Privacy policy

Who does this Privacy Policy apply to?

By visiting or consulting the AUTOREC website and using the services offered, the user (customers, potential clients, employees, among others), accepts the processing of their personal data, agreeing to the terms established in this document (hereinafter, the “Privacy Policy”).

This Privacy Policy and the processing of your data will be regulated by the General Data Protection Regulation, or Regulation [UE] 2016/679 ("GDPR").

Who is responsible for data processing?

Here is the relevant information of the Data Controller responsible for the personal data processed and provided by users:

What is the legitimacy for the data processing?

The legal basis for the processing of personal data is the completion of forms on the Website, these forms (section 4.a), are completed by the interested party, who shares certain information and thereby gives full consent for the processing of their personal data.

What information do we process?

The information we receive from users or that they share with us, which will be treated with the utmost confidentiality, is processed, and managed as explained below.

a) Information that users provide directly: AUTOREC collects and stores certain information that the user enters on the Website, through the following sections/forms.     

b) Information that users provide to us indirectly:     

Data quality: The user must ensure, both to AUTOREC and to third parties, the quality of the information and personal data provided through the AUTOREC Website. This means that all personal data and information provided must be real, truthful, updated and belong to the user and not to third parties. IF they belong to third parties, we understand that it is with their consent, and we request that the user invites such third parties to become aware of our legal texts as soon as possible. 

Data Modification: The user must notify AUTOREC of any changes to the personal data provided, being responsible in any case for the truthfulness and accuracy of the data provided at all times. 

For what purpose do we process the data?

How long will we retain the data?

AUTOREC will retain the user's personal data for as long as is reasonably necessary to: fulfil any of the purposes mentioned in this Privacy Policy and comply with current legislation, regulatory requirements, and relevant orders from competent courts, or, in any case, as long as we send information or communications and the data subject does not request their deletion or objection.

Your personal data will be anonymized or deleted once they are no longer relevant for the purposes for which they were collected.

To whom are the data communicated?

The personal data collected by AUTOREC will be exclusively used to achieve the purpose defined on the AUTOREC Website. To achieve this objective and ensure the proper provision of the service, AUTOREC may share certain personal data of users:

• Upon legal requirement, AUTOREC may share information with executive authorities and/or third parties regarding requests for information related to criminal investigations and alleged illegal activities.          
• External service providers: some companies subcontracted by AUTOREC may have access to your personal data and personal information, always under the exclusive control of AUTOREC, when necessary to provide our services.       
  • If the user expressly authorizes the sending of commercial information, it may be carried out in collaboration with a Data Processor outside the EU: Benchmark (Benchmark Internet Group, LLC-) a mailing platform, always under the exclusive control of AUTOREC. Additionally, the user can review this provider's Privacy Policy here.
• With the user's consent: In addition to the provision stated above, the user will be informed in the event that any information about them is disclosed to the website's business partners or third parties, for purposes other than those stated on the AUTOREC Website (e.g., for commercial purposes), so that they have the opportunity to decide not to share their information. None of the aforementioned data disclosures will involve selling, renting, sharing, or otherwise disclosing personal customer information for commercial purposes contrary to the commitments made in this Privacy Policy.

Can international data transfers be made? 

In the event that transfer your personal data to a third country, i.e., a country outside the European Economic Area (the countries of the European Union plus Liechtenstein, Iceland and Norway), or that does not have an adequate level of data protection recognized, we will comply with all applicable laws regarding such transfer, including ensuring that your personal data remains secure and the presence of safeguards to ensure adequate protection. To this end, AUTOREC will use Standard Contractual Clauses for data protection adopted by the European Commission.

What rights does the user have regarding the data they provide?

The user may exercise the following rights with AUTOREC:

• Right to be informed: the user has the right to receive clear, transparent, and easily understandable information about how we use their information and their rights. For this reason, we provide such information in this Privacy Policy.
• Right of access: the user has the right to obtain access to their information (if we are processing it), as well as other types of information (similar to that provided in this Privacy Policy), in order to be informed and verify that we use their information in accordance with data protection legislation.
• Right to rectification: the user has the right to have their information corrected (inaccurate data) if it is incorrect or incomplete.
• Right to erasure: Also known as the “right to be forgotten”, this allows the user to request the deletion or removal of their information when the data is no longer necessary for the purposes for which it was collected. This is not a general right to erasure; there are exceptions.
• Right to restrict processing: the user has rights that allow them to "block" or prevent further use of their information. When processing is restricted, we will only retain their information for the exercise or defense of claims. We also keep lists of users who have requested “blocking” of their information to ensure that the restriction is respected in the future.
• Right to data portability: the user has rights that allow them to obtain and reuse their personal data for their own purposes across different services.
• Right to object: the user has the right to object to certain types of processing, including processing for direct marketing purposes. Except for compelling legitimate reasons, or the exercise or defense of potential claims.         

The exercise of these rights is highly personal, so it will be necessary for the user to prove their identity.

To exercise the aforementioned rights provided for by law, the user can contact AUTOREC via email at info@autorecsl.com or by written request addressed to the address provided in section 1 of this Privacy Policy. The communication must contain the following data and documents:

• Name and surname of the interested party, attaching a photocopy of the ID card or another valid document that identifies them and, if applicable, of the person representing them; the use of an electronic signature will exempt the submission of these documents.         
• Indication of the interested party's address and specific request (the right to be exercised).         

The user also has the right to file a claim with the corresponding Supervisory Authority/Spanish Data Protection Agency ( www.aepd.es ), if they consider it appropriate.

How do we protect the data of our users' data?

AUTOREC informs the user that it has implemented the necessary technical and organizational measures required by current Data Protection regulations to ensure the security of their data, in order to prevent unauthorized alteration, loss, access, or processing of such data.

As mentioned, the personal data provided by users through the AUTOREC Website will not be transferred to other entities or companies for their own purposes. However, some companies subcontracted by AUTOREC may have access to the personal data and information, always under the exclusive control of AUTOREC, solely for the purpose of providing a necessary service for the proper functioning of the AUTOREC Website.

Modifications

AUTOREC reserves the right to modify this Privacy Policy in accordance with the applicable legislation at any given time. Therefore, it is advisable for the user to periodically review this Privacy Policy in order to stay informed about the processing and protection of personal data, as well their rights.

Applicable Legislation

This Policy shall be governed and construed in accordance with Spanish law, as well as the resolution of any dispute or discrepancy related to this Website. The use of the services of this Website implies the express acceptance of the Spanish jurisdiction.

Last updated: April 2024