Privacy policy

Last updated: 29 July 2026

This policy explains, in plain language, what personal information we collect when you use Renault Eurodrive, why we need it, who else sees it, how long we keep it and what you can ask us to do about it. It applies to our website, our mobile application and the messages we send you.

Most of our customers live outside Europe. Because we are a Spanish company and the vehicles are registered in France, European data protection law applies to your information wherever you live. That law is called the GDPR. In practice it means you have real, enforceable rights over your data, and this page tells you how to use them.

The essentials, in a few lines

We are Autoturistica Iberica SL, a Spanish company. Renault Eurodrive is our trade name.
We collect your identity, your contact details, your date and place of birth, your nationality, and copies of your passport and driving licence. We need them because your vehicle is registered in your name under a French customs scheme.
We never see, and never store, your card number.
We do not sell your data, and we do not use it for advertising unless you have accepted advertising cookies.
We share it with the vehicle manufacturer, the delivery and return centres, our service providers, and — if you booked through a travel agency — with that agency.
We keep your file for five years, then delete it.
You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Write to lease@renaulteurodrive.com and we will answer within one month.
If you are unhappy with our answer, you can complain to the Spanish data protection authority (AEPD).

1. Who is responsible for your data

The company that decides how your personal data is used — the "data controller" in legal terms — is:

Autoturistica Iberica SL
Calle Lola Flores 16, 28022 Madrid, Spain
Company tax number (CIF): ESB78843281

Renault Eurodrive is a trade name of Autoturistica Iberica SL, a company incorporated under Spanish law.

For anything concerning your personal data, write to lease@renaulteurodrive.com.

We have not appointed a Data Protection Officer. We are not required to have one, and we prefer to say so plainly rather than leave you guessing. Your requests are handled by our customer service team at the address above.

The law that applies is the European General Data Protection Regulation (GDPR), together with Spanish law: Organic Law 3/2018 on data protection and digital rights (LOPDGDD), and Law 34/2002 (LSSI-CE) for cookies and similar technologies.

2. What we collect, and when

When you create an account

Title, first name, last name, email address and a password. Your password is stored in scrambled form (hashed) — we cannot read it, and neither can anyone else who obtains our database.
Automatically, at the same moment: the IP address of the device you are using, the web page you came from, and the date and time. This helps us detect fraud and abuse, and troubleshoot problems.

When you book a vehicle

Title, first name, last name, maiden name (optional).
Your permanent home address outside Europe: street, postcode, city, country.
Your nationality, as shown on your passport.
At least one telephone number.
Your date of birth, and the city, postcode and country where you were born.
Your flight number and arrival time, if you know them (optional).
The reason for your stay (tourism, studies, internship, assignment, press), because it determines which documents you must provide.
Your booking itself: vehicle, dates, delivery and return centres, options, price.

What we no longer ask for. We used to ask for your passport number, its issue date and place, your occupation, and an address in France. We stopped. These fields have been removed from the booking process and from the "My profile" page. Older files created before this change still contain them; they will be deleted with the rest of the file at the end of the retention period.

The documents you upload

Depending on your nationality, your country of residence and the reason for your stay, we ask you for some of the following: passport or national identity card, driving licence, proof of address, employer or self-declared return attestation, student card and school certificate, residence permit or visa, consular card, tax notice, utility bills, CPS card. You also sign a rental contract and a purchase order, which we keep.

When you contact us

Contact form: your name, telephone number, email address and message, plus your IP address and the page you came from.
Newsletter: your email address only.
Emails you send us: their content, and any attachments.

When you use our mobile application

The same account and booking information as on the website.
A notification token, if you allow notifications. It identifies your device so that our messages reach it. We do not collect any advertising identifier and no hardware identifier.
Your GPS position, only if you allow it and only while you use the "places nearby" or "cheapest fuel" screens. We do not store it. It is passed to third-party mapping and public fuel-price services to answer your query.
Your handwritten signature, if you sign your purchase order in the app. It is embedded in the signed PDF.

When someone books on your behalf

If you booked through a travel agency or a booking platform that works with us, that agency gave us your details: title, first name, last name, email address, telephone number, nationality and country of residence. In that case your data did not come from you directly, and this policy tells you what happens to it next.

When you simply browse the site

Our servers record each request: IP address, date and time, page requested, response, browser type and referring page. Cookies and similar technologies are covered in section 10.

3. Why we use your data

To prepare and carry out your rental

To create your booking, produce your contract and purchase order, register the vehicle in your name, organise delivery and return, take payment, answer your questions and keep you informed of your file's progress.

Why we ask for your passport and driving licence

This is the part that surprises customers most, so here is the reason in full.

The vehicle you receive is not an ordinary rental car. It is a factory-new vehicle registered in your name under the French customs scheme known as "Transit Temporaire" (temporary transit), which is why the rental is tax-free. French customs allow this only if three conditions are met at the same time: you normally live outside the customs territory of the European Union (or in a French overseas territory), your stay in the EU is temporary, and you do not carry out paid work in the EU during your stay.

