Privacy Policy

See in this section our policy of protection of personal data.

Protection policy of personal data

In compliance with the principles of lawfulness and transparency pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR), CICAR (Canary Islands Car, SLU), with Tax ID Code B35051820 and electronic address informs you of the characteristics of the data processing carried out under its responsibility:

Processing and Purposes: (I) Attention to requests for information. (II) Vehicle rental booking requests. (III) Creation of user (and driver) web account. (IV) Quality control service. (V) Client registration. (VI) Administrative management. (VII) Issue of invoices, management of accounting, tax and corporate matters. (VIII) Attention to user privacy rights. (IX) Registration of drivers and data communication.

Authentication: (I), (II) and (III) Consent of data subject. (IV) Legitimate interest. (V) and (VI) Performance of contract or pre-contract for provision of services. (VII) to (IX) Legal obligation.

Recipient: Recipients: (I), (II), (III), (V), (VI), (VII) and (VIII) Grupo Empresarial Cabrera Medina, SL for centralised processing. (II) Enterprise Holdings, Inc. for booking requests outside of the Canary Islands ( (IV) Trustpilot ( (IX) State law enforcement agencies, judicial bodies, in the event of receiving any request relating to the commission of an infringement by the driver.

You may exercise the rights recognised under this Law on the access, erasure and rectification of your data, along with the limitation and opposition to their processing by sending us an e-mail to the following address:, indicating in all cases the Reference: “Cicar/Data protection” and accompanying this with documentation accrediting your identity, such as a copy of your National ID Card. You may also submit a claim to the Spanish Data Protection Agency, particularly in the event that the exercise of your rights mentioned above has not been attended to. Furthermore, we undertake to comply with the obligation to maintain the secrecy of all personal information and the duty to safeguard it, adopting all necessary security measures to avoid its unauthorised processing, loss or destruction.

Creation of an account/driver

By pressing the button (Confirm), you provide your consent for the creation of a user account by Canary Islands Car, SLU with the data you have provided us with on the form, for the purpose of the creation of an associated user and driver account required for the drafting of the self-drive vehicle rental pre-contract, which will be processed along with the IP address of the device that the booking is made from in order to manage, maintain and control the quality of the service received. The potential data communications and their characteristics are as indicated below:

Purpose: (I) Creation of an associated user and driver account required for the drafting of the self-drive vehicle rental pre-contract. (II) Quality control of the service. (III) Management of bookings on Mainland/Balearic Islands.

Authentication: (I) Consent of data subject and performance of pre-contract. (II) Legitimate interest. (III) Execution of the provision of the service.

Recipient: (I) Grupo Empresarial Cabrera Medina, SL. (II) Data Processor - Trustpilot. (III) Enterprise Holdings, Inc.

Rights: Access, erasure, rectification and opposition, along with the rights explained in the privacy policy.

You can withdraw your consent to the processing of your data for the purpose of the creation of the user account by clicking on the option “Delete my account” from your private area on the website in the section Account information.

Furthermore, you can create, modify or erase the driver data associated with your user account by clicking on the button “Create/add new driver”. In the event that you are going to communicate data on third parties, ensure that this falls under one of the cases authorised in Article 6 of Regulation (EU) 2016/679 (GDPR) on the processing of personal data.

More legal notice ... ?

To see more legal information, go to section:

Legal information