1. Introduction
Take Drive (referred to as “we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website https://cdsbud.es/ (the “Site”) and use our premium car rental services.
This policy is written in accordance with the General Data Protection Regulation (GDPR) and other applicable Spanish data protection laws.
2. Data Controller
The data controller responsible for your personal data is:
Take Drive
C. Gaudí, 11, 29680 Estepona, Málaga, Spain
Email: info@cdsbud.es
3. Information We Collect
We may collect and process the following categories of personal data:
Identity and Contact Data: Your title, name, surname, date of birth, address, email address, and telephone number.
Driving License Data: Your driver’s license number, issue date, expiry date, and copies of your driving license.
Identification Document Data: Your passport or national ID card number, and copies for verification purposes.
Payment Data: Your credit/debit card number, expiry date, and security code (which is processed securely by our payment service providers and not stored on our servers).
Rental Transaction Data: Details of your rental bookings, including dates, times, chosen vehicle, rental duration, and any special requests.
Technical and Usage Data: Your IP address, browser type and version, time zone setting, browser plug-in types, operating system, and platform. We also collect information about your visit to our Site, including the full Uniform Resource Locators (URL), clickstream to, through, and from our Site, and pages you viewed.
Communication Data: Any correspondence we have with you, whether via email, phone, or our contact forms.
4. How We Use Your Information (Purposes and Legal Basis)
We use your personal data only for specified and legitimate purposes. The table below outlines how we use your data and our legal basis for doing so under GDPR.
| Purpose of Processing | Legal Basis for Processing |
|---|---|
| To create and manage your account, process your rental bookings, and fulfill our contract with you (including age and license verification). | Necessary for the performance of a contract (Article 6(1)(b) GDPR). |
| To process payments and prevent fraudulent transactions. | Necessary for the performance of a contract and for our legitimate interests in preventing fraud (Article 6(1)(b) and (f) GDPR). |
| To manage our relationship with you, including notifying you about changes to our terms or privacy policy, and asking you to leave a review. | Necessary for our legitimate interests (to keep our records updated and to study how customers use our services) and to comply with legal obligations (Article 6(1)(f) and (c) GDPR). |
| To administer and protect our business and this Site (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data). | Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security) and to comply with legal obligations (Article 6(1)(f) and (c) GDPR). |
| To use data analytics to improve our website, products/services, marketing, customer relationships, and experiences. | Based on your consent where required by law, otherwise on our legitimate interest to improve our services (Article 6(1)(a) or (f) GDPR). |
| To send you marketing communications about our premium vehicles and special offers, if you have opted-in. | Your consent (Article 6(1)(a) GDPR). |
5. Data Sharing and International Transfers
We may share your personal data with the following categories of third parties:
Service Providers: Such as payment processors, IT and system administration services, customer relationship management tools, and marketing platforms. These providers are bound by strict data processing agreements.
Professional Advisors: Including lawyers, bankers, auditors, and insurers where necessary.
Authorities: We may disclose your data to law enforcement, regulatory bodies, or other authorities if required by law or to protect our rights.
Your data is processed within the European Economic Area (EEA). If we ever need to transfer your data outside the EEA, we will ensure appropriate safeguards are in place, as required by GDPR.
6. Data Security
We have implemented appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. These include encryption, secure servers, and access controls.
7. Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. For example, rental transaction data is typically retained for a period required by Spanish tax laws (currently 6 years).
8. Your Data Protection Rights
Under GDPR, you have the following rights:
Right of Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request correction of inaccurate or incomplete data.
Right to Erasure (‘Right to be Forgotten’): You can request deletion of your personal data under certain circumstances.
Right to Restrict Processing: You can request we suspend the processing of your data.
Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
Right to Object: You can object to the processing of your data based on our legitimate interests.
Right to Withdraw Consent: Where we rely on consent, you can withdraw it at any time.
To exercise any of these rights, please contact us at info@cdsbud.es. We may need to request specific information from you to help us confirm your identity. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos).
9. Cookies
Our Site uses cookies to distinguish you from other users. This helps us provide you with a good experience and allows us to improve our Site. For detailed information on the cookies we use and the purposes for which we use them, see our Cookie Policy.
10. Changes to This Privacy Policy
We may update this policy from time to time. The updated version will be indicated by an updated “Last Updated” date at the top of this page. We encourage you to review this policy periodically.
11. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us:
By email: info@cdsbud.es
By post: Take Drive, C. Gaudí, 11, 29680 Estepona, Málaga, Spain.