We therefore have to prove, document in hand, that you qualify — and the vehicle cannot be registered without your identity details. That is why identity documents are mandatory: if you do not provide them, we cannot register the vehicle and the rental cannot take place. The list of documents varies with your nationality and your country of residence, which is why two customers are not always asked for the same papers.

How we check your documents

When you send a document, our system reads it automatically (optical character recognition) to check that the name on it matches the name on the file. This is a safety check: one contract, one person. If the name does not match, or if the document is unreadable, it is flagged and a member of our team looks at it. No decision about your booking is taken by a machine alone — a person always makes the final call, and you can always ask us to review a rejected document.

To send you service messages

Confirmation of your order, payment receipts, reminders about missing documents, notice that your documents have been accepted or refused (with the reason), notice that your vehicle has been registered (including its registration plate and chassis number), delivery and return instructions, and your contract and voucher as PDF attachments. If you use the app and allow notifications, some of these arrive as push notifications.

To run and protect our service

To keep the site working, back up our data, prevent fraud and automated abuse, and — if you came to us through a partner agency — to calculate the commission we owe that agency.

To improve our service and, if you agree, to advertise

Audience measurement, advertising and review invitations only happen if you accept them. See section 10.

4. The legal basis for each use

European law requires us to have a specific legal justification for every use of your data. Here is ours.

What we do	Legal basis
Creating and managing your account, your booking, your contract, your payment and the service messages that go with them	Performance of our contract with you (GDPR Art. 6(1)(b))
Collecting and keeping your identity and residence documents; transmitting your identity so the vehicle can be registered; keeping invoices and contracts	Compliance with our legal obligations — customs, vehicle registration and accounting rules (Art. 6(1)(c))
Checking automatically that a document belongs to the person named on the file; site security and anti-robot protection; backups; tracking commissions owed to partner agencies	Our legitimate interest in preventing fraud, keeping the service secure and running our business (Art. 6(1)(f))
Answering the messages you send us	Your request, and our legitimate interest in replying to it (Art. 6(1)(f))
Audience-measurement and advertising cookies; newsletter; geolocation in the app; review invitations; commercial offers sent by push notification	Your consent, which you can withdraw at any time (Art. 6(1)(a))

Where we rely on our legitimate interest, you can object — see section 8.

5. Who receives your data

We do not sell your data and we do not rent it out. We share it only where it is needed to deliver your vehicle, to comply with the law, or to run the service. The recipients are:

The vehicle manufacturer (Renault / Dacia). To register the vehicle in your name we send a file containing your surname and first name, your address, your city, postcode and country, your date and place of birth, your nationality, your flight number and arrival time, your delivery date, the vehicle, the centres, the duration, your email address and your telephone numbers. Files created before 2025 also contained your passport number and your occupation.
The delivery and return centres. The independent companies that hand you the vehicle at the airport and take it back receive your identity and your rental details so they can prepare the handover. We also give you their contact details so you can reach them directly.
The travel agency or booking platform you booked through, if applicable. It can see your first name, last name and email address, your booking, the status of your file, and the documents you have provided — including your identity documents — so that it can follow your file through to delivery.
Our payment providers. A bank's secure payment gateway, and an online payment provider if you choose that option. See below.
Our technical service providers, acting on our instructions and on our behalf: the provider that hosts and maintains our servers and website, our email provider, the providers that deliver push notifications to your phone, our consent-management provider, the mapping and public fuel-price services used by the app, and a backup service that receives a nightly copy of our data.
Our review-collection providers, if you have consented: they receive your first name, last name, email address, order reference and, for one of them, the order amount, currency and payment method, so they can invite you to leave a review.
Public authorities — customs, tax authorities, police or courts — where the law requires us to answer them.

We describe our providers by category rather than by name because the list changes over time. If you want to know exactly which company handles a specific part of your data, write to us and we will tell you.

Payment: we never see your card number

When you pay by card, you are handed over to the secure page of our bank's payment gateway. Your card number, expiry date and security code are typed on that page, not on ours. They never reach our systems and we never store them. All we receive back is the outcome of the transaction: whether it succeeded, the authorisation code, the amount, the currency, and the brand, country and type of card. Our contract template contains card fields inherited from an old form; they are deliberately left empty.

If you pay through an online payment provider instead, that provider collects your details directly under its own privacy policy, and sends us back your name, email address, account identifier and country so we can reconcile the payment.

6. Sending your data outside the European Union

Our servers, our database and your documents are hosted in France, inside the European Union.

Some of the data described above nevertheless leaves the European Union, because some of our providers or recipients are established elsewhere or belong to non-European groups. This concerns:

our email provider, which belongs to a United States group;
the services that deliver push notifications to iPhone and Android devices, operated by United States companies;
the audience-measurement and advertising services described in section 10, if you have accepted them — these are operated by United States companies;
the mapping and fuel-price services used by the mobile app, some of which are hosted outside the European Union;
correspondence with the manufacturer's United States office, where your file goes through it.

For these transfers we rely on the safeguards provided for by the GDPR: an adequacy decision of the European Commission where one exists for the country concerned, or the European Commission's standard contractual clauses. You can ask us for details of the safeguards applying to a particular transfer by writing to lease@renaulteurodrive.com.

