| Responsible | ARVAL GROEP, SLU |
| Purpose | Provision of online services Web user management Commercial communications related to our services |
| Legitimation | Express consent and legitimate interest |
| Recipients | Data is not transferred to third parties, except for legal obligations |
| Rights | Access, rectify and delete data, as well as other rights, as explained in the additional information |
| Additional information | You can consult the additional and detailed information on Data Protection in the attached clauses found in our Legal Notice |
At ARVAL GROEP, SLU we work to offer you the best possible experience through our products and services. In some cases, it is necessary to collect information to achieve this. Your privacy is important to us and we believe we should be transparent about it.
Therefore, and for the purposes of the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016 (hereinafter, “GDPR”) regarding the protection of natural persons with regard to the processing of personal data and the free circulation of these data, and LAW 34/2002, of July 11, on Services of the Information Society and Electronic Commerce (hereinafter, “LSSI”), ARVAL GROEP, SLU informs the user that, as the data controller, it will incorporate the personal data provided by users into an automated file.
Our Commitment Begins by Explaining the Following to You:
Your data is collected so that the user experience improves, attending to your interests and needs.
We are transparent in relation to the data we obtain about you and the reason why we do it.
Our intention is to offer you the best possible experience. Therefore, when we are going to use your personal information we will always do so in compliance with the regulations, and when necessary, we will request your consent.
We understand that your data belongs to you. Therefore, if you decide not to authorize us to process them, you can ask us to stop processing them.
Our priority is to guarantee your security and treat your data in accordance with European regulations.
If you want to obtain more information about the processing of your data, consult the different sections of the privacy policy that are found below:
Who is Responsible for Processing your Personal Data?
Identity: ARVAL GROEP, SLU
Registered office: C/ Camprodon, 85 – 17401 – (Arbúcies) – Girona
C.I.F. nº: B55328876
Email: info@aracelgroep.com
ARVAL GROEP, SLU has appointed a Data Protection Delegate or an internal contact person within its organization. If you wish to make an inquiry regarding the processing of your personal data, you can contact him/her via email at info@aracelgroep.com
What Personal Data Do We Collect?
The personal data that the user may provide:
Name, address and date of birth.
Telephone number and email address.
Location.
Information regarding payments and refunds.
IP address, date and time you accessed our services, internet browser you use, and data about the operating system of the device.
Any other information or data you decide to share with us.
In some cases, it is mandatory to complete the registration form to access and enjoy certain services offered on the web; likewise, not providing the requested personal data or not accepting this data protection policy implies the impossibility of subscribing, registering or participating in any of the promotions in which personal data is requested.
Why and for What Do We Process your Data?
At ARVAL GROEP, SLU we process the information provided to us by interested parties for the following purposes:
Manage orders or contract any of our services, either online or in physical stores.
Manage the sending of the information that is requested of us.
Develop commercial actions and carry out the maintenance and management of the relationship with the user, as well as the management of the services offered through the website and the information tasks, being able to carry out automatic evaluations, obtaining profiles and segmentation tasks of the clients in order to personalize the treatment according to their characteristics and needs and improve the client’s online experience.
Develop and manage contests, raffles or other promotional activities that may be organized.
In some cases, it will be necessary to provide information to the Authorities or third-party companies for audit reasons, as well as handle personal data from invoices, contracts and documents to respond to claims from clients or Public Administrations.
We inform you that the personal data obtained as a consequence of your registration as a user will form part of the Registry of Activities and Treatment operations (RAT), which will be updated periodically in accordance with the provisions of the GDPR.
What is the Legitimacy for the Processing of your Data?
The processing of your data may be based on the following legal bases:
Consent of the interested party for the contracting of services and products, for contact forms, requests for information or registration in e-newsletters.
Legitimate interest for the processing of data of our clients in direct marketing actions and express consent of the interested party for everything related to automatic evaluations and preparation of profiles.
Compliance with legal obligations for fraud prevention, communication with public authorities and claims from third parties.
How Long Do We Keep your Data?
The processing of data for the purposes described will be maintained for the time necessary to comply with the purpose of its collection (for example, for the duration of the commercial relationship), as well as for compliance with the legal obligations that derive from the processing of the data.
To which Recipients are your Data Communicated?
In some cases, only when necessary, ARVAL GROEP, SLU will provide user data to third parties. However, the data will never be sold to third parties. External service providers (for example, payment providers or delivery companies) with whom ARVAL GROEP, SLU works may use the data to provide the corresponding services, however they will not use said information for their own purposes or for transfer to third parties.
ARVAL GROEP, SLU tries to guarantee the security of personal data when it is sent outside the company and ensures that third-party service providers respect confidentiality and have adequate measures to protect personal data. These third parties have the obligation to guarantee that the information is treated in accordance with data privacy regulations.
In some cases, the law may require that personal data be disclosed to public bodies or other parties, only what is strictly necessary for compliance with said legal obligations will be disclosed.
