Privacy Policy
Last updated: 13 September 2026
In brief
- A search sends us dates, a pickup point and a driver age, never a name.
- Payment happens with the rental company, so no card details are stored here.
- Every right below can be used by email, free of charge.
Who is responsible for your data
Rent Gran Canaria operates carrentalgrancanaria.com and decides how and why the personal data described here is used, which makes it the data controller under the General Data Protection Regulation (GDPR). Its address is Avenida de Tirajana 12, Playa del Ingles, 35100, Gran Canaria, Spain. The Canary Islands are part of Spain for data protection purposes, so the GDPR and Spanish Organic Law 3/2018 apply here in full. Questions about this page go to [email protected].
What a car search sends us
Comparing cars here means submitting the pickup point you picked, for instance Gando airport or a Maspalomas hotel, the collection and return dates and times, the driver's age band, and any filter you switched on, such as an automatic gearbox or a supplier that accepts a debit card. That is all a quote needs, and none of it identifies you.
You give us more only when you write to us: an enquiry, a review or a question brings your name, your email address and the message itself. There are no user accounts, so no password or profile is stored.
Why no payment details pass through this site
The booking is completed with the rental supplier, not with us. The company you choose takes your card, checks your licence and passport at its desk, whether at Gando or in Playa del Ingles, and holds the deposit under its own conditions. Rent Gran Canaria never receives a card number, a security code, a licence number or a copy of an identity document. Those records sit with the supplier and are governed by its own privacy notice.
Cookies, server logs and analytics
Our server keeps an access log for each request: the IP address, the browser identifier, the address requested and the time. It exists to find faults and block automated abuse, and old entries are removed on a rolling basis. Any analytics we use reports totals, never what one visitor did. The cookies behind these functions, their lifetimes and the way to refuse them are listed on a separate page.
The legal basis for each type of processing
Passing your dates and pickup point to the supplier you selected happens at your request, as a step before a contract with that supplier (Article 6(1)(b) GDPR). Keeping the site secure, measuring its use and answering your messages rest on our legitimate interest (Article 6(1)(f)), weighed against your reasonable expectations. Optional cookies rest on consent (Article 6(1)(a)), which you can withdraw at any time. Where Spanish or European law obliges us to keep or disclose a record, Article 6(1)(c) applies.
Who receives it
- The rental supplier you selected, which needs the details to confirm the car.
- LocalRent, the booking platform behind the results and reservation window, acting on our instructions.
- The companies that host the site and deliver our email, and any analytics provider we use.
- A court or public authority, only where Spanish or European law compels us.
We do not sell personal data or share it for anyone else's marketing. Processing stays inside the European Economic Area where possible; any transfer beyond it rests on an adequacy decision or standard contractual clauses.
Your rights under the GDPR
These rights belong to every visitor, wherever you read from:
- Access: learn whether we hold personal data about you and receive a copy.
- Rectification: have inaccurate data corrected and incomplete data completed.
- Erasure: have data deleted once there is no longer a good reason to keep it.
- Restriction: have processing paused while a question of accuracy or lawfulness is settled.
- Portability: receive the data you gave us in a machine-readable format.
- Objection: object to processing we base on legitimate interest.
- Withdrawal: take back a consent you gave earlier, without affecting what was lawful before.
- Complaint: raise the matter with a supervisory authority.
Send a request to [email protected]; we answer within one month, free of charge. Spain's supervisory authority, the Canary Islands included, is the Agencia Española de Protección de Datos (AEPD) in Madrid; you may instead go to the authority in the EU country where you live or work.
How long we keep it
| Data | Kept for | Reason |
|---|---|---|
| Search parameters | Not stored once the results have been shown | Only needed to fetch live prices |
| Enquiries and reviews | Up to 24 months after the last exchange | Follow-up questions and possible disputes |
| Server access logs | 12 months, then anonymised | Fault finding and abuse detection |
| Analytics totals, where collected | Aggregated, with no personal data attached | Understanding which pages are useful |
Children, and changes to this page
Car hire in Spain is for adults and this site is written for people planning a trip, so we do not knowingly collect a child's data; tell us if a minor has sent something through a form and it is deleted. We revise this page whenever the site, a provider behind it or the law changes; the date beneath the title identifies the version you are reading.