PRIVACY AND RETENTION

Your data,
clearly explained.

This page explains which data ReclamaHoy processes when you use the service that analyses documents and prepares complaints about car hire.

Last updated: 29 October 2026.

1. Who is responsible for the service

Ricardo Perez Twerdy, who runs ReclamaHoy, with an address at Calle Acacia 9, 03699 Alicante (Alicante, Spain), provides the service and decides what case data is used for. More information in the legal notice.

For questions about your data and to exercise your rights, write to contacto@reclamahoy.es or use the contact form.

2. What information we process

• Your case: your explanation of the problem, the countries involved in the hire, the company, dates, amounts, currency, language and any corrections you make.
• Your evidence: the documents and photographs you upload, file names, extracted text and any personal data they may contain.
• The analysis: the initial assessment, extracted facts, report and draft complaint.
• Your questions: the name, email and message you give us through the contact form or by email, so that we can answer your request.
• The purchase: the email linked to the payment, amount, currency, status and transaction identifiers. ReclamaHoy does not receive your full card number or its security code.
• Technical data: session identifiers and the data needed to control access, limit abuse and keep the service running. The infrastructure may also generate technical connection logs.

Only provide the data that is relevant to your complaint. Avoid including health data or other especially sensitive information, and hide full card numbers, identity document numbers and details of other people that are not needed.

3. What it is used for and on what basis

• Providing the service you request: receiving and analysing the evidence, preparing the assessment and delivering the content you have bought. The basis is the performance of the contract or the steps you ask for before entering into it.
• Handling the purchase: checking the payment and giving access to the report, on the same contractual basis. Records that must be kept for tax or accounting obligations are processed to comply with those obligations.
• Answering your questions: dealing with requests made before or in connection with the service on the contractual basis, and handling rights requests to comply with the corresponding legal obligations.
• Knowing which ads and guides work: if you arrive from an ad or a link with campaign tags, we store those tags (source, campaign and ad) with your case and, if there is one, the ad click identifier. We also store the kind of site you came from (a search engine such as Google or Bing, an assistant such as ChatGPT, Perplexity or Gemini, or another site), never its address, and, if you start from one of our guides, which one. We use this only to count how many reviews each ad and each guide generates; nothing is stored in your browser or sent to Google. The click identifier is deleted when the case is deleted or expires. The basis is our legitimate interest in measuring our advertising and our guides.
• Protecting the service: preventing unauthorised access, fraud and abuse, on the basis of the legitimate interest in keeping the service and its users secure.

Your case data is not used for marketing campaigns. The automated assessment guides the preparation of a complaint: it does not decide the outcome of the dispute or oblige the hire company to refund any amount. You can correct the extracted data before continuing.

4. How long your case is kept

Abandoned review

24 hours from when the case is created, if it does not reach an assessment.

Assessment without a purchase

7 days from the first assessment.

Purchased analysis

30 days from delivery of the report. While it is being prepared, the purchase extends the retention period.

When the period ends, the clean-up process revokes access and deletes the documents and the content of the case. If a technical deletion fails, it is tried again. Data does not disappear instantly from every backup.

After deletion we keep the case's campaign and origin labels (without the click identifier), without its content, only to count how many reviews each ad and each guide generates.

Purchase records are kept separately to manage the transaction and the obligations that apply to it; they are not deleted automatically with the report. The application does not yet have an automatic deletion period configured for those records.

Database backups expire according to the provider's retention window.

Contact messages are kept in the mailbox to handle the question and any follow-up. They are deleted manually; no automatic deletion period currently applies. You can ask for them to be deleted, unless they must be kept because of a legal obligation or to deal with a claim.

5. Cookies and storage in your browser

We use a necessary session cookie to recognise your access without creating an account. It lasts up to 30 days. It is sent over HTTPS and cannot be read by the page's scripts.

We also temporarily keep some form fields in the browser tab's storage so that you can carry on with the process. This storage is separate from the documents saved on the server.

With your consent, Google Analytics 4 measures visits and steps of the process (form steps and the type of problem chosen, form errors, review started, assessment completed, payment opened or cancelled, purchase verified, and the report viewed, downloaded, copied or printed), using browser identifiers and a pseudonymised transaction identifier. Google ad measurement is a separate choice. Our process and purchase events do not include what you write, amounts, documents, email or name. Automatic measurement is enabled on all pages and may collect metadata about forms, links, downloads and navigation. We do not turn on ad personalisation or Google Signals. Measurement reports may include campaigns, where visits come from and technical connection data that Google receives, including the IP address. Google may process data outside the European Economic Area under its applicable terms and safeguards. See Google's privacy policy.

The Google tag only loads after you accept analytics. We keep your choice for 180 days. If you accept, Google Analytics cookies identify your browser; we set them to last up to 180 days. You can refuse measurement without losing access to the service, choose analytics only, or withdraw your consent from "Cookies". When you withdraw it, we delete the measurement cookies this domain controls and stop loading the tag; this does not delete data already sent to Google. Withdrawing consent does not affect the lawfulness of earlier processing. Separately, without cookies, identifiers or anything stored on your device, our server counts how often this notice appears and what is chosen, so we know what share of visits Google Analytics measures; we keep only daily totals, under our legitimate interest in measuring the service. Deleting the session cookie may mean you lose access from that browser; it does not delete your case from the server.

6. Your rights

You can ask for access to your data, its rectification or erasure and, where applicable, restriction of processing, portability, or to object to processing based on legitimate interest. These rights may be subject to limits, such as retention required by a legal obligation.

Send your request to contacto@reclamahoy.es or through Contact. Tell us which right you want to exercise and the details that let us find your case. If we need to confirm your identity, we will ask only for the information that is necessary.

If you believe the processing infringes your rights, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos). If you live or work in another country of the European Union or the European Economic Area, you can also complain to the data protection authority of that country.

7. Changes to this information

We will update this page when the processing or providers change, and revise the date shown at the top.