Privacy policy

Who is the controller

Maverick Automotive SLU (WALBIA), NRT [NRT de Maverick Automotive SLU], [dirección postal], El Tarter (Canillo), Andorra. For any privacy matter: [correo de privacidad: privacidad@walbia.com?].

We apply Andorra’s Llei 29/2021 qualificada de protecció de dades personals (Qualified Law 29/2021 on personal data protection) and, when you use WALBIA from the European Union, the General Data Protection Regulation (GDPR).

What data we process

• Your account: name, email, phone, language and password (stored encrypted: we never see it). For businesses, company name and tax number.
• Purchases: what you buy, delivery addresses, orders, claims, refunds and invoices. Your card details are handled only by the payment provider: we know whether payment went through, not the card number.
• Garages and cars: booking and quote requests, the messages and photos you send, the cars in your garage (make, model and, if you add them, number plate or VIN) and their history at garages.
• Used cars and car hire: your “I’m interested” requests, with the phone number you give us, and your hire bookings with the driver details the garage asks for.
• Reviews and reports: what you write when you review or report a listing.
• Privacy requests: the email, name and message you send us from the privacy rights page.
• Your phone: the identifier used to send you notifications, if you accept them, and your approximate location to show nearby garages, only if you allow it. Location is used for the search and is not stored in your account.
• Technical data: server security logs (such as IP addresses), kept for a short time by our hosting providers. To curb abuse on some forms we keep a fingerprint that changes every day and cannot be used to recover your IP.
• If you work at a garage: your name, email, role in the business, clock-in records and the activity you carry out in the software.

Why we use it and on what legal basis

• Providing the service you ask for (account, purchases, payments, deliveries, claims, requests to garages, bookings and order notifications): because it is necessary for our contract with you.
• Complying with the law (invoices, accounting, tax, requests from authorities and your privacy rights): legal obligation.
• Keeping WALBIA safe and honest (preventing fraud and abuse, moderating listings and reviews, handling reports and keeping proof of what you accepted): our legitimate interest and that of other users.
• Improving the service with aggregated statistics that do not identify you: legitimate interest.
• Phone notifications, location and marketing: only with your consent, which you can withdraw at any time in the app or from the email itself.

Artificial intelligence

We use artificial intelligence to translate listings, read photos and documents (at a garage’s reception or on delivery notes) and answer in the parts-counter chat and the assistants. To do this we send the necessary text or photo to our AI provider (Anthropic), which processes it on our behalf and, under its business terms, does not use it to train its models.

The AI does not make decisions with legal effects on you: it suggests, and a person (the garage or the WALBIA team) decides. Price indicators on listings are for information only.

Who we share your data with

• Garages and sellers, only what is needed: when you buy from them (name, phone and delivery address, while the order is open and up to 30 days after it is completed), when you ask for a booking or a quote, when you enquire about a car or when you book a hire car.
• Carriers, to deliver your orders.
• Providers who help us run the service (processors), under contract and only for that purpose: Supabase (database, accounts and photo storage), Vercel (website hosting), Resend (sending emails), [proveedor de pagos, por elegir] (card payments), Anthropic (artificial intelligence) and Expo (phone notifications).
• Authorities and courts, when the law requires it.

We do not sell your data or share it for advertising.

International transfers

Our database is hosted in [región de los servidores]. Some providers (Vercel, Resend, Anthropic and Expo) are US companies and may process data outside Andorra and the European Union. In those cases we use the safeguards the law requires, such as standard contractual clauses or the provider’s participation in a recognised data protection framework. You can ask us for more information at [correo de privacidad: privacidad@walbia.com?].

Andorra is recognised by the European Commission as providing an adequate level of protection, so data from visitors in the European Union can be transferred to Andorra without additional formalities.

How long we keep it

• Account: for as long as you have it. If you delete it, we delete your data straight away, except for what follows.
• Purchases and invoices: for as long as tax and commercial law requires ([plazo legal de conservación de facturas]), even if you delete your account, no longer linked to it.
• Reviews: they stay published without your name if you delete your account.
• What the seller sees of your order (phone and address): only while the order is open and up to 30 days after it is completed.
• Privacy requests: [plazo de conservación de las solicitudes de privacidad: 3 años?], so that we can show we dealt with them.
• Technical and security logs: the minimum our providers need, usually a few weeks.

Your rights

At any time you can ask us for:

• Access: to know what data we hold about you and get a copy.
• Rectification: to correct data that is wrong.
• Erasure: to delete it (for example, if you cannot sign in to delete your account yourself).
• Objection: to stop using it for a particular purpose, such as marketing.
• Restriction: to keep it without using it while something is being clarified.
• Portability: to receive the data you gave us in a format you can take to another service.
• Withdrawal of consent where you gave it (notifications, location, marketing), without affecting what was done before.

How: from the privacy rights page, with or without an account. We give you a code to track the request and reply within one month at the latest. It is free. If needed, we will ask you for something to confirm it is you. You can also write to [correo de privacidad: privacidad@walbia.com?]. To delete your account yourself, go to Delete your account.

If you disagree with our reply, you can complain to the Agència Andorrana de Protecció de Dades (APDA) or, if you live in the European Union, to the data protection authority in your country.

Children

WALBIA is for adults. If we learn that an account belongs to a minor, we will close it.

Security

We protect your data with encrypted connections, securely stored passwords, permissions so that each person only sees what is theirs and two-factor authentication for the team that runs the platform. If an incident affects your data, we will tell you and report it to the authority where the law requires.

If you are a customer of a garage that uses WALBIA

The data a garage keeps about you in its management software (repair orders, quotes, invoices, photos of your car) is that garage’s responsibility; WALBIA processes it on the garage’s behalf. To exercise your rights over that data, contact the garage. If you write to us, we will pass your request on.

Cookies

The website uses no advertising or analytics cookies. We explain it in the cookie policy.

Changes

If we change this policy, we will publish the new version here and, if the change is significant, tell you or ask you to accept it when you sign in.