1. Data controller
The data controller responsible for processing the personal data collected via this website and during the provision of rental services is:
Headline: José Antonio Martínez Rubio
Tax Identification Number: 45889175N
Trade name: Paddock Motorbike
Address: Av. Rafael Puig Lluvina, 32, Unit 29, 38650 Playa de las Américas, Santa Cruz de Tenerife, Spain
Telephone: +34 641 439 731
Email: info@paddockmotorbike.com
Website: https://paddockmotorbike.com/
From now on, the person responsible may be identified as Paddock Motorbike.
2. Applicable regulations
Personal data will be processed in accordance with:
- Regulation (EU) 2016/679 on the General Data Protection Regulation (GDPR).
- Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights.
- Royal Decree 933/2021, concerning record-keeping and reporting obligations in relation to accommodation and motor vehicle hire activities.
- Law 34/2002 on information society services and electronic commerce.
- Any other applicable Spanish and European regulations.
3. Personal data processed
Depending on the nature of your relationship with Paddock Motorbike, the following categories of data may be processed:
Identification and contact details
- First name and surname.
- Identity card, passport, TIE or NIF.
- Type, number and, where necessary, reference number of the document.
- Date of birth.
- Gender, where required by law.
- Nationality.
- Address and usual place of residence.
- Telephone.
- Email.
Details relating to the driving licence
- Type or category of licence.
- Permit number.
- Support number, where required.
- Country of dispatch.
- Date of issue and expiry date.
- Validity and authorised categories.
- A photograph of the licence, where requested for prior verification.
Temporary residence details
- Name and address of the hotel, flat, house or other accommodation used during your stay in Tenerife.
- Room or flat number, where provided or where necessary.
- Location and details required to find the accommodation.
This data is used for operational and security purposes during the hire period. It does not form part of the hirer’s and driver’s details that Annex II of Royal Decree 933/2021 requires to be recorded for vehicle hire.
Booking and contract details
- Booking number or reference.
- Dates, times and collection and return points.
- Motorcycle reserved and vehicle delivered.
- Additional services and accessories.
- Price, method and status of payment.
- Amount and method of providing the security.
- Signature and acceptance of the terms and conditions.
- Communications relating to the booking.
- Details of the second driver, where their inclusion is requested.
Information relating to the vehicle and its use
- Make, model, registration number, chassis number, colour and category.
- Mileage on delivery and return.
- Fuel level.
- Photographs or videos showing the condition of the motorbike and its accessories.
- Damage, breakdowns, accidents, fines and incidents.
- Geolocation data for the motorbike when it is fitted with GPS.
Financial and payment details
- Method of payment.
- Account holder.
- Information required to process payments, refunds and deposits.
- References, supporting documents and details provided by the bank, the payment terminal or the payment platform.
Paddock Motorbike will not store the CVV security code for cards. Electronic payments may be processed directly by banks or specialist providers.
Technical details of the website
- IP address.
- Device type, browser and operating system.
- Date and time of access.
- Pages visited and interactions with the site.
- Cookie identifiers and similar technologies, where consent has been given.
- Technical logs required for the security and operation of the website.
4. Photographs of documents
Where photographs of an identity card, passport or driving licence are requested, they shall be used exclusively for:
- Verify the customer’s identity.
- Check the validity and category of the driving licence.
- Draw up the contract correctly.
- Prevent identity theft and fraud.
- To collect the legally required data accurately.
The full photographs will not be used for commercial purposes nor will they be retained for the standard three-year period applicable to the SES.Hospedajes register.
Once the documentation has been checked, the images will be deleted as soon as possible and, at the latest, within seven days from the date the motorbike was handed over.
In exceptional cases, they may be retained for a longer period where there are indications of document forgery, identity theft, an accident, a breach of contract, a claim or legal proceedings that justify their retention. In such cases, they will be retained only until the matter has been resolved and the relevant liabilities have become time-barred.
Copies temporarily stored on backup systems may be retained for up to a further 30 days, provided they are not used for any other purpose and are deleted as part of the normal backup rotation.
Written data extracted from documents and required by regulations may be retained for the relevant statutory period.
5. Purposes and legal bases
Handling enquiries and requests
The data will be processed to answer enquiries, provide quotes, check availability and deal with pre-booking requests.
The legal basis is the implementation of pre-contractual measures requested by the data subject and, in the case of general enquiries, the legitimate interest in responding to them.
Booking and rental management
The data will be used for:
- Process and confirm the booking.
- Prepare and implement the contract.
- Check the driver’s identity and driving requirements.
- Manage deliveries and returns.
- Manage accessories, additional services, payments and deposits.
- Maintain the necessary communication throughout the tenancy.
- Manage cancellations, changes and refunds.
The legal basis is the performance of the contract and the implementation of pre-contractual measures.
Management of temporary residence data
The accommodation and, where provided, the room or flat number may be used for:
- Coordinate deliveries and returns.
- Correctly identify the location requested for the provision of a service.
- Contact the customer during the hire period.
- Handle any significant issues relating to the motorbike.
- To facilitate the recovery of the vehicle in the event of an accident, abandonment, failure to return the vehicle or an emergency.
