Privacy Policy

1. Who is responsible for your information?

RÔVA MOTORS EV S.L., operating from Marbella, Málaga, Spain, is responsible for personal data collected through RÔVA website enquiry forms. For privacy questions or to exercise your rights, contact info@rovamotors.ae. Our full registered business address is available on request; the legally required complete controller details should be published here once confirmed.

2. Information we collect

When you contact us or request a vehicle quotation, we receive the details you provide: name, business contact information, telephone number, enquiry type, message and selected vehicle configuration. We may also process technical connection and security information, such as IP address, browser details, request timestamps and spam-prevention signals. Your contact details are needed so we can respond; supplying unrelated personal information in a message is optional.

3. Why we use your information

• To respond to your questions, provide information and prepare a quotation or vehicle configuration requested by you.
• To manage follow-up communication and any resulting customer relationship.
• To protect our website, enquiry forms and business communications from fraud, abuse and automated spam.

Legal bases: quotation requests and pre-contract discussions: GDPR Article 6(1)(b); handling general business enquiries and preventing abuse: legitimate interests under Article 6(1)(f); statutory business records where required: Article 6(1)(c). We do not treat an enquiry as consent to receive marketing email. If we introduce newsletter subscriptions or other consent-based marketing, we will request separate, optional affirmative consent.

4. Cloudflare Turnstile: anti-spam and bot protection

Our contact and vehicle enquiry forms use Cloudflare Turnstile, a website-security service provided by Cloudflare, Inc. Turnstile helps distinguish human visitors from automated bots and prevent abusive or fraudulent submissions. It may run invisibly in the background without asking you to complete a visible challenge.

To provide this protection, Cloudflare processes limited technical signals, which may include your IP address, browser user-agent, connection characteristics (including a TLS fingerprint), and the website and widget being accessed. Cloudflare states that Turnstile does not read the content you enter into our enquiry forms for its bot-detection function.

We use Turnstile for the legitimate interest of protecting the security and availability of our website and business enquiry channels (GDPR Article 6(1)(f)). Cloudflare processes the security signals on our behalf for this purpose, and may also process certain signals under its own responsibility to improve its bot-detection service. Cloudflare provides further details about technical signals, cookies, processing and your privacy rights in its Turnstile Privacy Addendum, which forms part of Cloudflare’s Privacy Policy.

5. Service providers and international access

We use service providers to host and operate our website, deliver enquiry emails, maintain business records and protect our forms. Personal information may be processed by these providers as necessary to supply their services, under applicable contractual and legal protections. Cloudflare and some other providers may operate internationally; where personal information is transferred outside the European Economic Area, applicable data-protection safeguards are required.

6. Optional blog content and other external services

Our Journal is provided using the external Soro article service. On our blog page, the Soro script is not requested until you actively allow optional external content. Once enabled, your browser connects to Soro and may provide technical data and receive cookies or similar storage under that provider's practices. You can withdraw this permission using the Cookie Settings link. External social-media links and WhatsApp links connect you to those services only when you follow them.

We also use externally served Google Fonts for the website's typography. Loading a font can involve a browser request to Google that discloses technical connection information. These font requests are not controlled by the optional Soro preference; any further privacy review should assess whether self-hosting fonts is appropriate.

Details about essential storage and optional external content are set out in the Cookie Policy.

7. How long we keep information

We keep enquiries for the time needed to respond and manage the commercial relationship, and may keep records longer where a transaction, dispute or legal retention duty requires it. Data that is no longer needed should be deleted or anonymised. Exact deletion periods must be confirmed against our internal customer-record retention practices. Security logs are retained only for the relevant security purpose, subject to hosting-provider policies.

8. Your privacy rights

Subject to applicable law, you may request access to your personal data, correction, deletion, restriction of processing, data portability where relevant, or object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time without affecting earlier lawful processing. We do not use enquiry information for solely automated decisions producing legal or similarly significant effects. Contact us at info@rovamotors.ae to exercise these rights. If you are in Spain or the European Economic Area, you may also lodge a complaint with the appropriate supervisory authority, including Spain’s Agencia Española de Protección de Datos (AEPD).

Cookies and your choices

Necessary website-security functions and preference storage are available independently of optional Soro blog content. Optional Soro content remains disabled unless you allow it. You can review or change this choice at any time through Cookie Settings or read the full Cookie Policy.

9. Updates to this notice

We may update this policy as our website or services evolve. Changes will be published on this page together with a revised update date.