Privacy Policy / GDPR

1. Data Controller
The data controller responsible for your personal data is:
All Cylinders Car Rental S.L
Address: Calle Algatocín 11, 29004 Málaga, Spain
Email: info@cylinders.rent
Phone: +34 951 433 344
VAT Number: B16941460

2. What Data We Collect
To provide our car rental services, we collect the following personal data:

  • Full name

  • Email address

  • Phone number

  • Address

  • Date of birth

  • Driving license details

  • Passport details

  • Flight information

  • Additional drivers’ data (if provided)

Analytical and advertising cookies are only activated after explicit consent via our cookie banner

Providing this information is necessary to provide our car rental services. Marketing data is optional and processed only if you consent. Cookies may also collect information about your browsing habits; see our Cookie Policy for details. For more information about the processing of your personal data and the use of cookies, please refer to our Privacy Policy and Cookie Policy. For your rights regarding your personal data, see section 6.

3. Purpose of Data Processing
We process your personal data for the following purposes:

  • To manage your rental agreement

  • To verify your identity and eligibility for rental

  • To provide required insurance coverage

  • To process your payments

  • To send marketing communications (only if you have given consent)

  • To comply with legal obligations (e.g., traffic violations, tax requirements)

  • For fleet location and management purposes

4. Legal Basis for Processing
We process your personal data based on the following legal grounds according to the GDPR:

  • Consent: When you give explicit consent (e.g., marketing communications)

  • Contractual necessity: To fulfill the rental agreement

  • Legal obligation: Compliance with laws and regulations

  • Legitimate interests: Fraud prevention, advertising, fleet management

5. Data Retention Period
We retain your personal data only for as long as necessary:

  • For the duration of the rental and any related obligations

  • Up to 5 years for legal and accounting purposes

  • Marketing data until you withdraw your consent

  • For contractual claims, data is retained for 10 years after contract termination

We limit access to your data strictly to authorized personnel and securely destroy or anonymize data no longer needed.

6. Your Rights Under GDPR

You have the right to:

  • Access your personal data

  • Rectify any inaccurate data

  • Request deletion of your data (under certain conditions)

  • Restrict processing of your data

  • Request portability of your data

  • Object to certain data processing activities (e.g., direct marketing)

To exercise any of these rights, please contact us at info@cylinders.rent with a copy of your ID.

You also have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work, or place of the alleged infringement. In Spain, this is the Agencia Española de Protección de Datos (AEPD).

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encrypted connections, secure storage, regular security updates, and restricted access limited to authorized personnel.

All Cylinders Car Rental S.L. also relies on trusted external providers (such as hosting and domain services) that apply industry-standard security measures in compliance with applicable regulations.

However, absolute security of data transmitted over the Internet cannot be guaranteed. All Cylinders Car Rental S.L. is not responsible for unauthorized access, cyberattacks, or any actions by third parties that may compromise the confidentiality of your personal data. Users are also responsible for taking reasonable precautions to protect their own information, such as keeping devices and login details secure.

8. Data Sharing and Transfers

8.1. We do not share your personal data with third parties except:

  • When required by law.

  • For the execution of the rental contract (e.g., insurance companies).

  • With service providers under strict confidentiality agreements, including secure third-party data hosting and domain management.

8.2. Personal data may be processed and stored outside the European Economic Area (EEA). All Cylinders Car Rental S.L. ensures that adequate data protection measures are applied, such as standard contractual clauses or security certifications, in compliance with GDPR.

9. Changes to this Privacy Policy
All Cylinders Car Rental S.L. reserves the right to modify this Privacy Policy at any time, for legal, technical, or business reasons. Any changes will be published on our website at least 10 days before coming into effect.

10. Fleet Location and GPS Tracking
All Cylinders Car Rental S.L. may, when necessary, use GPS systems to track the location of rented vehicles to efficiently manage the vehicle fleet, ensure vehicle security, and provide services.

Location data is processed solely for the purposes of fleet management, security, and service provision, including situations that may arise in the event of accidents or other emergencies.

The processing of location data is based on legitimate interest under Article 6(1)(f) of the GDPR and complies with applicable data protection laws.

Data is retained only for as long as necessary for these purposes.

11. Contact Information
For questions or concerns regarding your data privacy, please contact:
All Cylinders Car Rental S.L.
Email: info@cylinders.rent
Phone: +34 951 433 344