Privacy Policy
Last updated: 06/12/2025
Off Road World (“we”, “our”, “us”) is committed to protecting your privacy and ensuring that your personal data is processed lawfully, transparently, and securely. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our dealership, use our website, or interact with us in any way.
This policy is designed to comply with the EU General Data Protection Regulation (GDPR) and Spain’s Ley Orgánica 3/2018 (LOPDGDD).
1. Data Controller
Off Road World
Avenida La Venta 39
Arboleas
04660
Spain
+34 614 75 09 64
offroadworldalmeria@gmail.com
2. Personal Data We Collect
We may collect the following categories of personal data:
a) Identification & Contact Information
-
Name
-
Address
-
Phone number
-
Email address
-
National ID / Passport details (if required for contracts)
b) Transaction & Contract Data
-
Purchase details
-
Financing information (if applicable)
-
Service and maintenance records
-
Warranty documentation
c) Website & Digital Interaction Data
-
IP address
-
Cookies and usage data
-
Contact form submissions
-
Newsletter subscription details
d) Marketing Preferences
-
Consent to receive promotional offers
-
Communication preferences
3. How We Collect Your Data
We collect your information when:
-
You purchase or reserve an ATV or related service
-
You fill out a form in-store or online
-
You contact us by email, phone, or social media
-
You visit our website (via cookies and analytics tools)
-
You subscribe to our newsletter or marketing lists
4. Legal Basis for Processing (GDPR)
We process your data under one or more legal bases:
-
Performance of a contract — for sales, service, reservations, and warranties
-
Legal obligation — tax, invoicing, and regulatory compliance
-
Legitimate interest — customer service, fraud prevention, improving our website
-
Consent — for marketing communications or cookies (where applicable)
5. Purpose of Processing
We use your personal data for:
-
Processing sales and service contracts
-
Managing reservations, repairs, and deliveries
-
Providing customer support
-
Handling payments and invoicing
-
Sending maintenance reminders
-
Marketing communications (only with your consent)
-
Website improvement and analytics
-
Complying with legal obligations
6. Data Sharing
We may share your data with:
-
Logistics providers (for vehicle delivery)
-
Payment processors
-
Insurance companies (if requested by you)
-
Manufacturers and warranty providers
-
Accounting and legal advisors
-
IT service providers (hosting, CRM, etc.)
-
Public authorities if legally required
We do not sell your personal data to third parties.
7. International Data Transfers
If any service providers process data outside the EU/EEA, we ensure adequate safeguards such as:
-
Standard Contractual Clauses (SCCs)
-
GDPR-compliant data processing agreements
8. Data Retention
We store your data only for as long as necessary:
-
Customer and contract data: 6–10 years (legal obligation)
-
Marketing data: until you withdraw consent
-
Website analytics data: according to cookie settings
-
Warranty and service history: for the lifetime of the product or as required
9. Your Rights under GDPR
You have the following rights:
-
Right of access – Request a copy of your personal data
-
Right to rectification – Correct inaccurate or incomplete information
-
Right to erasure – Request deletion of your data (in some cases)
-
Right to restrict processing
-
Right to data portability
-
Right to object – Especially to direct marketing
-
Right to withdraw consent at any time
To exercise these rights, contact us at:
[Insert Data Protection Email]
If not satisfied, you may file a complaint with the Spanish Data Protection Agency (AEPD).
10. Cookies
Our website uses cookies to improve user experience, analyze traffic, and manage preferences. Cookie usage is explained in our separate Cookie Policy, and you may manage preferences through our cookie consent tool.
11. Security Measures
We implement technical and organizational measures to protect your data, including:
-
Secure servers
-
Encryption where appropriate
-
Restricted access controls
-
Regular security audits
12. Changes to This Privacy Policy
We may update this policy to reflect changes in our services or legal requirements. The latest version will always be available on our website.
