Privacy Policy
Last update: 26/02/2026
Data Controller
- Responsible Two M rent a car SL
- NIF/CIF: B13712658
- Office Cami de son gotleu, 8 bajos, 07008 Palma (Balearic Islands, Spain)
- Email: proteccion.datos@2mrentacar.es
- Phone: +34 633 47 48 87
1. Applicable regulations
This policy complies with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD), as well as with applicable regulations on information society services.
2. What data do we process
Depending on the use of the website, we may try to:
- Identification and contact information: name, surname, email, telephone.
- User account details: credentials and data associated with your profile.
- Booking/service details: dates, collection/return location, preferences and related communications.
- Billing information: If applicable, to issue an invoice.
- Navigation data: IP and technical/statistical data (e.g., via Analytics), subject to cookies and/or privacy settings.
- Driver documentation (optional): driving license if you decide to contribute it to streamline the process.
We do not request special categories of data.If the user voluntarily includes additional data, it will only be processed to manage their request.
3. Purposes of the processing
- Manage user accounts and their access to private areas.
- Manage reservations and provide the service (pre-contractual measures, contract and customer service).
- Answer queries received via form, email, phone or WhatsApp.
- Administrative management and billing (if applicable).
- Site Security and prevention of abuse/fraud.
- Analytics and improvement of the website (if you accept cookies/measurement or according to the applicable settings).
We do not send promotional emails. via email or WhatsApp (depending on the information provided).
4. Legal basis
- Contract execution or pre-contractual measures: reservation management, user account and service provision.
- Consentwhen we request it (for example, non-essential cookies or voluntary submission of optional documentation).
- Legal obligation:compliance with tax/accounting obligations and requirements of authorities.
- Legitimate interest:site security, customer service and service improvement (balanced with your rights).
5. Data retention
- User account details: while it remains active or until you request its deletion (except for legal obligations).
- Reservations and service: during the contractual relationship and subsequent legal periods.
- Billing: during the periods required by tax/accounting regulations.
- Queries: the time needed to address them and follow up.
6. Recipients and those in charge
We can share data with:
- Technology providers (for example, hosting on Hostinger) as data processors, under contract and with limited access.
- PayPal For payment processing: PayPal acts as a payment service provider and will process data according to its own terms.
- Analytics providers (for example, Google Analytics) when enabled, subject to cookie settings and consent.
- Public authorities when there is a legal obligation.
We do not sell data or share it for third-party commercial purposes.
7. International Transfers
Some providers (for example, Google or PayPal) may process data outside the EEA. In these cases, appropriate safeguards provided for in the GDPR will apply (such as standard contractual clauses or other recognized mechanisms).
8. User Rights
You will be able to exercise the following rights:
- Access, rectification, deletion.
- Opposition and limitation
- Portability (where applicable)
- Withdraw consent at any time (without affecting prior lawfulness)
To exercise these rights, write to proteccion.datos@2mrentacar.es indicating the right and providing information that allows verification of your identity if necessary.
If you believe that your rights have not been respected, you can file a complaint with the Spanish Data Protection Agency (AEPD).
9. WhatsApp
If you contact us via WhatsApp, we will process your data (number and messages) to handle your request and manage the resulting relationship. Please note that WhatsApp is a third-party service and may process data according to its own policies.
10. Security
We apply reasonable technical and organizational measures to protect information and prevent unauthorized access, alteration, or loss.
11. Cookies
For information about cookies, please see the Cookies Policy.
12. Changes in policy
We may update this policy to reflect legal or technical changes. The current version will be the one published on this page with the date indicated.