Privacy Policy
This is a courtesy translation. In the event of any discrepancy, the Spanish version prevails.
Last updated: 24 March 2026
1. Data Controller
In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (hereinafter, the GDPR) and Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y garantía de los derechos digitales (Spain's Data Protection and Digital Rights Act; hereinafter, the LOPDGDD), we inform you that the controller of your personal data is:
- Controller: Juan Antonio Puchalt Portales
- NIF (Spanish tax identification number): 73750725Y
- Address: Cami Algudor 15 - C, 46460 Silla, Valencia, Spain
- Telephone: 637 300 602
- Email: parkingcaravanasvalencia@gmail.com
- Website: https://caravanasvalencia.es/
2. Data Protection Officer (DPO)
The Data Controller has appointed a Data Protection Officer whom you may contact with any question relating to the processing of your personal data:
- DPO: Juan Antonio Puchalt Portales
- DPO contact: parkingcaravanasvalencia@gmail.com
3. Personal data we collect
Through our website, we collect personal data only when you provide it to us voluntarily using the contact form. The data we may collect is:
- First name and surname(s)
- Email address
- Telephone number
- Message or enquiry (which may include any additional data the user chooses to provide voluntarily)
We do not collect specially protected data (special categories of data under Article 9 GDPR). The fields marked as mandatory on the form are necessary for us to deal with your request; if you choose not to provide them, we will be unable to handle your enquiry.
4. Purposes of processing, legal bases and retention periods
Your personal data will be processed for the following purposes:
| Purpose | Legal basis (GDPR) | Retention period |
|---|---|---|
| Managing and replying to enquiries, requests for information and requests for quotes sent through the contact form | Consent of the data subject (Art. 6(1)(a) GDPR) | Until the enquiry has been resolved and, in any event, for a maximum of 12 months from the last communication |
| Pre-contractual management: preparing quotes and commercial proposals requested by the data subject | Taking steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR) | Until the contract is signed or, if no contract is entered into, 6 months from the last communication |
| Managing the contractual relationship: providing the contracted caravan and motorhome storage service | Performance of a contract (Art. 6(1)(b) GDPR) | For the duration of the contractual relationship and thereafter for the applicable statutory limitation periods (5 years under Article 1964 of the Código Civil, the Spanish Civil Code) |
| Compliance with legal, tax and accounting obligations | Compliance with a legal obligation (Art. 6(1)(c) GDPR) | The periods laid down by current tax and commercial legislation (a minimum of 4 years under the Ley General Tributaria, Spain's General Tax Act; 6 years under the Código de Comercio, the Spanish Commercial Code) |
| Sending commercial communications about our services (only if the data subject has given express consent) | Consent of the data subject (Art. 6(1)(a) GDPR) | Until the data subject withdraws consent |
Once the retention periods indicated have expired, your data will be erased or, where appropriate, irreversibly anonymised.
5. Recipients of the data
Your personal data will not be disclosed to third parties except in the following cases:
- Legal obligation: where necessary to comply with a legal obligation (for example, disclosures to the Agencia Tributaria (Spanish Tax Agency), the courts and tribunals, or the State law enforcement agencies).
- Service providers: providers that supply services necessary for the controller's business (for example, the web hosting provider and the email provider). These providers act as data processors and are contractually bound to process your data in accordance with the GDPR and solely for the purposes entrusted to them.
Your data will not be disclosed to third parties for commercial purposes, nor will it be sold to any company or organisation.
6. International data transfers
As a general rule, your personal data will not be subject to international transfers outside the European Economic Area (EEA).
Should any data processor be located outside the EEA, a transfer will only take place where appropriate safeguards are in place in accordance with the GDPR, such as:
- Adequacy decisions of the European Commission (Art. 45 GDPR).
- Standard contractual clauses adopted by the European Commission (Art. 46(2)(c) GDPR).
- Binding corporate rules or other recognised transfer mechanisms.
7. Rights of the data subject
Under the GDPR and the LOPDGDD, you have the right to exercise the following rights in relation to your personal data:
- Right of access (Art. 15 GDPR): to obtain confirmation as to whether your data is being processed and, if so, to access it and information about the processing.
