Privacy Policy
Canary Island Rover | GDPR and EU visitor notice
1. Who we are and scope
Canary Islands Consulting, LLC, DBA Canary Island Rover ("Canary Island Rover", "CIR", "we", "us" or "our") operates https://www.canaryislandrover.com. We provide classic-vehicle sourcing, inspection, export/import coordination, restoration-related coordination and related consultancy services.
For the personal data described in this notice, the data controller is Canary Islands Consulting, LLC, DBA Canary Island Rover. Registered contact address: 2401 E 6th St, Ste 3037-319, Austin, TX 78702, USA. Operational activity is carried out in Santa Cruz de Tenerife, Canary Islands, Spain. For privacy requests, email adam@canaryislandrover.com.
This notice applies to visitors, prospective buyers, sellers, clients and other people who interact with our website, buyer survey, contact form, consultation booking tools, email, WhatsApp or social-media channels. It is intended to provide the information required by the EU General Data Protection Regulation (GDPR), including for visitors in the European Economic Area (EEA) and the United Kingdom, as applicable, and relevant Spanish data-protection and electronic-communications rules.
2. Personal data we collect
Information you submit: first and last name, email address, telephone or WhatsApp number, preferred contact method, country, enquiry type, desired vehicle and specification, vehicle budget, delivery destination, timing, message content, attachments or documents you choose to send, and any information contained in a buyer survey or consultation request.
Consultation information: where you book a call, we may receive the information you provide through the booking service, including your name, email, telephone number, selected time and meeting notes.
Technical and consent information: IP address or approximate device/network information, browser/device information, pages or interactions necessary for site operation and security, and the date, time and version of the privacy notice or consent wording accepted. This information may be collected through server logs, security tools, forms and cookies.
We do not ask you to submit special-category data, such as health information, political opinions, religion or biometric data. Please do not send that information unless it is strictly necessary and we have asked for it.
3. Why we use data and the legal bases
We use personal data only for the following purposes and legal bases:
| Purpose | Data typically used | Legal basis under GDPR |
|---|---|---|
| Answer enquiries, assess a vehicle-search brief, arrange a consultation and provide requested information. | Contact details, country, vehicle needs, budget range, message and survey responses. | Consent where you actively submit a form and tick the consent box (Art. 6(1)(a)); and, where relevant, steps taken at your request before entering a contract (Art. 6(1)(b)). |
| Provide and administer an engagement after a signed agreement, including sourcing, inspection, export/import or delivery coordination. | Client contact, vehicle, logistics and transactional information needed for the engagement. | Performance of a contract (Art. 6(1)(b)). |
| Meet legal, tax, accounting, customs, fraud-prevention and dispute-management obligations. | Information necessary for the relevant obligation or claim. | Legal obligation (Art. 6(1)(c)) and/or legitimate interests in protecting our business and legal rights (Art. 6(1)(f)). |
| Keep the website, forms and systems secure; prevent spam and misuse; maintain records showing consent. | Technical, form-submission and consent-record data. | Legitimate interests in security, service integrity and compliance (Art. 6(1)(f)); consent records may also be retained to demonstrate consent. |
| Send marketing communications, guide updates or promotional messages. | Name, email and marketing preferences. | Separate, freely given consent (Art. 6(1)(a)), unless another lawful basis is clearly permitted by applicable law. We do not treat the enquiry-form consent box as consent for marketing. |
| Use non-essential analytics, preference or marketing cookies. | Cookie/device identifiers and related browsing data. | Consent through the cookie banner or preference centre (Art. 6(1)(a)). |
4. Consent and your choices
Our contact form and buyer survey include a checkbox asking you to consent to storage of your submitted information so we can respond to your enquiry. Please do not submit a form if you do not want us to use the information for that purpose. You may withdraw consent at any time by emailing us. Withdrawal does not affect the lawfulness of processing before withdrawal and may prevent us from continuing to respond or provide the requested service.
Marketing is optional. If you separately opt in to marketing, you can unsubscribe through the link in a marketing email or by contacting us. You can manage non-essential cookie choices at any time through the "Manage Cookie Consent" link on the website.
