Privacy policy
Last updated: 25 September 2026
Provisional version, pending legal review. Details marked as pending will be completed by Logacar.
Here we explain what data we process when you use this website, why, on what legal basis, who we share it with, how long we keep it and how you can exercise your rights. This policy is supplemented by the cookie policy.
This English version is a translation provided for your convenience. In the event of any discrepancy, the Spanish version prevails.
1. Who processes your data?
| Data controller | [Company name: pendiente] |
| Tax ID (CIF) | [Tax ID (CIF): pendiente] |
| Address | [Registered address: pendiente] |
| Privacy contact | [Privacy email: pendiente] |
2. What data do we process?
| Type of data | What it includes | When we collect it |
|---|---|---|
| Identification and contact details | First name, surname, phone number, email, province and city. | When you fill in a form or edit your details in My account. |
| Customer type and tax details | Whether you are a private individual, self-employed or a company; DNI, NIE or NIF; company name. | In your application or in My account. |
| Application documents | DNI or NIE, payslips or pension certificate, income tax return, proof of bank account ownership, tax registration, deeds of incorporation and corporate tax return, depending on your case. | When you upload them yourself from My account. |
| Application details | The car and offer you are interested in, term and mileage, proposals, status of your application. | While we assess your application. |
| Communications | Emails we send you and notes from our team about our contact with you. | While we handle your application. |
| Source of your visit | Campaign or website you arrive from, landing page and device type. Never your name, email or phone number. | Only if you accept analytics cookies. |
| Technical security data | IP address and browser when you request access to My account. | Each time you request an access link or code. |
We do not ask for special category data (health, beliefs, etc.). If a document contains such data and it is not needed to assess your application, you can hide it before uploading.
3. What do we use it for and on what legal basis?
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to your request for information or a call. | Your consent, given in the form (Art. 6(1)(a) GDPR). |
| Managing your leasing application: assessing it, requesting your documents and preparing proposals for you. | Taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR). |
| Giving you access to My account and notifying you by email of each change to your application. | Taking steps prior to entering into a contract and, where applicable, performance of the contract (Art. 6(1)(b) GDPR). |
| Protecting your account and your documents: limiting access requests and recording which member of our team views each document. | Legitimate interest in the security of the service (Art. 6(1)(f) GDPR). |
| Complying with applicable legal obligations (tax, accounting and others). | Legal obligation (Art. 6(1)(c) GDPR). |
| Measuring use of the website and the source of applications. | Your consent in the cookie banner (Art. 6(1)(a) GDPR). |
| Measuring the effectiveness of our campaigns. | Your consent in the cookie banner (Art. 6(1)(a) GDPR). |
We do not make decisions based solely on automated processing: your documents are reviewed by a person on our team and decisions about your application are made by people.
4. Who do we share your data with?
Only with those who need it for your application, and we never sell it:
- The leasing company that assesses and, where applicable, formalises your contract.
- The official dealership where you collect the car, with the data needed for delivery.
- Public authorities and courts, when required by law.
In addition, these providers process data on our behalf (data processors), under contract and only to provide their service to us:
| Service | Provider | Purpose |
|---|---|---|
| Database and document storage | Supabase | Storing your data and your documents, hosted in the European Union. |
| Website hosting | Hosting provider | Serving the website. To be confirmed on launch. |
| Sending emails | Resend | Sending you notifications about your application and your access links. |
| Analytics | Google (Analytics) and Microsoft (Clarity) | Only if you accept analytics cookies. |
| Marketing | Meta | Only if you accept marketing cookies. |
We use an artificial intelligence service (Anthropic) solely to read the offer files that leasing providers send us. Your personal documents are not sent to any artificial intelligence service.
If you write to us on WhatsApp, that conversation is also processed by Meta, under its own terms.
5. International transfers
Your documents and application data are hosted in the European Union. Some of the providers above (email delivery, analytics and marketing) may process data outside the European Economic Area, mainly in the United States. In those cases, the transfer is covered by the safeguards provided for in the GDPR: the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
6. How long do we keep your data?
| Data | Period |
|---|---|
| Information request without an application | To be defined |
| Leasing application and documents | To be defined (retention policy) |
| Data of customers with a contract | For as long as the relationship lasts and, afterwards, for the applicable statutory limitation periods. |
| Security logs (access) | To be defined |
| Cookies | As set out in the cookie policy |
When you delete a document in My account, it immediately stops being used for your applications; the file is deleted later, in line with these periods.
7. Your rights
You can, at any time:
- Access your data and find out how we process it.
- Rectify it if it is incorrect, or erase it when it is no longer needed.
- Object to processing or ask us to restrict it.
- Request portability of the data you have given us.
- Withdraw your consent, without affecting processing carried out before.
If you believe we have not handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es).
8. How to exercise your rights
Write to us at [Privacy email: pendiente] stating which right you wish to exercise. If we cannot confirm your identity, we will ask you to prove it. We will reply within one month at most.
From My account you can also view and correct your details, see and delete your documents, and track the status of your applications.
9. How do we protect your data?
- Your documents are stored in a private space, never at a public address.
- Each customer can only see their own data: access control is enforced in the database itself, not just on the website.
- To view a document, a link is generated that expires after 60 seconds.
- You sign in without a password, using single-use links and codes that expire, with a limit on requests.
- We record which person on our team views each document.
- Communications with the website are encrypted (HTTPS).
10. Minors
Our services are intended for people aged 18 and over. We do not knowingly process data of minors.
11. Changes to this policy
If we change this policy, we will show it here with its date. If the change is significant, we will let you know by email.