Privacy policy
1. Data controller
MASSARI CARS (NIF 73591788E), Valencia (Spain). Email: massaricarsvlc@gmail.com.
2. Data we process
- Contact details you provide: name, email and phone.
- Vehicle and calculation data: brand, model, year, engine, price and budget.
- Your message and, if you use the investor area, your email and the status of your operations.
- Minimal technical data (IP address, browser) in server security logs.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your enquiry or sending the estimate you requested | Your consent (Art. 6.1.a GDPR) and pre-contractual steps at your request (Art. 6.1.b) |
| Managing reservations, contracts and payments | Performance of a contract (Art. 6.1.b) and legal obligations (Art. 6.1.c) |
| Investor private area | Performance of a contract (Art. 6.1.b) |
| Security and abuse prevention | Legitimate interest (Art. 6.1.f) |
We make no automated decisions and build no profiles. We send no marketing without your consent.
4. Recipients
We only share data with providers needed to deliver the service: Cloudflare (hosting and security), the payment gateway (Stripe) when you reserve or pay, and WhatsApp (Meta) when you choose to contact us there. Some may be outside the European Economic Area, relying on appropriate safeguards such as standard contractual clauses. We may also disclose data to authorities where required by law.
5. Retention
Enquiries without a contract: up to 12 months after the last contact. If you hire us: for the duration of the relationship and afterwards for the legal retention periods (tax and liability).
6. Your rights
You may access, rectify, erase, object to, restrict and port your data by writing to massaricarsvlc@gmail.com, stating the right you exercise. If you disagree, you can complain to the Spanish Data Protection Agency (aepd.es).
7. Security
We use encrypted connections (HTTPS), access controls and technical measures to protect your data. We do not store card data: the payment gateway handles it directly.