Privacy Policy

Privacy Policy

Crampon Point SL | NIF: B26876052

Last Updated: April 2026

1. Introduction and Data Controller

This Privacy Policy explains how Crampon Point SL, trading as Hire4Holidays (hereinafter "Hire4Holidays", "we", "us", or "our"), collects, uses, stores, and protects your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, "GDPR"), Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), and any other applicable data protection legislation.

Data Controller:

• • Company name: Crampon Point SL, trading as Hire4Holidays
• • Registered in Spain
• • NIF: B26876052
• • Location: Costa del Sol, Spain
• • Contact email: [email protected]

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us using the details above.

2. Personal Data We Collect

We collect and process the following categories of personal data when you use our website, create an account, or make a rental booking:

2.1 Identity and Contact Information

• • Full name
• • Residential address
• • Email address
• • Phone number

2.2 Payment and Financial Information

• • Credit or debit card details (collected and processed for payments and security deposits)
• • Transaction history and booking records

Please note: Payment card information is processed securely through our booking platform, Booqable, and its integrated payment processors. We do not store full card numbers on our own systems. Payment processing is subject to the security standards of the relevant payment service provider (PCI DSS compliance).

2.3 Account and Booking Data

• • Customer account login credentials (email address and password, stored in encrypted form)
• • Booking history and rental records
• • Deposit and payment status
• • Correspondence and communications with us

2.4 Technical Data

• • IP address and browser type (collected automatically by our website platform)
• • Pages visited and date/time of access (standard website logs)

3. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 of the GDPR:

• • Performance of a contract (Article 6(1)(b)): Processing is necessary to fulfil your rental booking, manage your customer account, process payments and deposits, and provide our holiday equipment hire services.
• • Legal obligation (Article 6(1)(c)): We may be required to retain certain data to comply with our legal and fiscal obligations under Spanish law, including obligations relating to invoicing, tax records, and anti-fraud measures.
• • Legitimate interests (Article 6(1)(f)): We process certain data to protect against theft, fraud, and misuse of rental equipment. We have assessed that these interests are proportionate and do not override your fundamental rights and freedoms.
• • Consent (Article 6(1)(a)): Where we rely on consent (for example, if we send optional service communications), you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4. How We Use Your Personal Data

We use your personal data strictly for the following purposes:

• • To process and manage your equipment rental bookings
• • To create and maintain your customer account for current and future bookings
• • To process payments and manage security deposits
• • To protect against fraud, theft, or misuse of rental equipment
• • To communicate with you regarding your booking, account, or customer service matters
• • To comply with our legal, tax, and regulatory obligations under Spanish law
• • To maintain accurate business and financial records

We do not use your personal data for any form of paid advertising, behavioural profiling, or third-party marketing. There are no paid advertisements on our website.

5. Sharing of Personal Data

We do not sell, rent, or trade your personal data to third parties. We may share your data only in the following limited circumstances:

• • Booqable platform: Our rental management and booking system is operated through Booqable (booqable.com), a third-party software provider. Your data is processed on the Booqable platform in accordance with their privacy policy and data processing agreement. Booqable acts as a data processor on our behalf.
• • Payment processors: Payment card information is handled by Booqable's integrated payment processing partners, subject to their own security and data protection standards (PCI DSS).
• • Legal and regulatory authorities: We may disclose personal data if required to do so by law, court order, or by a competent Spanish or EU regulatory authority.
• • Professional advisers: We may share data with our accountants, lawyers, or insurers where strictly necessary for the conduct of our business, subject to appropriate confidentiality obligations.

All third parties with whom we share data are required to handle it securely and in accordance with applicable data protection law.

6. International Data Transfers

Booqable is a Netherlands-based company operating within the European Economic Area (EEA). Your data processed through the Booqable platform remains within the EEA and is subject to GDPR protections. Should any data be transferred outside the EEA, we will ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

7. Data Retention

We retain your personal data for the following periods:

• • Customer account data: Retained for as long as your account remains active, plus a period of 3 years after your last booking or account activity, to allow for repeat bookings and to resolve any disputes.
• • Booking and transaction records (including payment data): Retained for a minimum of 5 years from the date of the transaction, in accordance with Spanish fiscal and commercial law obligations (Ley General Tributaria and Código de Comercio).
• • Website technical logs: Retained for a maximum of 12 months.

After the applicable retention period has expired, your data will be securely deleted or anonymised.

8. Your Rights Under GDPR

As a data subject, you have the following rights under the GDPR and Spanish data protection law:

• • Right of access (Article 15): You have the right to request a copy of the personal data we hold about you.
• • Right to rectification (Article 16): You have the right to request correction of any inaccurate or incomplete personal data.
• • Right to erasure (Article 17): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• • Right to restriction of processing (Article 18): You may request that we restrict the processing of your data in certain circumstances.
• • Right to data portability (Article 20): You have the right to receive your personal data in a structured, commonly used, machine-readable format.
• • Right to object (Article 21): You may object to processing carried out on the basis of our legitimate interests.
• • Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time.
• • Right to lodge a complaint: You have the right to lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD), at www.aepd.es, if you believe your rights have been infringed.

To exercise any of these rights, please contact us at: [email protected]. We will respond to all valid requests within 30 days.

9. Data Security

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. These measures include:

• • Secure data storage through the Booqable platform, which maintains its own security standards
• • Encrypted transmission of data via HTTPS
• • Restricted access to personal data on a need-to-know basis
• • Secure handling of payment data via PCI DSS-compliant processors
• • Regular review of our data protection practices

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the AEPD within 72 hours and, where required, inform you directly without undue delay.

10. Cookies and Website Tracking

Our website may use cookies and similar technologies for functional purposes (such as maintaining your session when logged in) and for basic website analytics. We do not use cookies for paid advertising or behavioural tracking.

A separate Cookie Policy or cookie consent notice may be displayed on our website. You can manage your cookie preferences through your browser settings at any time.

11. Children's Privacy

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us and we will take steps to delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, our services, or applicable law. The current version will always be available on our website, and the date at the top of the policy will indicate when it was last revised. Where changes are material, we will notify you by email or by a notice on our website.

13. Contact Us

If you have any questions, requests, or concerns regarding this Privacy Policy or the way we handle your personal data, please contact our data privacy contact:

• • Company: Crampon Point SL, trading as Hire4Holidays
• • NIF: B26876052
• • Address: Polígono Industrial La Dehisilla, Calle Los Panadero, F18. 29691 Manilva,
  Málaga, Spain
• • Email: [email protected]

You may also contact the Agencia Española de Protección de Datos (AEPD):

• • Website: www.aepd.es
• • Address: C/ Jorge Juan, 6, 28001 Madrid, Spain
• • Tel: +34 901 100 099

Crampon Point SL t/a Hire4Holidays · NIF: B26876052 · Costa del Sol, Spain

This document was prepared in accordance with GDPR (EU) 2016/679 and Spanish LOPDGDD 3/2018.