- To ensure the safety of the customer, third parties and the motorbike.
The legal basis is the performance of the contract and Paddock Motorbike’s legitimate interest in coordinating the service effectively, managing incidents and protecting its fleet.
This information will not be disclosed to SES.Hospedajes as mandatory rental details, unless a regulation or a request from a competent authority stipulates otherwise.
Compliance with legal obligations
The data will be processed in order to comply with tax, accounting, insurance, administrative and public safety obligations.
This includes the recording and reporting of the data required by Royal Decree 933/2021 via SES.Hospedajes or the systems authorised by the Ministry of the Interior.
The legal basis is compliance with the legal obligations applicable to Paddock Motorbike.
Document verification and fraud prevention
The documentation may be checked to ensure that the rider holds a valid and appropriate licence, to prevent impersonation and to protect the motorbike, the customer and third parties.
The legal basis is the performance of the contract, compliance with legal obligations and Paddock Motorbike’s legitimate interest in preventing fraud and ensuring security.
Management of accidents, damage, fines and claims
The data may be used for:
- Handling accidents and breakdowns.
- Dealing with damage or loss.
- Identify the driver to the authorities.
- Liaising with insurers, garages, breakdown services and legal services.
- To make, pursue or defend claims.
The legal basis is the performance of the contract, compliance with legal obligations and the legitimate interest in safeguarding the rights of Paddock Motorbike.
Motorcycle security and geolocation
Geolocation may be used for:
- To trace a stolen, misappropriated, lost or unreturned motorbike.
- Manage emergencies, accidents and requests for assistance.
- To investigate significant breaches of territorial boundaries or prohibited uses.
- To ensure the safety of the vehicle, the customer and third parties.
- To provide the legally required information to the relevant authorities.
The legal basis is Paddock Motorbike’s legitimate interest in protecting its fleet, preventing crime, managing incidents and defending its rights, as well as compliance with applicable legal obligations.
Website operation and security
The technical data that is strictly necessary will be processed in order to keep the website operational, protect it against attacks, detect errors and prevent fraudulent use.
The legal basis is the legitimate interest in maintaining the security and operation of the website.
Web measurement and analysis
Where the user gives their consent, Google Analytics, Microsoft Clarity or other tools specified in the cookies policy may be used to gather statistics and understand how the website is used.
The legal basis is the user’s consent. These tools must not install cookies or carry out any unnecessary processing until such consent has been given.
6. Communications relating to the booking
Paddock Motorbike may send emails, messages or make phone calls where necessary to:
- Confirm or amend a booking.
- Request the necessary documentation.
- To make online check-in easier.
- Arrange a delivery or return.
- Please send the contract and the rental details.
- To communicate incidents, reminders or safety instructions.
- Manage payments, deposits, damage or claims.
These communications form part of the management of the reserve and are not of an advertising nature.
At present, Paddock Motorbike does not send out newsletters or general marketing communications. Should these be offered in the future, specific and separate consent would be sought in advance, which could be withdrawn at any time.
7. Compulsory information
Fields marked as compulsory are required in order to process the booking, draw up the contract, verify driving requirements, organise the service correctly or comply with a legal obligation.
Refusal to provide this information, the provision of incorrect information or a lack of valid documentation may prevent the booking from being confirmed or the rental from commencing.
Accommodation details are requested for operational and security purposes relating to the service. The room or flat number should only be provided if it is known or applicable.
Data requested solely for the purpose of arranging a special delivery or an optional service will not be required if that service has not been requested.
8. SES. Accommodation and the Ministry of the Interior
Paddock Motorbike is required to record and report certain details relating to the hirer, the drivers, the contract, the vehicle and the payment in accordance with Royal Decree 933/2021.
This information may be disclosed to the Secretary of State for Security, the law enforcement agencies, the judicial authorities and the Public Prosecutor’s Office in the cases provided for by law.
The computerised record of the data required by these regulations shall be retained for three years since the end of the tenancy.
This time limit applies to the data fields required by law, but does not mean that full photographs of documents used solely for verification purposes must be retained for three years.
Details relating to temporary accommodation, such as the hotel or room number, are processed separately and are not automatically included in the mandatory SES.Hospedajes register for car hire.
9. GPS geolocation
Paddock Motorbike’s motorbikes may be fitted with geolocation devices.
For security reasons, this policy does not disclose the make, model, physical location, technical specifications or platform used by these devices.
Access to geolocation data will be restricted to authorised persons and the technology provider supplying the service on behalf of Paddock Motorbike.
The information will not be used to create customer profiles for marketing purposes or to send personalised advertising.
The data may be accessed where necessary to deal with an incident, recover the vehicle, provide assistance, verify a material breach or fulfil a legal obligation.
In general, the geolocation data associated with a rental will be retained for a maximum of 30 days from completion. In the event of theft, an accident, a failure to return goods, a breach of contract, a complaint or legal proceedings, the data relating to that incident may be retained in a blocked format until the matter is resolved and for the duration of the applicable limitation periods.
