KARATS AUTO

Privacy policy

What personal data we handle, why, and what you can do about it.

Who handles your data

KARATS AUTO, S.L., tax number B05735238, C/ Floridablanca 68, 08015 Barcelona, Spain. Contact: [email protected].

What data we use and why

This website has no forms, user accounts, payments or online reservations. If you contact us by telephone, email or WhatsApp, we use your name, contact details, message and the information you provide to respond. Please do not send identity documents or bank details in an initial enquiry.

  • Purchase enquiries: pre-contract steps at your request, GDPR Article 6(1)(b).
  • Other enquiries: our legitimate interest in handling communications about the business, Article 6(1)(f).
  • If a transaction is agreed: data needed for the contract, delivery and support is processed under Article 6(1)(b); invoicing and tax and administrative duties under Article 6(1)(c). Before requesting additional data, we will explain its purpose and recipients.
  • Website operation and security: Cloudflare processes connection data such as IP address, browser, requests and time. The legitimate interest is to serve and protect the site and understand aggregate usage, Article 6(1)(f). We do not use advertising pixels or browser-based tracking analytics.

We need a way to contact you and the details of your enquiry to respond. You do not have to provide unrelated information. Contacting us does not subscribe you to advertising. The website does not make automated decisions with legal effects or create marketing profiles.

Retention

Enquiries are kept while needed to answer and follow up on your request. Afterwards, only information needed for legal duties or potential claims is retained, with access restricted where required. Accounting documents have a statutory six-year retention period; other data follows the time limits relevant to its purpose. Retention of Cloudflare technical logs depends on the service and log type; it supports service provision, incident investigation and legal obligations. You can request information about your data at the email above.

Providers and recipients

The site is hosted and delivered by Cloudflare; company email uses OVHcloud. These providers process data to provide their services. Where a transaction requires it, necessary information may be shared with an administrative agent, payment providers and competent authorities such as AEAT or DGT. We do not sell personal data.

WhatsApp and Google Maps are external links, not embedded services. This site does not connect to them until you open their links. When you use WhatsApp, WhatsApp Ireland Limited (Meta group) processes data under its own terms. Email and telephone remain available alternatives.

International processing

Cloudflare runs an international network and its services may involve processing outside the European Economic Area. Its data processing addendum describes the relevant mechanisms, including the EU-US Data Privacy Framework and standard contractual clauses, as applicable. Messaging providers may also make international transfers under their terms. You can ask us for information and a copy of the safeguards relevant to your data. We do not claim that all providers store all data exclusively in the EU.

Your rights

You can request access, correction, deletion, restriction, object to processing and, where applicable, request portability. Where consent is used, you can withdraw it without affecting earlier lawful processing. Write to [email protected] or the registered office with the subject “Data protection”. Additional identity information will only be requested if there are reasonable doubts. The general response period is one month; the law allows extensions in justified cases, with notice within that first month.

You can complain to the Spanish Data Protection Agency. Browser storage is explained in the cookie policy.

Updated: 21 October 2026.