Privacy policy

This policy explains how we process personal data when you browse this website, request information, make a booking or rent a vehicle. Processing is governed by Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

EASY MENORCA RENT, S.L. (Easymenorca), tax identification number B57134082, registered address C/ Santa Victoria, 33, 07701 Mahón, Menorca, Illes Balears. For privacy enquiries and to exercise your rights: info@easymenorca.com. Telephone: 971 360 147.

2. Bookings and providers processing data on our behalf

To manage bookings and vehicle rentals we use the MyBooking booking platform, provided by KARYASALA, S.L.U., tax identification number B02838894, Avda. des Camp Verd P37-46, 07730 Alaior, Illes Balears, email info@mybooking.es, telephone +34 637 70 13 74. Karyasala provides technology services and processes data following our instructions under the applicable data processing agreement. Website hosting, maintenance, communications and professional advisory providers, and banks or payment gateways, may also be involved, each within their own role. Financial institutions and payment gateways handle payments through their own channels; do not enter full card numbers, CVV codes, passwords or unnecessary documents in free-text fields.

3. Data we may process

Depending on how you use the website and service, we may process identification and contact details; information needed for the booking and rental agreement, such as dates, vehicle and pickup and return locations; driving licence and identity document details where needed to enter into or perform the rental; information required for the statutory registration and reporting of travellers and vehicle rentals; billing information and limited payment details, such as status, amount, reference or receipt; messages you send us; and basic technical browsing data and cookie preferences. We do not request special categories of personal data to book a vehicle.

4. Purposes and legal bases

Handling enquiries and requests: pre-contractual steps you request and, where appropriate, our legitimate interest in responding and managing the relationship.
Creating and managing bookings, entering into and performing the rental, handing over and receiving the vehicle, handling incidents and customer service: performance of the contract or pre-contractual steps.
Invoicing, accounting, fraud prevention and handling claims: compliance with legal obligations and, where appropriate, our legitimate interest in defending our rights.
Recording and reporting data legally required for vehicle rentals: compliance with legal obligations, including Spanish Royal Decree 933/2021.
Sending marketing communications: your consent when requested or, where permitted by law, the previous contractual relationship for our own similar services. You may object or withdraw consent at any time.
Non-essential cookies and similar technologies: your consent, which you can manage in the cookie settings panel.

Data marked as required in forms or requested to process a booking is necessary to handle the request or enter into and perform the contract. If you do not provide it, we may be unable to handle your enquiry or rental. Data for marketing communications and non-essential cookies is optional.

5. Recipients

We may disclose data to providers needed to deliver the service (including MyBooking/Karyasala and the providers described above), banks or payment gateways, professional advisers, and public authorities or bodies where there is a legal obligation. These providers access only the data needed for their role. We do not sell personal data.

6. Payments and documents

Payments are processed using the methods available during booking or rental. Where necessary, we retain transaction information such as payment status, amount, date and reference, but avoid sending full card details or credentials through forms, email or messaging. Identity or driving licence documents are requested and retained only where needed for the booking, contract or applicable legal obligations.

7. Retention periods

We retain data for as long as needed for each purpose. Booking and contract data is retained during the relationship and subsequently blocked for the statutory limitation periods and defence of claims. Records subject to Spanish Royal Decree 933/2021 are retained for three years from completion of the service under that decree. Accounting documentation is retained for the periods required by applicable law. Enquiries are retained as long as needed to respond and conclude follow-up; marketing data is retained until you withdraw consent or object. Afterwards, data is deleted or blocked where a legal obligation exists or it is needed to address liabilities.

8. International transfers

If any provider processes data outside the European Economic Area, the safeguards required by the GDPR will apply, such as an adequacy decision or appropriate contractual safeguards. You can request further information about applicable safeguards by writing to info@easymenorca.com.

9. Your rights

You may request access, rectification, erasure, restriction of processing or portability, object to certain processing, and withdraw consent where processing relies on it. Write to info@easymenorca.com, stating the right you wish to exercise and enough information to identify the request. You may also lodge a complaint with the Spanish Data Protection Agency at www.aepd.es.

10. Security, forms and data breaches

We apply technical and organisational measures appropriate to the risk and restrict access to people who need the data to provide the service. No Internet-connected system can guarantee zero risk. Avoid sending unnecessary personal information through forms or messages. If a security breach affects personal data, we will document the incident and assess the risk to affected individuals. Where required by law, we will notify the breach to the competent supervisory authority within the legal deadline. If it may entail a high risk to individuals, we will inform them without undue delay.

11. Cookies and changes to this policy

Our Cookie policy explains the use of cookies. Acceptance of this policy does not constitute consent to marketing communications or non-essential cookies. We may update this text to reflect changes in processing or legislation; the current version and its update date will be published here.