Back to home

Privacy policy

Last updated: 4 November 2026

At Talleres Hermanos Ruiz S.L. we treat your data with the same care as your car. This policy explains clearly what data we collect through this website, what we use it for and what rights you have, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD) and Law 34/2002 (LSSI-CE).

1. Data controller

Given the volume and type of data we process, we are not required to appoint a Data Protection Officer. For any privacy question, please write to the address above.

2. What data we process

We only process the data you voluntarily give us:

• Appointment, quote or enquiry form: name, phone number, email address if provided, vehicle number plate or model, requested service and, if you write one, your message describing the fault. This data reaches us by email.
• WhatsApp, phone or email: the data you send us when contacting us by these means (name, phone number, email address and the content of your enquiry).
• Browsing data: data obtained through cookies, only if you accept them, as explained in the cookie policy.

A vehicle number plate can be considered personal data when it allows its owner to be identified, so we treat it with the same safeguards. We do not request special categories of data. If you give us data about another person (for example, the vehicle's owner), you confirm that you have their permission.

3. What we use your data for (purpose)

• Handling your appointment or quote request: contacting you to give you a price, confirm the day and time, and prepare for the vehicle's arrival.
• Answering your enquiries and quote requests.
• If you become a customer, providing the repair or maintenance service, issuing the quote, repair order and invoice, and managing the warranty.
• Only with your express consent, sending you maintenance or ITV reminders for your vehicle.

We do not make automated decisions or create profiles from your data.

4. Legal basis

• Consent of the data subject (art. 6.1.a GDPR): by ticking the acceptance box on the form or by contacting us voluntarily. You can withdraw it at any time, without affecting the lawfulness of prior processing.
• Pre-contractual measures and performance of a contract (art. 6.1.b GDPR): to prepare quotes and carry out the repairs you order.
• Compliance with legal obligations (art. 6.1.c GDPR): keeping invoices and documentation required by tax law and by Royal Decree 1457/1986 on vehicle repair workshops.

5. How long we keep data

• Appointment requests and enquiries that do not lead to a service: the time needed to deal with them and, at most, one year from the last contact.
• Customer data: for as long as the business relationship lasts and then for the applicable legal periods: six years for commercial and accounting documents (art. 30 of the Spanish Commercial Code), four years for tax documents, and the warranty period of the repairs.
• Data for maintenance reminders: until you withdraw your consent.

After these periods, the data is securely deleted or anonymised.

6. Recipients

We do not sell or transfer your data to third parties, unless legally required (for example, to the Spanish Tax Agency or to judges and courts when they request it).

To provide our services we use suppliers who may access data as data processors, with whom we have signed the contracts required by article 28 of the GDPR:

• Web hosting and email provider: Hostinger International Ltd., with servers in the European Union.
• Accounting and tax advisers, for invoicing management.
• Provider of the workshop management software.

If you contact us via WhatsApp, your data will also be processed by WhatsApp Ireland Limited (Meta group) under its own privacy policy, which may involve international transfers to the United States covered by the EU-US Data Privacy Framework and standard contractual clauses approved by the European Commission. The Google Maps map only loads if you accept it, in which case Google Ireland Limited will process browsing data under its policy.

7. Your rights

You can exercise the following rights at any time:

• Access: to find out what data of yours we process.
• Rectification: to correct inaccurate or incomplete data.
• Erasure: to ask us to delete your data when it is no longer needed.
• Objection: to object to us processing your data for a specific purpose.
• Restriction of processing: to ask us to keep the data but not use it, in the cases provided for by law.
• Portability: to receive your data in a structured, commonly used format, or have us send it to another controller.

You can also withdraw any consent you have given at any time.

How to exercise them

Send an email to info@talleresruiz-demo.es or a letter to C/ Ejemplo Industrial, 12, 41007 Sevilla, Spain, stating the right you wish to exercise and enclosing a copy of your ID or equivalent document proving your identity. We will reply within one month at most, which may be extended by two further months in complex cases, in which case we would let you know.

Complaints to the supervisory authority

If you believe we have not processed your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan, 6, 28001 Madrid, through its electronic office: www.aepd.es. We would appreciate it if you wrote to us first so we can try to resolve it.

8. Security

We apply appropriate technical and organisational measures to protect your data against loss, misuse or unauthorised access: encrypted connection (HTTPS) across the whole website, access to information restricted to the staff who need it, and regular backups.

9. Minors

This website is not aimed at children under 14. If you are under that age, please do not send us personal data without the consent of your parents or guardians.

10. Changes to this policy

We may update this policy to reflect legal changes or changes to our services. We will always publish the current version on this page, with the date of the last update.