Last updated: August 2026
1. Data controller
The controller of the personal data collected on this website is Talleres Carreras, S. A. (hereinafter, “Poppycars”), with Spanish tax ID (CIF) A07452436 and registered address at Carrer de s’Era Alta, 3, 07714 Maó (Balearic Islands), Spain. You can contact us at enquiries@poppycars.com or by phone on (+34) 671 013 772.
2. Applicable legislation
We process your data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).
3. Data we process
- Identification and contact details: full name, ID card or passport, driving licence, address, email and phone number.
- Booking details: dates, vehicle, flight number, additional drivers and related communications (email, phone or WhatsApp).
- Payment details: handled in tokenised form through our payment provider (Stripe); we do not store your full card number.
- Browsing data: cookies and similar technologies, as described in our cookie policy.
4. Purposes and legal basis
- Managing your booking and the rental contract (performance of a contract, Art. 6.1.b GDPR).
- Complying with legal obligations: invoicing, responding to requests from authorities and identifying the driver in the event of traffic offences (Art. 6.1.c GDPR).
- Handling incidents, damage, fines and charges related to the rental (legitimate interest, Art. 6.1.f GDPR).
- Sending you our own commercial communications and compiling website usage statistics, only with your consent (Art. 6.1.a GDPR), which you can withdraw at any time.
5. Recipients
Your data may be shared with: the provider of our booking engine (Mybooking), our payment provider (Stripe), advisers and technology providers acting as data processors, insurance companies where necessary to handle a claim, and public administrations or authorities where there is a legal obligation (for example, identifying the driver in relation to traffic fines). We do not sell your data to third parties.
6. International transfers
Some providers may process data outside the European Economic Area. In such cases we ensure that appropriate safeguards are in place (adequacy decisions or standard contractual clauses approved by the European Commission).
7. Data retention
We keep your data for the duration of the contractual relationship and, afterwards, for as long as necessary to deal with potential legal liabilities (in general, up to 6 years for commercial and tax documentation). Data processed on the basis of your consent is kept until you withdraw it.
8. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to enquiries@poppycars.com or by post to the address above, enclosing a copy of your ID document. If you believe we have not handled your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
9. Cookies
We use technical cookies and, with your consent, statistics and marketing cookies. You can find full details and change your preferences at any time in our cookie policy and in the consent management banner.
10. Updates
We may update this policy to reflect legal or service changes. The current version, with its update date, will always be published here.