10. Recipients of the data
The data may be disclosed or provided, where necessary, to:
- Ministry of the Interior, SES. Accommodation, Law Enforcement Agencies, judicial bodies and other competent authorities.
- Tax authorities and other public authorities.
- Banks, payment terminals and payment service providers.
- Insurance companies, insurance brokers and assistance services.
- Garages, surveyors and transport services when it is necessary to deal with a breakdown or damage.
- Consultancy services, legal professionals and claims services.
- Providers of web hosting, email, backups, bookings and IT maintenance.
- Geolocation technology providers.
- Google and Microsoft, provided the user consents to the use of their analytics tools.
- Other suppliers who need access to the data in order to provide a service on behalf of Paddock Motorbike.
Processors who process data on behalf of Paddock Motorbike must do so in accordance with its instructions, under the relevant data processor agreement and by implementing appropriate security measures.
Paddock Motorbike does not sell or lend personal data to third parties.
11. International transfers
Some technology providers may operate or have infrastructure outside the European Economic Area.
Where an international transfer takes place, Paddock Motorbike will ensure that it is covered by:
- A compliance decision by the European Commission.
- Standard contractual clauses approved by the European Commission.
- The EU-US Data Privacy Framework, where applicable.
- Another valid safeguard recognised by the GDPR.
Any analytical tools that may involve such transfers will only be activated once the user has given their consent via the cookies system.
12. Retention periods
The data will be retained for the following periods:
- Enquiries that do not result in a booking: up to 12 months from the last communication.
- Booking and contract details: during the term of the contract and thereafter for a maximum period of five years in order to address any potential contractual liabilities.
- Tax details, invoices and accounting documents: for the periods required by tax and company law, which may be up to six years.
- Information required under Royal Decree 933/2021: three years from the end of the tenancy.
- Photographs of your national identity card, passport or driving licence: until the verification process is complete and, at the latest, seven days from the date of delivery, unless there are justified circumstances.
- Backups that temporarily contain deleted documents: up to 30 additional days.
- Accommodation details and room or flat number: up to 30 days from the end of the tenancy, unless there are valid grounds.
- GPS data: up to 30 days from the end of the tenancy, unless there are valid grounds.
- Photographs showing the condition of the motorbike, accidents or damage: for as long as they may be necessary to perform the contract or to establish, exercise or defend claims.
- Technical safety records: for as long as is necessary to investigate incidents and, generally speaking, for up to 12 months.
- Data processed via cookies: for the periods specified in the cookie policy.
Once the relevant period has expired, the data will be deleted or blocked to prevent its use, and will only be retained where there is a legal obligation to do so or where liabilities may arise.
13. Other people’s personal data
When a person provides details of a second driver or another third party, they declare that they are authorised to do so and must inform that person of this privacy policy.
The second driver must be aware of and agree to the processing of their personal data before being included in the contract.
14. Automated decisions
Paddock Motorbike does not make decisions that have legal effects on the customer based solely on the automated processing of their data.
The assessment of practical driving ability and decisions relating to the issue of a motorbike licence will be carried out by one person.
15. Data security
Paddock Motorbike will implement reasonable technical and organisational measures to protect data against:
- Unauthorised access.
- Loss or destruction.
- Tampering or unauthorised disclosure.
- Use for purposes other than those stated.
- Website attacks and vulnerabilities.
Access to identity documents, driving licences and geolocation data will be subject to particularly strict restrictions.
However, no system connected to the internet can guarantee absolute security. Should a security breach occur that poses a risk to those affected, we will act in accordance with our legal obligations regarding assessment and notification.
16. Rights of data subjects
Anyone can apply for:
- Access to your personal data.
- Correction of incorrect data.
- Deletion of data where appropriate.
- Restrictions on processing.
- Objection to processing based on legitimate interests.
- Data portability, where applicable.
- Withdrawal of consent, without affecting the lawfulness of previous processing.
To exercise these rights, please write to:
The request must specify the right you wish to exercise. Where necessary to verify your identity, additional information may be requested; however, a full copy of the document will not be requested unless absolutely essential.
The person concerned may also lodge a complaint with the Spanish Data Protection Agency, in:
17. Cookies
The website uses essential technical cookies and, subject to consent, measurement and analysis tools.
Detailed information on cookies, providers, purposes, duration and how to withdraw consent can be found in the cookie policy.
Users can reject non-essential cookies just as easily as they can accept them, and can change their preferences at a later date.
18. Third-party links and services
The website may contain links to web pages, maps, social media sites or other services managed by third parties.
When a user leaves the Paddock Motorbike website, the processing of their data is subject to the relevant third party’s policies.
19. Language and translations
The original version of this policy was drafted in Spanish.
Versions available in other languages may have been generated or assisted by machine translation systems and may contain errors or differences in interpretation. We recommend consulting the Spanish version.
In the event of any discrepancy, the Spanish version shall prevail, without prejudice to any mandatory rights to which the user is entitled under applicable legislation.
20. Policy changes
Paddock Motorbike may update this policy should there be changes to its services, suppliers, data processing practices or the applicable legal obligations.
The current version will be the one published on this page, showing the date of its last update.