Privacy policy

PRIVACY POLICY

1. INTRODUCTION

At Grup Eina Digital S.L., we work to offer you the best possible experience through our products and services. In some cases, it is necessary to collect information to achieve this. We are concerned about your privacy and believe we should be transparent about it.

Therefore, and for the purposes of the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 (hereinafter, "GDPR") on the protection of natural persons with regard to the processing of personal data and the free movement of such data, and Law 34/2002 of 11 July, on Information Society and E-Commerce Services (hereinafter, "LSSICE"), Grup Eina Digital S.L. informs the user of the following:


2. DATA CONTROLLER

The Data Controller is your Dealer, who registers the user on the service. Only on certain occasions may personal data be transferred so that Grup Eina Digital S.L., in its capacity as Data Processor, can carry out the registrations on the service for them to be processed on this Website.

If you wish to contact us, you can send us an email at the following email address: gdpr@grupeina.com.


3. PERSONAL DATA COLLECTION AND PROCESSING

The personal data that may be processed on this Website, as well as the legal basis that justifies such data processing, are set out below.

  • Platform access: To manage access to the platform, data such as your username and password will be processed. Your email address can be used to request password recovery.
  • Profile: To manage access to the private area, data such as user name, name and surname, telephone and/or mobile phone, email address, town, province and country will be processed.
  • Ticket registration form: In order to manage the generation of tickets on the platform, data will be processed such as the name of the workshop that can identify a natural person, contact telephone number, email address, contact person and registration plate number of the vehicle for which the technical consultation is to be made (the user must have requested prior authorisation from the vehicle owner).

4. LEGAL BASIS FOR THE PROCESSING OF YOUR DATA

The legal basis that justifies the processing of your data mentioned above is:

  • Contractual relationship with the Dealer for the management of access to the platform and for the provision of the contracted services.
  • Consent of the data subject to manage access to the Website. The legal basis of the processing is the consent given by the user through the acceptance of this Privacy Policy in the box provided for this purpose.
  • Compliance with legal obligations for fraud prevention, communication with public authorities and third party claims.

5. RETENTION OF YOUR PERSONAL DATA

The processing of data for the purposes described will be maintained for the time necessary to achieve the purpose of collection, as well as to comply with legal obligations arising from the processing of the data. This is without prejudice to the retention period necessary for the formulation, exercise or defence of potential claims and/or provided that it is permitted by applicable law. When no longer required, the data will be erased with appropriate security measures to ensure pseudonymisation or total destruction of the data. For more information, please contact us at gdpr@grupeina.com.


6. RECIPIENTS WE COMMUNICATE YOUR DATA TO

In some cases, only when necessary, Grup Eina Digital S.L. will provide your data to third parties. However, the data will never be sold to third parties. The external service providers that Grup Eina Digital S.L. uses to provide auxiliary services for the processing of your data may have access to it in accordance with the instructions given by Grup Eina Digital S.L. and for the sole purpose of properly executing the contractual relationship that exists between Grup Eina Digital S.L. and its suppliers.

The suppliers we use for the operation of the website are:

  • The hosting provider used is Amazon Web Services (AWS), an American company with servers located in EU (Ireland). Standard contractual clauses are used as a guarantee for the international transfer of data.
  • Automotive technical content software such as GT Motive and other technical information websites of different manufacturers for the resolution of queries.
  • Connection to official agencies and/or Public Administrations such as the DGT located in Spain.
  • Grup Eina Digital S.L., located in Spain, owns the domain name of the website.
  • The database where users' personal data is stored is the property of each Dealer.

For more information regarding the providers that may access your personal data, please contact us at the following email address gdpr@grupeina.com.

Grup Eina Digital S.L. seeks to ensure the security of personal data when it is sent outside the company and ensures that third-party service providers respect confidentiality and have adequate measures in place to protect personal data. These third parties have the obligation to ensure that the information is treated in accordance with data privacy regulations, and not to use such information for their own purposes or for transfer to third parties.

In some cases, the law may require that personal data be disclosed to public bodies or other parties, only what is strictly necessary for the fulfilment of such legal obligations will be disclosed.


7. STORAGE OF YOUR PERSONAL DATA

In general, data is stored within the EU. However, in the event that the processing of your data involves an international transfer of data outside the European Economic Area (EEA), Grup Eina Digital S.L. undertakes to implement the necessary security measures to ensure an adequate level of safeguarding of such transfers by means of data processor contracts and, where appropriate, will ensure that they provide an adequate level of protection, either because they have Binding Corporate Rules (BCR) or because we have subscribed to the European Commission's model clauses. For more information about our service providers, please contact us at gdpr@grupeina.com.


8. EXERCISE OF RIGHTS AND HOW YOU CAN EXERCISE THEM

You may address your communications and exercise your rights by sending a request to the postal address indicated in Clause 2 or to the following email address gdpr@grupeina.com.

Under the GDPR you can request:

  • Right to information: you can request information on your personal data that we have.
  • Right to rectification: you can communicate any change in your personal data.
  • Right to deletion and right to be forgotten: you can request the blocking or deletion of personal data.
  • Right to limitation of processing: this concerns restricting the processing of your personal data.
  • Right to data portability: in some cases, you may request a copy of the personal data in a structured, commonly used, machine-readable format for transmission to another data controller.
  • Right to object and automated individual decision making: you can request that decisions are not based solely on automated processing, including profiling, that produce legal effects or significantly affect the data subject.

In some cases, the request may be denied if you request the deletion of data necessary to comply with legal obligations. Also, if you have a complaint about data processing, you can file a complaint with the competent data protection authority.


9. RESPONSIBILITY FOR THE ACCURACY AND VERACITY OF THE DATA PROVIDED

The user is solely responsible for the veracity and correctness of the data included, and exonerates Grup Eina Digital S.L. of any responsibility in this regard. Users guarantee and are responsible, in any case, for the accuracy, validity and authenticity of the personal data provided, and undertake to keep them properly updated. The user agrees to provide complete and correct information on the registration or subscription form, Grup Eina Digital S.L. reserves the right to terminate the services contracted with users, in the event that the data provided is false, incomplete, inaccurate or not updated.

Grup Eina Digital S.L. is not responsible for the veracity of the information that it does not compile and for which another source is indicated, so it does not assume any responsibility for hypothetical damages that may arise from the use of such information.

Grup Eina Digital S.L. reserves the right to update, modify or delete the information contained on its web pages and may even limit or deny access to such information.


10. SECURITY MEASURES IMPLEMENTED TO PROTECT YOUR PERSONAL DATA

Grup Eina Digital S.L. has adopted the legally required security levels for the protection of personal data, and endeavours to install those additional technical means and measures available to it to prevent the loss, misuse, alteration, unauthorised access and theft of personal data provided to Grup Eina Digital S.L..

Grup Eina Digital S.L. is not responsible for hypothetical damages that may derive from interferences, omissions, interruptions, computer viruses, telephonic breakdowns or disconnections in the operational functioning of this electronic system, resulting from causes beyond the control of Grup Eina Digital S.L., for delays or blockages in the use of this electronic system caused by deficiencies or overloads of telephone lines or overloads in the Data Processing Centre, in the Internet system or in other electronic systems, as well as damages that may be caused by third parties through unlawful interference beyond the control of Grup Eina Digital S.L.. However, the user should be aware that security measures on the Internet are not impregnable.


11. AMENDMENT OF THE PRIVACY POLICY

This privacy policy is subject to change. We recommend that you review the privacy policy from time to time.



LAST MODIFICATION DATE: 08/06/2023