Provisional legal information

Privacy Policy

Updated 9 November 2026

Who processes the data

The controller for requests submitted through this website is the operator of CarFicha. Its registered legal name and address are still being confirmed. In the meantime, contact [email protected].

Data and purposes

Contact and call-booking forms may collect your name, email address, phone number, company, business type, message, language and requested time. The system also records technical information such as IP address, browser and form start time to limit abuse and protect the service.

We use these details to reply to an enquiry, arrange a requested demonstration or call, send a confirmation and protect the forms from automated misuse. We have not verified a marketing or newsletter purpose connected to these forms.

Legal bases

The intended legal basis for responding and arranging a requested demonstration is taking steps at the person’s request before entering into a contract. Abuse prevention and security may rely on legitimate interests, which still need to be documented and balanced. Legal obligations apply where relevant. The final bases and wording need legal validation.

Recipients and transfers

Authorised staff may access requests to handle them. The service uses hosting, database and email providers, but their names, locations and processing terms have not yet been published and must be confirmed.

When Google Calendar integration is enabled for call bookings, the details needed for the invitation and time are sent to that service; a Google Meet link may be created. Production countries, transfer safeguards and final configuration still need confirmation.

Retention

Requests remain in the administration register. We have not verified an automatic deletion task or confirmed a fixed retention period. The operator needs to define and publish the applicable period and deletion process.

Your rights

You may request access, rectification, erasure, restriction or objection, request portability where applicable, and withdraw consent where processing is based on it, by writing to [email protected]. You may also complain to the Spanish Data Protection Agency (AEPD). We may need to verify your identity before handling a request.

Customers of businesses using CarFicha

Businesses using the platform enter and manage data about their own customers and staff. In those workflows, the business may be the controller and CarFicha may act as a processor following its instructions; the contracts, data-processing agreement and exact roles still need confirmation. For rights relating to data entered by a business, contact that business first.