The personal data obtained may also be shared with other companies in the group.
Where is your Data Stored?
In general, the data is stored within the EU. For data sent to third parties that do not belong to the EU, we will ensure that they offer a sufficient level of protection, either because they have Binding Corporate Rules (BCR) or because they have adhered to the “Privacy Shield”.
What rights do you have and how can you exercise them?
You can direct your communications and exercise your rights by making a request to the following email address: info@aracelgroep.com
Under the provisions of the GDPR you can request:
Right of access: you can request information on those personal data that we have about you.
Right of rectification: you can communicate any change in your personal data.
Right of deletion and to be forgotten: you can request the elimination after blocking of personal data.
Right to limit the processing: this implies the restriction of the processing of personal data.
Right of opposition: you can withdraw consent to the processing of data, opposing its continued processing.
Right to portability: in some cases, you can request a copy of the personal data in a structured format, of common use and mechanical reading for its transmission to another controller.
Right not to be subject to individualized decisions: you can request that decisions not be made that are based solely on automated processing, including profiling, that produces legal effects or significantly affects the interested party.
In some cases, the request may be rejected if you request that data necessary for compliance with legal obligations be deleted.
Likewise, if you have any complaint about the processing of the data, you can file a claim with the data protection authority.
Who is Responsible for the Accuracy and Veracity of the Data Provided?
The user is solely responsible for the veracity and correctness of the data included, exonerating ARVAL GROEP, SLU from any responsibility in this regard. Users guarantee and respond, in any case, to the accuracy, validity and authenticity of the personal data provided, and undertake to keep them duly updated. The user agrees to provide complete and correct information in the registration or subscription form. ARVAL GROEP, SLU reserves the right to terminate the contracted services that may have been held with users, in the event that the data provided is false, incomplete, inaccurate or not updated.
ARVAL GROEP, SLU is not responsible for the veracity of the information that is not of its own creation and for which another source is indicated, so it also assumes no responsibility for hypothetical damages that may arise from the use of said information.
ARVAL GROEP, SLU reserves the right to update, modify or delete the information contained on its web pages, and may even limit or not allow access to said information. ARVAL GROEP, SLU is exonerated from liability for any damage or loss that the user may suffer as a result of errors, defects or omissions in the information provided by ARVAL GROEP, SLU, provided that it comes from sources outside of it.
Likewise, the user certifies that he/she is over 14 years of age and that he/she has the legal capacity necessary to provide consent regarding the processing of his/her personal data.
How Do We Treat the Personal Data of Minors?
In principle, our services are not specifically aimed at minors. However, in the event that any of them is aimed at children under fourteen years of age, in accordance with article 8 of the GDPR and article 7 of the LO3/2018, of December 5 (LOPDGDD), ARVAL GROEP, SLU will require valid, free, unequivocal, specific and informed consent from their legal guardians to process the personal data of minors. In this case, the DNI or other form of identification of the person giving consent will be required.
In the case of those over fourteen years of age, the data may be processed with the user’s consent, except in those cases in which the Law requires the assistance of the holders of parental authority or guardianship.
What Security Measures Do We Apply to Protect your Personal Data?
ARVAL GROEP, SLU has adopted the legally required security levels for the protection of Personal Data, and tries to install those other means and additional technical measures within its reach to avoid the loss, misuse, alteration, unauthorized access and theft of the Personal Data provided to ARVAL GROEP, SLU.
ARVAL GROEP, SLU is not responsible for hypothetical damages or losses that may arise from interference, omissions, interruptions, computer viruses, telephone breakdowns or disconnections in the operational functioning of this electronic system, caused by causes beyond ARVAL GROEP, SLU; delays or blockages in the use of this electronic system caused by deficiencies or overloads of telephone lines or overloads in the Data Processing Center, in the Internet system or in other electronic systems, as well as damages that may be caused by third parties through illegitimate intrusions beyond the control of ARVAL GROEP, SLU. However, the user must be aware that security measures on the Internet are not impregnable.
Links to other Websites
On the website https://aracelgroep.com there may be links to other web pages. By clicking on one of these links and accessing an external website, the visit will be subject to the privacy policy of said website, with ARVAL GROEP, SLU being disassociated from any type of responsibility regarding its privacy policy.
How Do We Use Cookies?
The website and the RRSS of ARVAL GROEP, SLU use cookies, for the purposes of optimizing and personalizing your browsing through it. Cookies are physical information files that are hosted on the user’s own terminal; the information collected through cookies serves to facilitate the user’s browsing of the portal and optimize the browsing experience. The data collected through cookies may be shared with the creators of the cookies, but in no case will the information obtained by them be associated with personal data or data that may identify the user.
However, if the user does not want cookies to be installed on their hard drive, they have the possibility of configuring the browser in such a way that it prevents the installation of these files. For more information, consult our Cookies Policy.
Can the Privacy Policy be Modified?
This privacy policy may be modified. We recommend that you review the privacy policy periodically.