Privacy Policy

Contact InformationWebsite Name: TITANE CLUBAddress: C. Bahía de Pollensa, 11, Barajas, 28042 Madrid, ESEmail: info@titane.onlinePhone: +34 911 225 361Applicable Jurisdiction: Spain / European UnionLast Updated: 22/08/2026

• 1. Scope and data. This policy covers processing on titane.online and the Contact page. Contact data may include a name, email, subject, optional phone, message, date, time, and communication record. Technical records may include an IP address, browser or device type, language, requested page, referral data, and security events. TITANE CLUB does not request licences, identity documents, payment details, rental contracts, travel histories, inspection records, special-category data, or criminal-matter data.
  
  2. Sources and purposes. Contact data originates from the sender. Technical data originates from the device, browser, hosting environment, and security logs. Data is processed to receive and review website messages, maintain communication records, preserve security, diagnose technical events, manage consent records, apply privacy choices, and meet legal duties. It is not used to arrange rentals, assess drivers, create advertising profiles, or issue quotations.
  
  3. Legal grounds. Contact-form processing is based on freely given, specific, informed, and unambiguous consent under Article 6(1)(a) GDPR. Technical security may rely on legitimate interests under Article 6(1)(f), subject to individual rights. Processing required by law relies on Article 6(1)(c). Optional tracking relies on consent and remains inactive before consent.
  
  4. Minimisation and retention. Only relevant data should be entered. Contact messages are retained for review and a limited administrative record, then deleted or anonymised unless law requires longer retention. Technical and security logs remain for a limited security period. Consent records remain while a preference is current and for a limited documentation period afterward.
  
  5. Recipients. Authorised persons and technical hosting, form, email, security, or maintenance providers may process data under documented instructions and confidentiality terms. Data is not sold or disclosed to rental operators for reservations, pricing, eligibility, or marketing. A binding legal obligation may require disclosure. Each recipient receives only relevant data.
  
  6. Transfers. If a technical provider processes data outside the EEA, the transfer follows Chapter V GDPR through an adequacy decision, approved safeguards such as standard contractual clauses, or another lawful basis.
  
  7. Rights. A person may request access, rectification, erasure where conditions are met, restriction, eligible portability, and objection where processing relies on legitimate interests. Consent may be withdrawn. Requests can be sent to info@titane.online and should identify the relevant communication without unrelated documents. Limited identity verification may apply where necessary.
  
  8. Minors. Under Article 7 of Organic Law 3/2018, consent-based processing may rely on the consent of a minor over 14, subject to situations requiring participation by a holder of parental responsibility or guardianship. For a child under 14, that holder’s consent is required. The website is not directed to children.
  
  9. Security and sensitive data. Administrative, organisational, and technical measures address access control, confidentiality, minimisation, maintenance, transmission security, backups, and event review. No internet method is free from all risk. Sensitive and special-category data should not be sent through the form or ordinary email.
  
  10. Transparency and updates. Processing records may document category, purpose, legal basis, recipient type, retention criterion, security context, and transfer safeguard. This policy may change with processing or applicable requirements. The displayed date identifies the current version. Data accuracy and deletion. A sender may request correction of an inaccurate contact record. Erasure applies where GDPR conditions are met and no overriding lawful retention requirement remains. When deletion is due, active copies are removed or anonymised according to the applicable system process. Residual backup copies remain isolated until the backup cycle expires. Data no longer linked to an identifiable person falls outside personal-data processing.
  
  Purpose limitation. A message is reviewed only within the website-contact context stated at collection. A materially different purpose requires a separate lawful basis and relevant information before processing. Technical logs are not combined with contact content to infer rental interests, vehicle preferences, purchasing capacity, or travel plans. Automated decision-making producing legal or similarly significant effects is not used for Contact-page communications.
  
  For more information, please use the contact details above.