Privacy policy
- Who is responsible for your data: EVA SAILS s.r.o., a company established in Slovakia.
Key information
- Who is responsible for your data: EVA SAILS s.r.o., a company established in Slovakia.
- Why we use it: to reply to your rental request.
- Legal basis: your request – we need the data to take the steps you ask for before a rental agreement.
- Your rights: you can access, correct or delete your data and use the other rights described in section 6.
- More information: in the full policy below.
1. Who is responsible for your data
EVA SAILS s.r.o., Bajkalská 29/C, 821 08, Bratislava – Ružinov, SK, Company ID (IČO) 45885265, VAT ID (IČ DPH) SK2023161987.
Email: eva-sails@gmail.com. Phone: +34677886006.
We process personal data under the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the Slovak Personal Data Protection Act (Act No. 18/2018 Coll.).
2. What data we use, why and for how long
Rental requests
You can send us a request through the form on this website, by phone, on WhatsApp or Telegram, or by email. We use:
- your name, phone number and email address;
- how you would like us to contact you;
- the location, car, dates and pick-up point you choose;
- the driver’s age;
- your message and your language;
- UTM tags, if the address of the page you sent the form from contains them (labels that show which link or campaign brought you to our website).
Why: to reply to you, check availability and prepare an offer.
Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
How long: 365 days from your request. After that, the request is deleted automatically. If you sign a rental agreement, the data become part of your rental records, described below.
Rental agreement
We use:
- your identity document and driving licence;
- your address;
- details of every driver named in the agreement;
- how you pay and leave the security deposit;
- details of the car, its mileage, any damage and any incidents during the rental.
Legal basis: performing the rental agreement (Article 6(1)(b) GDPR) and complying with our legal obligations (Article 6(1)(c) GDPR).
How long: as long as accounting and tax law requires. This means:
- the agreement and accounting records: 10 years (Section 35 of the Slovak Accounting Act, Act No. 431/2002 Coll.), or longer if the law of the country where the rental takes place requires it;
- for rentals in Tenerife, a copy of the rental agreement: at least 1 year (Article 124.4 of Canary Islands Decree 72/2012);
- for rentals in Tenerife, the record we must keep for the Spanish SES.Hospedajes system: 3 years from the end of the rental (Article 5.3 of Royal Decree 933/2021).
Disclosures required by law
The law requires us to pass certain data to:
- for rentals in Tenerife, the Spanish Ministry of the Interior, through the SES.Hospedajes system (Article 6 of Royal Decree 933/2021);
- the authority that issued a traffic fine, so that it can identify the driver, as the traffic law of the country requires (in Spain, Article 11 of Royal Legislative Decree 6/2015);
- courts and the police, when they request it.
Legal basis: complying with our legal obligations (Article 6(1)(c) GDPR).
Complaints
We use the details of your complaint and our reply.
Legal basis: complying with our legal obligations (Article 6(1)(c) GDPR), as consumer protection law requires us to handle complaints (the Slovak Consumer Protection Act, Act No. 108/2024 Coll., and, for rentals in Tenerife, Canary Islands consumer law).
How long: as long as consumer protection law requires, and no longer than the time limit for bringing a legal claim about the matter.
Website security
We use your IP address, browser details, the page address, the time of your visit and any errors, recorded in our server logs and in Sentry, our error monitoring service. Our request form is protected from spam by ALTCHA, which does not use cookies.
Legal basis: our legitimate interest in protecting the website and the request form (Article 6(1)(f) GDPR).
How long: we keep logs only as long as we need them to investigate a problem. Backups are overwritten in cycles, so data we have deleted disappears from them as each new cycle replaces the old one.
Visitor statistics
We count visits with Umami, which runs on our own server. It uses no cookies and stores nothing on your device. We see only totals, which we do not share with anyone, and Umami does not link your visit to other websites. We use these statistics only to measure our audience and keep them for no more than 25 months.
Legal basis: our legitimate interest in knowing how our website is used (Article 6(1)(f) GDPR).
3. What we do not do
We do not send marketing messages, build profiles of you, make automated decisions about you or sell your data. We contact you only about your request or your rental agreement.
4. Who receives your data
We use the service providers listed below. For each one you can see what we use it for, where it processes data and, if it is outside the European Economic Area, which safeguard protects the transfer.
| EU server hosting provider | Hosting of the website, admin panel, database and backups | EU | eea |
| EU email delivery provider | Sending request notifications to managers | EU | eea |
| Telegram FZ-LLC | Request notifications to the managers’ Telegram chat | AE | scc |
| Functional Software, Inc. (Sentry) | Error monitoring of the website and admin panel | US | dpf |
If you choose to write to us on WhatsApp or Telegram, those services process your data under their own rules, as independent controllers.
5. Information you must give us
Required fields are marked in the form. Without them we cannot reply to your request.
6. Your rights
You have the right to:
- access your data;
- have it corrected;
- have it deleted;
- restrict how we use it;
- object to how we use it;
- receive it in a portable format.
To use any of these rights, email us at eva-sails@gmail.com and tell us which right you are using. We will reply within one month.
You can also complain to the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Galvaniho Business Centrum II, Galvaniho 7/B, 821 04 Bratislava: dataprotection.gov.sk. You can also complain to the data protection authority of the EU country where you live or work, or where you believe your rights were infringed (Article 77 GDPR).
7. Children
We rent cars only to adults who meet the minimum age set for the car. We do not knowingly collect data about children.
8. Vehicle location systems
If a car has a system that shows its location, your rental agreement says so. We check the car’s location only in case of theft, failure to return the car, an accident or a request for roadside assistance.
Legal basis: our legitimate interest in protecting the car and helping you (Article 6(1)(f) GDPR).
9. Changes to this policy
If we change this policy, we will publish the new version on this page and update the date below.
Last updated: November 2, 2026