spain-insurance.com is committed to protecting personal data and handling it responsibly in line with the EU General Data Protection Regulation (GDPR), Spain’s data protection framework, and applicable ePrivacy rules. This Privacy Policy explains what information we collect, why we collect it, how we secure it, and the choices and rights available to you. Our approach is based on data minimisation: we request only what is necessary to provide travel insurance quotes, facilitate a purchase, support customer service, meet legal obligations, and keep our platform secure.
We collect information you provide directly, such as your name, contact details (email and/or phone), country of residence, travel dates, destination, and basic trip details required to calculate eligibility and pricing. If you proceed to purchase a policy, we may also collect additional details required by the insurer or underwriter to issue the contract, such as date of birth and identification information where mandated for insurance issuance, fraud prevention, or regulatory requirements. Payment card information is processed using secure payment providers; spain-insurance.com does not store full card numbers. We also collect limited technical data automatically, such as IP address, device and browser information, approximate location derived from IP, and logs related to how you interact with our site. This technical data helps protect against fraud, abuse, and cybersecurity threats, and supports analytics so we can improve performance and reliability.
We use your data to deliver the services you request: generating travel insurance quotes, presenting policy options, completing purchases, sending confirmations and policy documents, handling cancellations where permitted, and responding to customer support enquiries. Our legal bases for processing include performance of a contract (or steps requested before entering into a contract), compliance with legal obligations (including record-keeping, anti-fraud controls, and applicable insurance regulations), legitimate interests (such as securing our systems, preventing misuse, and improving our services), and consent where required (for example, certain non-essential cookies or optional marketing communications). We do not sell personal data to third parties. We only share data with carefully selected service providers and insurance partners to the extent necessary to provide the quote, issue and administer the policy, process payments, provide customer support tools, send transactional communications, or maintain secure hosting and infrastructure. Where we use processors, we require appropriate contractual safeguards and confidentiality obligations.
Security is built into our operations. spain-insurance.com uses encryption in transit (such as HTTPS/TLS) to help protect data sent between your device and our servers. We apply access controls and least-privilege permissions so only authorised personnel can access personal data needed for their role. We use secure infrastructure and monitoring to detect suspicious activity, and we maintain technical and organisational measures designed to reduce risks such as unauthorised access, alteration, or loss. Data is retained only for as long as needed for the purposes described in this policy, including statutory retention periods that may apply to insurance transactions, accounting, dispute resolution, and compliance. After retention periods expire, data is deleted or anonymised in accordance with our internal procedures.
Cookies and similar technologies are used to make the website function, keep sessions stable, remember preferences, and support security features. We may also use analytics cookies to understand how visitors use spain-insurance.com so we can improve speed, usability, and content relevance. Where required by EU and Spanish rules, non-essential cookies are used only after you provide consent through our cookie settings. You can change cookie preferences at any time via your browser settings and, where available, our on-site cookie controls. Disabling certain cookies may affect site functionality, such as maintaining a quote session or keeping language preferences.
Under GDPR, you have rights over your personal data, subject to certain legal limitations. These rights include access to the data we hold about you, correction of inaccurate or incomplete data, deletion in appropriate circumstances, restriction of processing, objection to processing based on legitimate interests, and data portability for information you provided to us where processing is based on consent or contract and carried out by automated means. If we rely on consent for a particular processing activity, you can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. To exercise your rights, you can contact our Data Protection Officer (DPO) using the contact details provided on spain-insurance.com. We may request verification to protect you from unauthorised access to your information. You also have the right to lodge a complaint with the relevant supervisory authority in Spain or in the EU member state where you live or work.
International data transfers may occur if our service providers or insurance partners process data outside the European Economic Area. Where transfers take place, we implement safeguards intended to protect your data in line with GDPR requirements, such as the use of European Commission Standard Contractual Clauses, reliance on adequacy decisions where applicable, and additional technical measures when appropriate. Our policy and controls are reviewed regularly to reflect evolving regulatory expectations and security standards in 2026, including updates affecting digital consent, online tracking transparency, and cross-border data transfer requirements. For questions about this Privacy Policy, the handling of data for insurance quotes or purchases, or our security practices, contact the spain-insurance.com DPO through the channels listed on our website.