Privacy policy

Last updated: 28 August 2026

This information is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (the GDPR). Because the service is operated from and directed at Spain, Spanish data protection law also applies — in particular Organic Law 3/2018 on the protection of personal data and the guarantee of digital rights (LOPDGDD).

1. Data controller

The controller is Tecnourban — tax identification number [company number], registered address at [registered address], [postcode] [town], Spain, email [contact email address]. For any data protection question, please write to [data protection email address].

2. What data we collect

Through the enquiry form we collect: your phone number, the town or postcode of the job, the equipment requested and the indicative hire dates, together with anything you write in the free text fields. We do not ask for special category data (Article 9 GDPR) and we ask you not to include any in the open fields.

As with any website, we also process technical browsing data (IP address, browser type, referring page) for security and statistical purposes, as set out in our cookie policy.

3. Purpose and legal basis

We process the form data in order to pass your enquiry to a maximum of three hire companies in the area you gave, so that they can prepare a quotation, and to manage the resulting communications. The legal basis is the taking of steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).

We additionally process data on the basis of our legitimate interests (Article 6(1)(f) GDPR) in keeping the site secure, producing aggregate statistics and, where necessary, establishing or defending legal claims. If you give specific consent to receive marketing communications, the basis is consent (Article 6(1)(a) GDPR), which you may withdraw at any time without affecting the lawfulness of processing carried out beforehand.

4. Who receives your data

We disclose your data to a maximum of three hire companies selected by area and equipment type. These companies act as independent controllers: they process your phone number in their own right in order to prepare a quotation, and they are themselves responsible for meeting their own information obligations towards you.

Data may also be accessed by technical suppliers acting as processors under the corresponding contracts (Article 28 GDPR): hosting and infrastructure providers, SMS and email delivery services, and analytics tools. We do not sell your data and we do not disclose it to any third parties other than those described here.

5. International transfers

Data is hosted on servers located in the European Economic Area. Should any supplier involve a transfer outside the EEA, it will be made on the basis of an adequacy decision or of standard contractual clauses approved by the European Commission.

6. How long we keep it

We keep enquiry data for as long as is needed to handle it and, after that, for the period during which legal claims may be brought or defended — as a general rule no more than 24 months from the last contact. Data processed on the basis of consent is kept until that consent is withdrawn.

7. Your rights

You may exercise at any time your rights of access, rectification, erasure, restriction of processing, data portability and objection (Articles 15 to 22 GDPR) by writing to the controller’s contact details given in section 1, providing proof of your identity.

If you believe the processing does not comply with the law, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid — www.aepd.es. If you are resident in another EU member state, you may also complain to your local supervisory authority.

8. Is providing data compulsory?

Providing your data is voluntary, but the phone number and the town are necessary in order to pass the enquiry to the hire companies: without them the service cannot be provided. The remaining fields are optional and simply help sharpen the quotation.

9. Automated decision-making

We do not take decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

10. Security

We apply appropriate technical and organisational measures to protect the data against unauthorised access, loss or alteration, in accordance with Article 32 GDPR.

⚠️ Note before publishing

This page is a working draft. Before publication the real controller details (tax identification number, registered address, contact email addresses) must replace the placeholders, the actual list of processors must be completed, and the text must be reviewed and approved by a qualified lawyer.