1. Who we are

The data controller is ONE OF ONE AUTOMOTIVE, S.L. ("OOO", "we", "us"), a company registered in Spain, operating under the brand One of One Automotive. You can reach us at info@oneofone-automotive.com.

​​

2. What data we collect

We collect only two categories of data:

1. Data you send us. When you submit our contact or inquiry form, we receive whatever you include: your name, email address, phone number, and any documents you attach (PDFs, Word files, or similar). We do not require you to attach documents; any files submitted are at your discretion.

2. Data collected automatically. Our web hosting infrastructure automatically logs standard technical information when you visit the site, including your IP address, browser type, operating system, the page requested, and the date and time of the request. This logging is a function of how web servers operate and cannot be disabled without breaking the site. We do not add any analytics, tracking pixels, or cookies beyond what is strictly necessary for the site to function.

​

3. Why we collect it and on what legal basis

Your form submission is processed to respond to your inquiry or evaluate a potential business relationship. The legal basis is legitimate interest (Article 6(1)(f) GDPR), or pre-contractual measures (Article 6(1)(b)) where your inquiry relates to a specific transaction.

Server log data is retained for security and operational purposes, also under legitimate interest.

We do not use your data for marketing, profiling, or any automated decision-making.

​

4. How long we keep it

Form submissions and attached documents are retained for as long as necessary to handle your inquiry and any resulting business relationship, and for a maximum of 3 years thereafter unless a legal obligation requires longer retention.

Server logs are retained for 90 days and then deleted or anonymised.

​

5. Who we share it with

We do not sell or share your personal data with third parties for their own purposes. Data may be shared with:

• Our web hosting provider, who processes server logs on our behalf as a data processor.

• Professional advisors (legal, tax) where necessary and subject to confidentiality obligations.

• Public authorities, if required by law.

​

6. International transfers

If our hosting infrastructure is located outside the EEA, transfers are covered by standard contractual clauses or equivalent safeguards under Chapter V GDPR.

​

7. Your rights

Under GDPR and LOPDGDD 3/2018, you have the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to object to processing based on legitimate interest. To exercise any of these rights, contact us at info@oneofone-automotive.com. You also have the right to lodge a complaint with the Spanish data protection authority, the AEPD (www.aepd.es).

​

8. Security

We apply appropriate technical and organisational measures to protect your data. Submitted documents are handled only by authorised personnel.

​

9. Changes to this policy

We may update this policy from time to time. Material changes will be indicated by updating the date at the top of this page.

​

​

Last updated: May 2026

​

​