7. How long we keep your data

Category	Retention period
Identity documents: passport, identity card, driving licence, proof of address and other supporting documents	5 years
Orders, contracts, purchase orders, invoices and the messages relating to them	5 years
Customer account with no activity	3 years after your last order
Messages sent through the contact form	1 year
Newsletter subscription	3 years after our last contact with you
Server logs containing IP addresses	6 months

At the end of these periods the data is deleted. Where a longer period is imposed on us by law — for example an accounting or tax rule, or an ongoing dispute — we keep only what that rule requires, and only for as long as it requires.

8. Your rights, and how to use them

You have the following rights over your personal data, wherever you live:

Access. Ask us for a copy of the data we hold about you.
Rectification. Have inaccurate or incomplete data corrected. Most of your details can be corrected yourself from the "My profile" page of your account. Your email address is your login, so it can only be changed by asking us.
Erasure. Ask us to delete your data. We must keep some of it where the law requires — for example the contract and invoice for a rental that has taken place — and we will tell you exactly what we keep and why.
Restriction. Ask us to freeze the use of your data while a dispute about it is being resolved.
Portability. Receive the data you gave us in a machine-readable file, or have it sent to another provider.
Objection. Object to a use based on our legitimate interest, including review invitations and commercial messages.
Withdrawal of consent. Where you have consented — cookies, newsletter, geolocation, commercial notifications — you can withdraw at any time, with no effect on what was done before.

How to ask. Send an email to lease@renaulteurodrive.com. Tell us what you want and, if you have one, give us your order reference so we can find your file. There is no self-service "delete my account" button on the site today: deletion is done by us, on request, at the address above.

Our answer. We reply within one month. If your request is complex we may take up to two more months, and we will tell you before the first month is out. Our answer is free of charge.

Proof of identity. We will normally act on a request sent from the email address of your account. We will only ask for further proof if we have a genuine doubt about who is asking — never as a matter of routine.

You can unsubscribe from our newsletter at any time using the same form you used to subscribe, or by writing to us. Service messages about a booking in progress — payment, documents, delivery — are not marketing and cannot be switched off while your rental is live; you can turn off push notifications in your phone's settings.

9. Complaining to a supervisory authority

If you think we have mishandled your data, please tell us first: lease@renaulteurodrive.com. We would rather fix a problem than argue about it.

You also have the right to complain to a data protection authority. Because we are established in Spain, the competent authority is the Spanish Data Protection Agency:

Agencia Espanola de Proteccion de Datos (AEPD)
C/ Jorge Juan 6, 28001 Madrid, Spain
www.aepd.es

If you live in the European Union or the European Economic Area, you may also complain to the authority of your own country.

10. Cookies and similar technologies

A cookie is a small file stored by your browser. We use three kinds.

Strictly necessary cookies. They make the site work and cannot be switched off: your session (which keeps your basket, your dates and your login for 3 days), your chosen display language (1 year), your chosen currency (1 year), the cookie that remembers your cookie choice (1 year), the login session of the partner agency area, and the anti-robot protection on the contact and password-reset forms.
Measurement cookies. They tell us which pages are used and where visitors come from, so we can improve the site. They are only set if you accept them.
Advertising cookies. They measure the performance of our advertising campaigns and may be used to show you our ads on other websites. They are only set if you accept them.

We also set a partner-attribution cookie, valid for 30 days, when you arrive through the link of a partner agency. Its only purpose is to credit the agency with the commission on your booking.

Your choice. A banner asks for your choice on your first visit. Refusing is exactly as easy as accepting, nothing is pre-ticked, and refusal means the measurement and advertising services are not loaded at all. You can change your mind at any time using the "Cookie settings" button, which stays available on every page. That panel also lists each cookie, its purpose, its provider and how long it lasts.

11. How we protect your data

Everything you send us travels over an encrypted connection (HTTPS). Passwords are stored hashed and cannot be read back, by us or by anyone else. Access to customer files is restricted to the staff who need it, and your identity documents are only served through an access-controlled gateway. Backups are taken every night. We do not claim more than we do: your documents are stored on our servers as ordinary files, protected by access controls rather than by individual encryption, and we are working to strengthen this.

Please avoid sending identity documents as email attachments where you can. Uploading them in your account is safer, because ordinary email is not encrypted end to end.

If a security incident ever affects your personal data in a way likely to put you at risk, we will notify the supervisory authority and, where required, tell you directly.

12. Children

Our service is for adults who hold a valid driving licence. We do not knowingly collect data about children. If you believe a child's data has reached us, write to lease@renaulteurodrive.com and we will delete it.

13. Changes to this policy

We update this page whenever what we do with your data changes. The date at the top always shows the current version. If a change matters to you — a new purpose, a new category of recipient — we will tell you by email or through a notice on the site before it takes effect, and, where the change requires your consent, we will ask for it.

14. Contact

Autoturistica Iberica SL — Calle Lola Flores 16, 28022 Madrid, Spain — CIF ESB78843281
Email for anything relating to your personal data: lease@renaulteurodrive.com