current regulations.

10. Data Security

DAVIMA adopts the necessary technical and organizational measures to guarantee the security of personal data and prevent its loss, alteration, unauthorized access or improper processing.

11. Changes to the privacy policy

DAVIMA reserves the right to modify this privacy policy to adapt it to new legislation or case law.

In case of relevant changes, users will be informed through the website.

Last updated: March 9, 2026