Who is responsible for the processing of your personal data?

Protur Car, S.L. is the responsible party for processing the user’s personal data and informs you that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679, of 27 April (GDPR), and Organic Law 3/2018, of 5 December (LOPDGDD).

What type of data do we request and process?

Depending on the form or method used to collect your data, we always request the minimum necessary to fulfill the purposes outlined in each case.

Why do we process your personal data and why do we do it?

According to the form where we have obtained your personal data, we will process it confidentially to achieve the following purposes:In the Contact form:

• Respond to inquiries or any type of request made by the user through any of the contact methods available on the website. (For the legitimate interest of the responsible party, art. 6.1.f GDPR)
• Send advertising communications via email, fax, SMS, MMS, social media, or any other current or future electronic or physical medium, related to the products and services of the responsible party or its collaborators or suppliers with whom an agreement has been reached for promotional purposes. Third parties will never have access to personal data. (With the consent of the data subject, art. 6.1.a GDPR)
• Perform statistical analysis and market studies. (For the legitimate interest of the responsible party, art. 6.1.f GDPR)

In the Newsletter form:

• Send newsletters, updates, offers, and online promotions. (With the consent of the data subject, art. 6.1.a GDPR)

In the Request a Quote form:

• Send commercial quotes for products and services. (For the execution of a contract or pre-contract, art. 6.1.b GDPR)
• Send advertising communications related to products and services. (With the consent of the data subject, art. 6.1.a GDPR)

In the Curriculum form:

• Include the interested party in the recruitment process and analyse the candidate’s profile to select a suitable candidate for the vacant position. (With the consent of the data subject, art. 6.1.a GDPR)

In the Testimonial form:

• Moderate and publish user experiences, opinions, and suggestions on a product or service on the website. (With the consent of the data subject, art. 6.1.a GDPR)

In the Comments form:

• Moderate and publish opinions on a post on the website. (With the consent of the data subject, art. 6.1.a GDPR)

In the Ethical Channel or Whistleblowing form:

• For proper management of the ethical or whistleblowing channel, processing the corresponding irregularities notified through it and deciding on whether to initiate an investigation to detect potential crimes and prevent any type of liability for the responsible party or other companies in the group, as well as to avoid any conduct contrary to internal or external regulations. (For compliance with a task carried out in the public interest, art. 6.1.e GDPR)

In the User Registration form:

• Manage the user account to provide personalised access to the website and interactive services. (With the consent of the data subject, art. 6.1.a GDPR)

In the E-commerce form:

• Manage online purchases or orders, process payments, and proceed with shipping, in accordance with the general terms and conditions of contract. (For the execution of a contract or pre-contract, art. 6.1.b GDPR)
• Manage, maintain, improve, or develop the services provided. (For the execution of a contract or pre-contract, art. 6.1.b GDPR)
• Conduct satisfaction and quality surveys. (For the legitimate interest of the responsible party, art. 6.1.f GDPR)

In the Loyalty Card form:

• Manage the loyalty card if requested. (With the consent of the data subject, art. 6.1.a GDPR)
• Send commercial advertising communications via email, fax, SMS, MMS, social media, or any other current or future medium. (With the consent of the data subject, art. 6.1.a GDPR)
• Conduct statistical analysis and market studies. (For the legitimate interest of the responsible party, art. 6.1.f GDPR)

In the Sweepstakes and Promotions form:

• Participate in sweepstakes, contests, promotions, or other services offered by the responsible party. (With the consent of the data subject, art. 6.1.a GDPR)
• Send advertising communications related to products and services. (With the consent of the data subject, art. 6.1.a GDPR)

In the Reservations form:

• Formalise reservations at the responsible party’s establishment. (For the execution of a contract or pre-contract, art. 6.1.b GDPR)
• Send commercial advertising communications via email, fax, SMS, MMS, social media, or any other current or future medium. (With the consent of the data subject, art. 6.1.a GDPR)

Social Media:

• Contact through social media to maintain a relationship with the user. This includes handling requests and inquiries, providing information about activities and events, and interacting via official profiles. The user provides consent for data processing when following the responsible party’s official page. The user may access the social media privacy policies at any time and configure their profile for privacy settings. (With the consent of the data subject, art. 6.1.a GDPR)

Instant Messaging:

• Manage appointments and meetings with the responsible party. (For the legitimate interest of the responsible party, art. 6.1.f GDPR)
• Send advertising communications to clients. (For the legitimate interest of the responsible party, art. 6.1.f GDPR)
• Manage online purchases or orders, process payments, and proceed with shipping. (For the execution of a contract or pre-contract, art. 6.1.b GDPR)

Surveillance Cameras:

• Security and access control purposes, internal activity control. (For public interest and legitimate interest of the responsible party, art. 6.1.f GDPR)

Images and Recordings:

• Files with static and/or dynamic images, including publication on the responsible party’s or third-party media. (With the consent of the data subject, art. 6.1.a GDPR)

Clients and Suppliers:

• Commercial management with clients and suppliers. (For the legitimate interest of the responsible party, art. 6.1.f GDPR)

Exclusion from Advertising:

• Manage data to prevent sending commercial communications to those who have expressed their refusal or opposition to receive them. (For compliance with a legal obligation, art. 6.1.c GDPR)

Commercial Advertising:

• Advertising and commercial prospecting management. (For the legitimate interest of the responsible party, art. 6.1.f GDPR)

Rights of the Interested Parties:

• The rights of the user are as follows:
  • Right to withdraw consent at any time.
  • Right of access, rectification, portability, and deletion of data, and the right to limit or object to its processing.
  • Right to file a complaint with the supervisory authority (www.aepd.es) if the processing does not comply with current regulations.

How long will we keep your personal data?

Your data will be kept no longer than necessary for the purpose of processing or as required by legal provisions, and when no longer needed, it will be deleted with appropriate security measures to ensure anonymisation or complete destruction of the data.

To whom do we provide your personal data?

No communication of personal data to third parties is foreseen, except where necessary for the development and execution of processing purposes, to our service providers related to communications, with whom the responsible party has signed confidentiality and data processor contracts required by current privacy regulations.

Do we perform international transfers?

According to Article 44 of the GDPR, international data transfers to a country not deemed to have an adequate level of protection can only be made if sufficient guarantees are provided. The responsible party may use providers with servers or offices in other locations, leading to such transfers. To check the updated list of providers, contact the responsible party at dpo@grupbauza.com.

What are your rights?

The rights available to the user are:

• The right to withdraw consent at any time.
• The right to access, rectify, port, or erase data, and limit or object to its processing.
• The right to lodge a complaint with the control authority (www.aepd.es) if the processing does not comply with the applicable regulations.

Contact details to exercise your rights: Protur Car, S.L., Avda Bella Vista 2, 07560 Cala Millor (Illes Balears). Email: dpo@grupbauza.com