1. Data controller
- Controller: Guillermo Pablo Pérez Sánchez
- Tax ID (NIF): 76749603Y
- Address: C/ Navío 38, 29130 Alhaurín de la Torre, Málaga, Spain
- Contact email: hello@holavan.com
- Telephone: +34 684 77 55 09
2. What data we process
We only process the data you give us voluntarily:
- Enquiry form: name, email address, telephone (optional), travel dates, number of travellers, pick-up point and the message you write.
- Email or telephone: whatever you choose to tell us.
- Technical data: IP address and browsing data, solely for security purposes and, if you consent, for audience measurement.
We do not request or process special categories of data. Nor do we process children’s data: the service is aimed at adults holding a driving licence.
3. Why we use it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Answering your enquiry and preparing a quote | Pre-contractual steps at your request (art. 6(1)(b) GDPR) |
| Managing the hire if you go ahead | Performance of the contract (art. 6(1)(b) GDPR) |
| Meeting tax and accounting obligations | Legal obligation (art. 6(1)(c) GDPR) |
| Site security and abuse prevention | Legitimate interest (art. 6(1)(f) GDPR) |
| Analytics cookies | Consent (art. 6(1)(a) GDPR) |
We do not use your data to send you advertising unless you expressly ask us to.
4. How long we keep it
- Enquiries that do not lead to a booking: up to one year from the last contact.
- Hire contracts and invoicing: for the periods required by tax and commercial law, generally six years.
- Cookie consent record: twenty-four months.
Once those periods have elapsed, the data is deleted or properly blocked.
5. Who has access to your data
We do not sell or transfer your data. It is accessed only by the providers needed to deliver the service, acting as data processors:
- Vercel Inc. (United States): website hosting.
- Resend, Plus Five Five, Inc. (United States): delivery of the form emails.
International transfers rely on the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission.
We may also disclose data to the tax authorities, to law enforcement or to the courts where there is a legal obligation, and to our insurer in the event of a claim.
6. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent you have given, without affecting the lawfulness of processing carried out beforehand.
To do so, write to the contact email stating which right you wish to exercise and enclosing proof of identity. We will reply within one month at the latest.
If you believe we have not dealt with your request properly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid, or with the supervisory authority of your country of residence.
7. Security
We apply reasonable technical and organisational measures to protect your data: encrypted connections, restricted mailbox access and a limited number of people able to view enquiries.
8. Changes to this policy
If we amend this policy, we will publish the new version on this page together with its update date.