- Right to rectification (Art. 16 GDPR): to request the correction of inaccurate data or the completion of incomplete data.
- Right to erasure ("right to be forgotten") (Art. 17 GDPR): to request the deletion of your data where, among other grounds, it is no longer necessary for the purpose for which it was collected.
- Right to object (Art. 21 GDPR): to object to the processing of your data in certain circumstances.
- Right to restriction of processing (Art. 18 GDPR): to request that the processing of your data be restricted in the cases provided for by law.
- Right to data portability (Art. 20 GDPR): to receive the data you have provided to us in a structured, commonly used and machine-readable format, and to transmit it to another controller.
- Right not to be subject to automated individual decision-making (Art. 22 GDPR): not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. We inform you that we do not carry out automated decision-making or profiling.
- Right to withdraw consent (Art. 7 GDPR): where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise any of these rights, you may contact the Data Controller by the following means:
- Email: parkingcaravanasvalencia@gmail.com (stating "Data Protection" in the subject line)
- Post: Cami Algudor 15 - C, 46460 Silla, Valencia, Spain (marked for the attention of "Data Protection")
In both cases, your request must be accompanied by a copy of your DNI (Spanish national identity card), passport or other document proving your identity, in accordance with Article 12 GDPR.
We undertake to respond to your request within a maximum of one month of receipt. This period may be extended by a further two months for complex or numerous requests, in which case you will be notified in advance.
8. Right to lodge a complaint with the supervisory authority
If you consider that the processing of your personal data infringes current legislation, you have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD, the Spanish Data Protection Agency):
- Address: C/ Jorge Juan, 6, 28001 Madrid
- Website: https://www.aepd.es
- Telephone: 901 100 099 / 912 663 517
However, before lodging a formal complaint, we recommend that you contact us so that we can try to resolve any issue relating to the protection of your data.
9. Security measures
The Data Controller has implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 GDPR, including, among others:
- HTTPS protocol (SSL/TLS encryption) across the entire website to protect data in transit.
- Anti-spam protection on forms (honeypot field).
- Restricted access control to stored personal data.
- Procedures for managing security incidents and notifying personal data breaches.
10. Contact form
By submitting the contact form on our website, you confirm that you have read and accepted this Privacy Policy. The data collected through the form (name, email address, telephone number and message) will be processed for the sole purpose of handling your enquiry or request for information.
The form includes an anti-spam protection system (honeypot field) that does not collect any additional personal data.
Data submitted through the form is sent by email to the Data Controller and is not stored in any website database.
11. Data relating to minors
Our services are not aimed at children under the age of 14. We do not knowingly collect personal data from children under 14 without the consent of their parents or legal guardians, in accordance with Article 7 LOPDGDD.
If you become aware that a child under 14 has provided us with personal data without the consent of a parent or guardian, please contact us so that we can delete it immediately.
12. Cookies and tracking technologies
This website does not use its own or third-party cookies for analytics or advertising purposes. For more information, please see our Cookie Policy.
13. Links to third-party sites
Our website may contain links to third-party websites (for example, Google Maps and WhatsApp). These sites have their own privacy policies and we accept no responsibility for the data processing they carry out. We recommend that you read the privacy policies of those sites before providing them with your personal data.
14. Changes to the Privacy Policy
The Data Controller reserves the right to amend this Privacy Policy at any time to adapt it to new legislation or case law, or to changes in the business's activities.
Any amendment will be published on this page together with the date of the last update. We recommend that you review it periodically to stay informed about how we protect your personal data.
Where amendments substantially affect the processing of your data or require your consent, we will notify you appropriately before the changes take effect.
15. Governing law
This Privacy Policy is governed by current Spanish and European data protection legislation, in particular:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
- Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y garantía de los derechos digitales (LOPDGDD).
- Ley 34/2002, de 11 de julio, de Servicios de la Sociedad de la Información y de Comercio Electrónico (LSSI-CE, Spain's Information Society Services and E-commerce Act).
Any dispute arising from the interpretation or application of this Privacy Policy shall fall within the jurisdiction of the Courts and Tribunals of the user's place of residence, in accordance with current legislation.