Privacy policy

1. Data controller

• Controller: FAM TINASEP, S.L., trading as Evolve Cars
• Tax ID (NIF): B64272313
• Registered address: Camí de Serra Granada, 30, 08187 Santa Eulàlia de Ronçana (Barcelona), Spain
• Data protection contact email: consultas@evolve-cars.com
• Phone: +34 679 96 48 26

2. How we process personal data

This website does not use analytics, advertising, cookies or embedded third-party content, and its fonts are served from the site itself. The processing activities are the following.

2.1. Enquiries by WhatsApp, phone or email

• How it works: the contact, import order and financing forms do not send your details to any server or store them. They prepare a message that opens in your WhatsApp, and you send it yourself. You can also call or email us.
• Data: what you type (name, phone and, depending on the form, the car you are looking for, your budget, your preferences and your message), your number and the content of the conversation.
• Purpose: to answer your enquiry, prepare a proposal and keep in touch as a result of it.
• Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• Retention: for as long as the enquiry lasts and, if it does not lead to a purchase or an order, for up to 12 months after the last contact.
• WhatsApp: when you use WhatsApp, WhatsApp Ireland Limited processes the metadata and the delivery of messages under its own privacy policy, and may transfer data to Meta Platforms, Inc. (United States), which participates in the EU-U.S. Data Privacy Framework.
• Marketing communications: only if you have given us your express consent (Art. 6(1)(a) GDPR and Art. 21 of Spanish Law 34/2002), which you can withdraw at any time.

2.2. Buying, reserving or ordering a car

• Data: identification (name and ID or tax number), contact details, address, details of the car and of the transaction, payment and, if you ask for it, financing details.
• Purpose: to prepare and perform the sale, reservation or import order contract, to handle the car's paperwork (transfer, import and registration) and to comply with legal obligations.
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and compliance with legal obligations (Art. 6(1)(c) GDPR).
• Recipients: the Spanish Tax Agency and the Directorate-General for Traffic (DGT); the agency handling the car's paperwork and, if you ask for financing, the lender assessing it.
• Retention: for as long as the relationship lasts and then for the periods set by law (generally six years for commercial records and four for tax records).

2.3. Server logs

• Data: IP address, browser, date and time of access and page requested.
• Purpose: to serve the website, keep it secure and detect errors.
• Legal basis: legitimate interest in the security and operation of the service (Art. 6(1)(f) GDPR).
• Retention: logs of the server functions, 90 days; access logs of the hosting service, the period applied by Amazon Web Services.

2.4. Management panel

Only authorised Evolve Cars staff can access it. Their email address and password, which is stored encrypted, are processed to identify who signs in and to protect the panel (Art. 6(1)(f) GDPR), for as long as the access is active.

3. Recipients

3.1. We do not disclose data to third parties, except where required by law and to the recipients listed in section 2.2.

3.2. The following providers access the data as processors, because they are needed to provide the service:

3.3. International transfers: the website does not need any to work. Pages may be delivered through servers of the Amazon network outside the European Union, covered by the Amazon Web Services standard contractual clauses. If you write to us on WhatsApp, section 2.1 applies.

4. Your rights

4.1. You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent given, by emailing consultas@evolve-cars.com and stating the right you wish to exercise. We may ask you to prove your identity.

4.2. If you believe your data are not being processed properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid).

5. Security

5.1. We apply appropriate technical and organisational measures to protect your data, including HTTPS encryption of communications and access control to our systems.

6. Children

6.1. This website is not aimed at children under 14 and does not knowingly collect their data.

7. Changes to this policy

7.1. This policy may be updated to reflect changes in the law or in the service. The version in force is the one published on the website.

Last updated: 14 September 2026