5. Who receives personal data
We do not sell or rent personal data. We may share data only where necessary with the following categories of recipients:
Website hosting, maintenance, security and backup providers; form, email and customer-communication providers; consultation-booking providers; payment, accounting or professional advisers; vehicle sellers, inspection centres, restoration providers, freight forwarders, customs brokers, insurers and delivery providers when you ask us to coordinate a vehicle transaction; and public authorities or other parties where disclosure is required by law or necessary to establish, exercise or defend legal claims.
Where a third-party service is used directly by you, such as WhatsApp, Instagram, Facebook, YouTube or a booking platform, that provider may process information under its own privacy notice. We do not control the independent processing carried out by those providers.
6. International transfers
CIR is a U.S. company with operational activity in Spain and clients worldwide. Personal data may therefore be accessed or processed in the United States, Spain, the EEA and other countries where our suppliers or service providers operate.
Where GDPR applies and a transfer is made to a country not recognised by the European Commission as providing an adequate level of protection, we will use an appropriate transfer mechanism, such as the European Commission Standard Contractual Clauses, supplementary safeguards where appropriate, or another lawful mechanism. You may request information about the relevant safeguards by emailing us.
7. How long we retain data
We keep personal data only for as long as necessary for the purpose for which it was collected, unless a longer period is required or permitted by law. Our usual retention approach is:
| Record type | Usual retention period |
|---|---|
| Contact-form enquiries and buyer surveys that do not become a client engagement | Up to 24 months after the last meaningful interaction, then deleted or anonymised unless a longer period is needed for an ongoing enquiry, consent record, legal claim or legal obligation. |
| Client / contractual records | For the engagement term and then for the applicable statutory accounting, tax, limitation and record-keeping periods. |
| Marketing-consent records and suppression / opt-out records | For as long as necessary to demonstrate consent or respect the opt-out, taking account of applicable limitation periods. |
| Security logs and anti-spam records | For the shortest reasonable period needed for security, troubleshooting and incident response. |
| Cookies and similar technologies | For the period shown in the cookie-preference centre or until you withdraw consent, clear cookies or they expire. |
8. Your rights under GDPR
Subject to applicable law, you may request: access to your data; correction of inaccurate data; deletion; restriction of processing; portability of data you provided; objection to processing based on legitimate interests; and withdrawal of consent at any time. You also have an unconditional right to object to direct marketing.
To exercise a right, email adam@canaryislandrover.com with the subject line "Privacy Request." We may ask for reasonable information to verify your identity before acting on a request. We will respond within the time required by applicable law.
You may lodge a complaint with the Spanish Data Protection Agency (Agencia Espanola de Proteccion de Datos, AEPD) at www.aepd.es, or with the supervisory authority in your EEA country of habitual residence, workplace or the place of the alleged infringement. This does not limit any other legal remedy available to you.
9. Automated decisions and profiling
We do not make decisions about you solely through automated processing that produce legal or similarly significant effects. Vehicle-search or service decisions are made by people. We may use basic form, consent and security checks to help prevent spam or abuse.
10. Security
We use reasonable technical and organisational measures designed to protect data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. No internet transmission or storage system is completely secure; please avoid including unnecessary sensitive information in forms or email.
11. Children
Our services are not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided personal data, contact us so we can take appropriate action.
12. Links to third-party sites
Our website may link to websites or services operated by third parties. Their privacy practices are governed by their own notices, and we are not responsible for their content or practices.
13. Changes to this notice
We may update this Privacy Policy when our processing, services or legal obligations change. We will post the revised policy on this page and update the "Last updated" date. Material changes may also be communicated by an additional notice where appropriate.
14. Contact
Privacy contact: adam@canaryislandrover.com
Controller: Canary Islands Consulting, LLC, DBA Canary Island Rover
Address: 2401 E 6th St, Ste 3037-319, Austin, TX 78702, USA
Operational activity: Santa Cruz de Tenerife, Canary Islands, Spain
Website: https://www.canaryislandrover.com