COC Market and data-protection contact

COC Market is the name under which coc-market.com is presented to customers. For information about the processing of personal data on the website or to exercise privacy rights, please contact info@coc-market.com.

The website handles the information necessary to provide the requested COC service, manage orders and customer accounts and comply with obligations under applicable law.

What information we collect

• Customer and account details: name, email address, billing or delivery address, account login identifiers and communications.
• Order and payment records: product, order number, amount, tax breakdown, payment status and limited transaction references provided by a payment processor. Full payment-card credentials are handled by the relevant payment service, not requested by COC Market through ordinary email.
• Vehicle-related information: VIN, manufacturer, vehicle model, and registration document images or PDFs uploaded for fulfilment. These files may contain personal information about a registered keeper or another individual.
• Technical and security information: IP address, browser and device details, session information, error logs and records used to protect the website.
• Preferences and marketing information: cookie choices and any communication preferences or consents you actually provide.

Please do not upload unrelated identification documents or information about other people unless reasonably necessary and you are authorised to provide it.

Purposes and lawful bases

• Processing your order and delivering services: contract performance or steps taken at your request before entering a contract (GDPR Article 6(1)(b)).
• Tax, accounting and other legal record-keeping: compliance with applicable legal obligations (Article 6(1)(c)).
• Protecting accounts and preventing abuse: legitimate interests in securing the store and detecting fraud, subject to the balancing requirements of Article 6(1)(f), or another applicable basis.
• Optional marketing and non-essential cookies: consent where legally required (Article 6(1)(a) and applicable electronic-communications rules). You may withdraw consent without affecting earlier lawful processing.
• Handling enquiries, complaints and rights requests: contract, legal obligation or legitimate interests as applicable to the specific request.

Where providing certain contact or vehicle details is necessary to enter into or perform a contract, not supplying them may prevent us from processing your request.

VINs and vehicle registration documents

VINs and uploaded vehicle registration documents are used exclusively to identify the vehicle, verify the information needed for the request and complete the COC procedure. The relevant manufacturer or official issuing channel may receive the information necessary to issue the certificate.

After completion of the procedure, the uploaded registration-document files are deleted promptly from active storage. Order, accounting or transaction records that must legally be kept are managed separately and retained only for the applicable lawful purposes. Access to files before deletion is restricted to authorised persons who need them to fulfil the request.

Who receives information

COC documents are sourced from the relevant vehicle manufacturers through their official issuing channels. Vehicle data and registration documents are disclosed to the relevant manufacturer or issuing channel only insofar as necessary to complete the requested COC procedure.

The operation of an online shop also involves technical service providers, such as website hosting, security, email delivery and the payment service shown at checkout. These providers may process the information necessary for their respective technical or payment functions; they do not act as suppliers of the vehicle certificates. We do not sell customers’ personal data.

International processing

Some technical service providers or manufacturer systems may process information outside the European Economic Area. Where international personal-data transfers occur, they are subject to the safeguards required by applicable data-protection legislation, including an adequacy decision or other legally recognised mechanism, as appropriate.

For questions about the safeguards applicable to a particular request, contact info@coc-market.com.

How long we keep information

Uploaded vehicle registration document files are removed promptly after completion of the COC procedure. The VIN and vehicle details are used for the request and are not used for unrelated marketing or profiling.

Other data, such as payment, tax, invoice, accounting, customer-account, correspondence and order records, may need to be kept for periods required by applicable law, to address disputes or to manage contractual obligations. Such information is restricted to those purposes and is not kept indefinitely without a lawful reason.

Cancellation requests and refund records

When a customer requests cancellation, reports a duplicate payment, exercises a statutory withdrawal right, reports a COC error or requests a refund, we may process the order number, contact details, VIN as needed to identify the relevant request, payment reference, supplier-processing status, correspondence and outcome of the review.

These records may be used to administer the contract, investigate disputes, meet accounting and legal obligations and establish or defend legally permitted claims. Cancelling an order does not automatically require immediate erasure of all legally retained order or payment records. Uploaded registration document files are deleted promptly after completion of the COC procedure.

For cancellation and refund conditions, see the Refund & Cancellation Policy.

Security and access

We use organisational and technical measures intended to reduce unauthorised access, loss and misuse. No internet service can guarantee absolute security. Keep your account password confidential and do not send sensitive vehicle documents or card information through unrequested channels.

If you believe your account or documents have been exposed, contact info@coc-market.com promptly.

Your GDPR rights

Subject to legal conditions, you may request access to your data, correction of inaccuracies, erasure, restriction of processing, data portability, or object to processing based on legitimate interests. You may withdraw consent at any time where consent is the basis for processing.

Send your request to info@coc-market.com. We may need reasonable verification of your identity before disclosing account or vehicle records. Some information must be retained despite a deletion request where another legal obligation applies.

You may complain to the Spanish Data Protection Agency (AEPD) or another competent supervisory authority.

Cookies and communication preferences

Essential cookies support necessary website functions such as logging in, maintaining a shopping cart and protecting sessions. Optional analytics or advertising technologies, where used, are subject to the consent requirements of applicable law.

Read our Cookie Policy for the categories of cookies and browser controls. Marketing messages, if offered, are sent only where lawful and provide an appropriate way to opt out.

VIN search and automated suggestions

The website may use an automated VIN lookup to suggest a manufacturer or help you find the relevant COC product. The suggestion is informational: it does not guarantee vehicle eligibility, availability, certificate issuance or registration approval.

Customers may contact info@coc-market.com to request assistance when a VIN is not identified or if they have questions about automated suggestions.

Policy updates

We may revise this notice when our services, suppliers or legal requirements change. Material changes will be reflected in an updated version. Contact info@coc-market.com for questions about this policy.