Privacy Policy

This Privacy Policy explains how 777RIDE ("we", "us", "our") collects, uses, stores, and shares personal data of visitors and customers ("you") of the website 777ride.com and our luxury vehicle and jet ski rental services in Ibiza and Marbella. We comply with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD).

1. Data Controller

The data controller responsible for the processing of your personal data is:

2. Data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

2.1 Data you provide voluntarily

• Identification: first and last name, date of birth, nationality.
• Contact details: email address, phone number, postal address.
• Driver and document data: driving licence number, passport or ID card number, photographs/scans of these documents, issuing authority and expiry dates — required for rental contract execution and insurance verification.
• Booking and payment data: rental dates, vehicle selected, pickup/return location, deposit and rental price, last 4 digits of payment card, billing address, VAT number (for company rentals).
• Communications: the content of messages, emails, WhatsApp chats, and call recordings (where lawful and disclosed) you exchange with us.

2.2 Data collected automatically

• Technical data: IP address, browser type and version, device type, operating system, language preference, referring URL.
• Usage data: pages visited, time on page, links clicked, approximate location derived from IP.
• Cookies and similar technologies (see Section 9).

2.3 Data collected during the rental

• Vehicle telemetry where the vehicle is equipped with GPS or anti-theft tracking (location, speed, mileage) for the duration of the rental.
• Damage assessment records, photographs of the vehicle at pickup and return, fuel level readings.
• Toll, parking, and traffic violation records that the relevant authorities link to our vehicle during your rental period.

3. Why we process your data

We use your personal data only for clearly defined purposes, including:

• To respond to inquiries submitted through our website, WhatsApp, email, or phone.
• To prepare, conclude, and perform the vehicle or jet ski rental contract.
• To verify your identity, age, and the validity of your driving licence and to comply with insurance requirements.
• To process payments, deposits, refunds, and to issue invoices.
• To manage roadside assistance, breakdown, accident, or theft incidents during the rental.
• To comply with legal obligations, including tax, accounting, anti–money laundering, and traffic legislation.
• To pass on charges and identification data to public authorities for traffic violations, tolls, or parking fines.
• To improve our website, fleet, and customer service through statistics and analytics.
• With your consent, to send marketing communications about new vehicles, seasonal offers, and exclusive events.

4. Legal basis

We process your personal data on one or more of the following legal bases under Article 6 GDPR:

• Performance of a contract (Art. 6(1)(b)) — for handling your booking and rental.
• Compliance with a legal obligation (Art. 6(1)(c)) — for tax, accounting, traffic, and AML obligations.
• Legitimate interest (Art. 6(1)(f)) — for fraud prevention, securing our fleet, recovering vehicles, and operating the website.
• Consent (Art. 6(1)(a)) — for non-essential cookies and direct marketing. You may withdraw consent at any time.

5. Sharing & recipients

We do not sell your personal data. We share it only where necessary, with categories of recipients such as:

• Insurance companies and brokers issuing the policy covering your rental.
• Payment service providers and acquiring banks processing your card transactions.
• Hosting, email, CRM, and analytics providers acting as our processors under written agreements.
• Roadside assistance, towing, and repair partners when an incident occurs.
• Lawyers, accountants, auditors, and tax advisors bound by professional secrecy.
• Public authorities, courts, and law enforcement when legally required (e.g. traffic fines, criminal investigations).
• Successors in case of a merger, acquisition, or restructuring, subject to equivalent privacy commitments.

6. International transfers

Your data is primarily stored within the European Economic Area (EEA). Where we use service providers outside the EEA (e.g. analytics or email infrastructure in the United States), we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses or an adequacy decision, in accordance with Articles 44–49 GDPR.

7. Retention periods

We keep personal data only as long as necessary for the purposes described above:

• Contact inquiries without booking: up to 12 months.
• Rental contracts and related documents (driving licence, passport, invoices): for the duration of the legal limitation periods, generally up to 10 years to comply with Spanish accounting and tax law.
• Marketing data: until you withdraw consent or unsubscribe, and a further 24 months for evidentiary purposes.
• Website logs and analytics: typically 14–26 months.
• CCTV and vehicle tracking data: as long as necessary for incident management, normally up to 30 days unless an incident occurred.

8. Your rights

Subject to the conditions set out in the GDPR, you have the right to:

• Access your personal data and request a copy.
• Have inaccurate or incomplete data corrected.
• Request erasure of your data ("right to be forgotten") where applicable.
• Restrict or object to certain processing, including direct marketing.
• Receive your data in a portable, machine-readable format.
• Withdraw consent at any time, without affecting the lawfulness of prior processing.
• Lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD, www.aepd.es) or with your local supervisory authority.

To exercise any of these rights, please email ride@777ride.com from the address you used to contact us, or send a written request to our postal address. We will respond within 30 days.

9. Cookies & analytics

Our website uses cookies and similar technologies for the following purposes:

• Strictly necessary cookies — required for the site to function (e.g. language preference, security tokens). These do not require consent.
• Analytics cookies — Google Analytics 4 (Google Ireland Ltd) helps us understand how visitors use the site. IP addresses are anonymised where possible.
• Embedded content — Instagram feed (Elfsight), YouTube, and Google Fonts may set cookies governed by their own privacy policies.

You can control cookies through your browser settings and, where displayed, through our cookie banner. Disabling certain cookies may affect functionality.

10. Data security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include encrypted connections (HTTPS/TLS), access control, password hashing, secure backups, and ongoing staff training. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Children

Our services are intended for adults aged 25 or older (subject to the specific minimum age set out in the rental contract). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the latest revision. Material changes will be notified through the website or by email where appropriate.

13. Contact & complaints

For any question, request, or complaint regarding this Privacy Policy or your personal data, please contact us:

If you are not satisfied with our response, you may lodge a complaint with the Agencia Española de Protección de Datos (AEPD) or your local data protection authority.