Privacy Policy

Who is responsible for your data

This service is operated by the company identified below, acting as the data controller for the personal data collected through this website.

If you have questions about this policy or about how we process your data, you can contact us directly.

Company

Car App

Contact email

privacy@carapp.com

What data we collect

We collect the information you provide directly, plus limited technical data needed to operate the service safely and reliably.

Contact and identity data

Name, if you provide it
Email address
Phone number or WhatsApp number, if you provide it

Recommendation and preference data

Your answers in the recommendation assistant
Budget, usage, priorities, and vehicle preferences
Recommendation results generated for you
Any additional notes or lead form information you submit

Technical and service data

Session and preference data needed to keep the service working
Basic usage or device information used for security, reliability, and analytics if enabled

How we use your data

To generate your car recommendations
To contact you about your request by email, phone, or WhatsApp when you have asked us to
To improve the quality, clarity, and performance of the service
To comply with legal and regulatory obligations

Legal basis

Our main legal basis for processing your personal data is your consent. By submitting your information and using the recommendation flow, you consent to us using your data to provide recommendations and follow up on your request.

You may withdraw your consent at any time by contacting us. Withdrawal does not affect processing already carried out before that point.

How data may be shared

We do not sell your personal data. We may share it only when this is necessary to provide the service or respond to your request.

With service providers that help us operate the website, communications, or infrastructure
With selected partners or dealers if this is clearly relevant to your request and consistent with the service you asked for
When required by law, regulation, or a valid legal request

Where third parties process data on our behalf, we aim to ensure appropriate contractual and data protection safeguards.

Storage and retention

We keep your data only for as long as needed to provide the service, manage follow-up communications, comply with legal obligations, and resolve disputes where necessary.

Retention periods may vary depending on the type of data, the nature of your request, and applicable legal requirements.

Your GDPR rights

Under GDPR, you may have the right to:

Access your personal data
Correct inaccurate data
Request deletion of your data
Restrict certain processing
Object to certain processing
Request portability where applicable

You may also lodge a complaint with the relevant supervisory authority in Spain if you believe your data has been handled unlawfully.

Contact

For privacy questions or to exercise your rights, contact us by email.

Contact privacy team