SUPERCAR MARBELLA

PRIVACY POLICY AND TERMS OF USE


THERA RESORT S.L.
Trade name: SuperCar Marbella
Registered address: Oasis Business Center Of-6, 29602 Marbella, Málaga, Spain
Tax ID (CIF): B56154438
E-mail: info@supercarmarbella.com


1. Introduction

THERA RESORT S.L. maintains this website and all information, communications, software, scripts, photographs, texts, videos, graphics, music, sounds, images and other materials and services found on the website (hereinafter collectively, “Website Content”) for the use of its customers, employees and members of the public, but only for the lawful purposes set out below. Such content is provided as a convenience to its customers and the general public.


2. Acceptance of the Terms of Use

By accessing, browsing and/or using this website, you expressly agree to be bound by these Terms of Use and to comply with all applicable laws and regulations, including, without limitation, the General Data Protection Regulation (GDPR – Regulation EU 2016/679) and Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights (LOPDGDD).

You declare that you have the legal authority to accept these Terms of Use on your own behalf or on behalf of any party you formally represent. Use of the website is unauthorised in any jurisdiction that contradicts these Terms of Use, including, without limitation, this paragraph.


3. Security

Protecting your personal information and preventing unauthorised access is one of our highest priorities. We take all reasonably necessary measures to safeguard your information against unauthorised access, use, alteration, disclosure or destruction. We employ industry-standard security technologies and procedures. However, we are not liable for unauthorised access by third parties, nor can we guarantee the absolute security of information transmitted via this website or by e-mail.

We may use your personal information to carry out appropriate anti-fraud checks. Such information may also be disclosed to credit-reference or fraud-prevention agencies that may keep a record of it. These actions are undertaken solely to confirm your identity.

Security breaches: If a personal-data security breach that poses a risk to the rights and freedoms of individuals occurs, THERA RESORT S.L. will notify the Spanish Data Protection Agency (AEPD) and, where appropriate, the affected individuals within 72 hours of becoming aware of the incident, in accordance with Article 33 of the GDPR.


4. How we use your personal information

We use your data for the following purposes:

  • Display website content in the most effective manner for your device.
  • Provide you with information, products or services you request.
  • Inform you about promotions and services we believe may be of interest to you.
  • Share it with authorised third parties (e.g., MyBooking) to manage your reservation.

Customer reviews: After renting a vehicle, we may ask for your opinion. By submitting a review, you agree it may be published. You may choose to display your name and country or remain anonymous.

Call recording: Calls may be recorded for training and quality purposes and automatically deleted unless retention is justified (e.g., suspected fraud).

Withdrawal of consent: All marketing emails include an “unsubscribe” link. You may also request removal by writing to info@supercarmarbella.com.


5. Controller and Processors

Data Controller: THERA RESORT S.L., CIF B56154438, Oasis Business Center Of-6, 29602 Marbella, Málaga, Spain.
Email: info@supercarmarbella.com

Data Processor: MyBooking (https://mybooking.es) processes your data solely to manage your reservation.

When a user starts a booking, they are redirected to MyBooking’s servers. All processing is compliant with GDPR and protected with technical and organisational measures under Article 30 GDPR.

If we use other service providers (e.g., payment gateways), they will be designated as processors and covered under Article 28 GDPR agreements.


6. Purpose and legal basis of processing

Personal data collected via the website are processed to:

  • Manage vehicle reservations.
  • Fulfil the rental contract.
  • Maintain commercial relations.
  • Send commercial communications (with explicit consent).
  • Comply with legal obligations (fiscal, administrative, etc.).

Legal bases:

  • Contract performance.
  • Explicit consent.
  • Compliance with applicable law.

7. Data retention

  • For the duration of the contractual or commercial relationship.
  • Up to five (5) years after contract end for legal, fiscal or administrative obligations, or to address potential liabilities.

8. Data disclosure to third parties

We will not transfer personal data except in the following cases:

  • To service providers essential to the contract (e.g., MyBooking).
  • To affiliated companies, only for internal admin and always under confidentiality and security agreements.
  • In compliance with legal, judicial or administrative obligations.
  • With your prior, informed and explicit consent.

We will never sell or rent your personal data for other purposes.

Information may also be provided to authorities where legally required or to investigate unlawful activity.


9. User rights

Users may exercise the following rights under GDPR:

  • Access
  • Rectification
  • Erasure (“right to be forgotten”)
  • Restriction of processing
  • Objection to processing
  • Data portability
  • Withdrawal of consent

You may also file a complaint with the Spanish Data Protection Agency (AEPD).

To exercise rights, write to info@supercarmarbella.com and attach a copy of your ID or proof of identity.


10. Cookies

We use first-party and third-party cookies for:

  • Technical operation
  • Analytics (user behaviour)
  • Advertising
  • Social-media integrations (e.g., Facebook Pixel)

Most cookies expire with the session or after max 24 months. See our Cookie Policy for details.

You may accept, reject or configure cookies in your browser. Continued use of this site implies acceptance of our cookie use.


11. Minors

We do not knowingly collect data from children under 14. If you’re under 14, you must not submit personal data without parental consent. If detected, such data will be deleted immediately.


12. Policy changes

We may update this Policy to reflect legal, technical or business changes. Any change will be published on this page with the update date.

Last update: 12-06-2025


13. Governing law and jurisdiction

This Policy is governed by Spanish law, in particular the GDPR and Organic Law 3/2018 (LOPDGDD). Both parties expressly submit to the Courts of Málaga, waiving any other jurisdiction.


14. Contact

For questions, requests or complaints, or to exercise your data rights, write to: info@supercarmarbella.com