spain-insurance.com is committed to protecting personal data and handling it responsibly in line with the EU
General Data Protection Regulation (GDPR), Spain’s data protection framework, and applicable ePrivacy rules.
This Privacy Policy explains what information we collect, why we collect it, how we secure it, and the
choices and rights available to you. Our approach is based on data minimisation: we request only what is
necessary to provide travel insurance quotes, facilitate a purchase, support customer service, meet legal
obligations, and keep our platform secure.
We collect information you provide directly, such as your name, contact details (email and/or phone),
country of residence, travel dates, destination, and basic trip details required to calculate eligibility
and pricing. If you proceed to purchase a policy, we may also collect additional details required by the
insurer or underwriter to issue the contract, such as date of birth and identification information where
mandated for insurance issuance, fraud prevention, or regulatory requirements. Payment card information is
processed using secure payment providers; spain-insurance.com does not store full card numbers. We also
collect limited technical data automatically, such as IP address, device and browser information,
approximate location derived from IP, and logs related to how you interact with our site. This technical
data helps protect against fraud, abuse, and cybersecurity threats, and supports analytics so we can improve
performance and reliability.
We use your data to deliver the services you request: generating travel insurance quotes, presenting policy
options, completing purchases, sending confirmations and policy documents, handling cancellations where
permitted, and responding to customer support enquiries. Our legal bases for processing include performance
of a contract (or steps requested before entering into a contract), compliance with legal obligations
(including record-keeping, anti-fraud controls, and applicable insurance regulations), legitimate interests
(such as securing our systems, preventing misuse, and improving our services), and consent where required
(for example, certain non-essential cookies or optional marketing communications). We do not sell personal
data to third parties. We only share data with carefully selected service providers and insurance partners
to the extent necessary to provide the quote, issue and administer the policy, process payments, provide
customer support tools, send transactional communications, or maintain secure hosting and infrastructure.
Where we use processors, we require appropriate contractual safeguards and confidentiality obligations.
Security is built into our operations. spain-insurance.com uses encryption in transit (such as HTTPS/TLS) to
help protect data sent between your device and our servers. We apply access controls and least-privilege
permissions so only authorised personnel can access personal data needed for their role. We use secure
infrastructure and monitoring to detect suspicious activity, and we maintain technical and organisational
measures designed to reduce risks such as unauthorised access, alteration, or loss. Data is retained only
for as long as needed for the purposes described in this policy, including statutory retention periods that
may apply to insurance transactions, accounting, dispute resolution, and compliance. After retention periods
expire, data is deleted or anonymised in accordance with our internal procedures.
Cookies and similar technologies are used to make the website function, keep sessions stable, remember
preferences, and support security features. We may also use analytics cookies to understand how visitors use
spain-insurance.com so we can improve speed, usability, and content relevance. Where required by EU and
Spanish rules, non-essential cookies are used only after you provide consent through our cookie settings.
You can change cookie preferences at any time via your browser settings and, where available, our on-site
cookie controls. Disabling certain cookies may affect site functionality, such as maintaining a quote
session or keeping language preferences.
Under GDPR, you have rights over your personal data, subject to certain legal limitations. These rights
include access to the data we hold about you, correction of inaccurate or incomplete data, deletion in
appropriate circumstances, restriction of processing, objection to processing based on legitimate interests,
and data portability for information you provided to us where processing is based on consent or contract and
carried out by automated means. If we rely on consent for a particular processing activity, you can withdraw
consent at any time without affecting the lawfulness of processing carried out before withdrawal. To
exercise your rights, you can contact our Data Protection Officer (DPO) using the contact details provided
on spain-insurance.com. We may request verification to protect you from unauthorised access to your
information. You also have the right to lodge a complaint with the relevant supervisory authority in Spain
or in the EU member state where you live or work.
International data transfers may occur if our service providers or insurance partners process data outside
the European Economic Area. Where transfers take place, we implement safeguards intended to protect your
data in line with GDPR requirements, such as the use of European Commission Standard Contractual Clauses,
reliance on adequacy decisions where applicable, and additional technical measures when appropriate. Our
policy and controls are reviewed regularly to reflect evolving regulatory expectations and security
standards in 2026, including updates affecting digital consent, online tracking transparency, and
cross-border data transfer requirements. For questions about this Privacy Policy, the handling of data for
insurance quotes or purchases, or our security practices, contact the spain-insurance.com DPO through the
channels listed on our website.