Privacy Policy

In accordance with the General Data Protection Regulation GDPR EU 679/2016 and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights, the following information is provided regarding the processing of your personal data.

Who is responsible for processing your personal data?

Data controller: IBMOT MOTOR SERVICES S.L., Tax ID (NIF/CIF): B27561299, address: C/ Maquinaria nº 1, local 8, 07011, Palma, Spain; telephone: 662916805; email: admin@ibmotexperience.com.

Data Protection Officer: PROTECMIR — website: www.protecmir.com — email: protecmirlegal@protecmir.com.

What data do we process?

At IBMOT MOTOR SERVICES S.L. we process the personal data you provide by completing the forms made available for that purpose on this website, the personal data arising from the provision or contracting of our services or products, and/or the personal data arising from the commercial relationship you maintain with us. We also process the personal data generated in the context of your activity on our website, a category which includes your browsing data obtained through the website.

It is important to us to keep the record of your personal data up to date. You are obliged to inform us of any change or error in your personal data as soon as possible by contacting us at the email address admin@ibmotexperience.com.

For what purpose do we process your personal data?

IBMOT MOTOR SERVICES S.L. may process your personal data for the following purposes:

• Management and maintenance of the services provided through the website.
• Management of and response to enquiries and requests for information made by users through the contact form. The email address and personal data you provide through the website's contact form will be used exclusively to respond to the enquiries you raise by this means.
• Compliance with applicable legal obligations.
• Sending commercial communications and newsletters, as well as advertising for our services and products.
• Management of requests for information or quotations for our services or products.
• Where you have consented, and in order to be able to offer you services in line with your interests, your personal data may be used to build a commercial profile. No automated decisions will be taken on the basis of that profile.

We retain your personal data in our systems and files for as long as is necessary to carry out the purposes of the processing and to comply with applicable legislation. Your personal data will be retained for as long as a contractual and/or commercial relationship with you exists, or until you exercise your right to erasure and/or restriction of the processing of your data. The retention period for personal data will vary according to the purposes of the processing and, as a general rule:

• The personal data you provide when contracting our services or products will be retained for the duration of the contractual relationship and, once it has ended, for the limitation period of any legal actions that may arise from it.
• The personal data you provide so that we can manage requests for information or enquiries through the contact form will be retained until you request its erasure or cancellation.
• The personal data you provide in order to subscribe to our newsletter will be retained until you request its erasure, object to it and/or request its restriction.
• The personal data obtained from your browsing and consumption habits, as well as the resulting commercial profile, will be retained until you request its erasure or cancellation.

Your personal data will be retained for as long as it is useful for the stated purposes and, in any event, for the legally required periods and for the time necessary to address any liabilities arising from the processing.

Data security

We have appropriate technical and organisational security measures in place to protect your personal data against unauthorised or unlawful processing and against its accidental loss, destruction or damage, ensuring its integrity and confidentiality. The technical and organisational security measures implemented make it possible to: ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services; restore the availability of and access to personal data in a timely manner in the event of a physical or technical incident; and regularly verify, assess and evaluate the effectiveness of the technical and organisational measures implemented to ensure the security of the processing.

These technical and organisational security measures have been designed taking into account our IT infrastructure, the state of the art in accordance with current standards and practices, the cost of implementation and the nature, scope, context and purposes of the processing, as well as the risks of varying likelihood and severity that the processing entails for your personal data.

What is the legal basis for processing your data?

The legal basis for processing your personal data is:

• The performance and maintenance of a contractual and commercial relationship with you, such as the contracting of the entity's products and services or the management of and requests for quotations for the entity's products and/or services, in accordance with article 6.1.b of GDPR (EU) 679/2016 and Organic Law 3/2018, of 5 December (LOPDGDD).
• Your express consent for one or more purposes, such as the sending of advertising communications or newsletters, whether our own or those of third parties, the management of CV submissions, or participation in activities or competitions, in accordance with article 6.1.a of GDPR (EU) 679/2016 and Organic Law 3/2018, of 5 December (LOPDGDD).
• Compliance with various legal obligations, in accordance with article 6.1.c of GDPR (EU) 679/2016 and Organic Law 3/2018, of 5 December (LOPDGDD).
• The pursuit of legitimate interests of the data controller or of a third party, for example for security reasons, to improve our services, or to manage your requests or enquiries.

During the data collection process, and at every point on the website where personal data is requested, the user will be informed — whether by means of a hyperlink or by including the relevant notices in the form itself — as to whether the collection of their personal data is mandatory.

The personal data requested in the website's forms is, as a general rule, mandatory (unless the required field states otherwise) in order to fulfil the stated purposes. Therefore, if the requested personal data is not provided, or is not provided correctly, those purposes cannot be fulfilled.

There is an obligation to provide your personal data when contracting a service or product, and/or when requesting quotations or offers.

The sending of advertising communications or newsletters about our products and services is based on the consent requested from you, and the withdrawal of that consent will in no case affect the contractual or commercial relationship you maintain with us.

If you have authorised us to send advertising for our services and products, your personal data may be used to manage the sending of advertising offers and newsletters by electronic means. In such cases, articles 20 and 21 of Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce apply with regard to the use and processing of your personal data for the purpose of managing the sending of advertising by electronic means.

If you have ticked the option to receive advertising, or if you have subscribed to our newsletter, you may cancel this option at any time.

To which recipients will your data be disclosed?

As a general rule, your personal data will not be disclosed to any third party outside the entity, except where legally required. However, we inform you that third-party suppliers may have access to your personal data as data processors, in the context of providing a service to the entity acting as data controller. You may request the complete list of recipients who may receive your personal data as data processors or as third-party recipients by transfer at the email address admin@ibmotexperience.com. In addition to the above, the entity may assign or disclose personal data in order to meet its obligations towards Public Administrations where so required, in accordance with current legislation.

International data transfers

In order to carry out the data processing activities described above, we may transfer data to countries outside the European Economic Area (EEA), and store such data in physical or digital databases managed by entities acting on our behalf. Database management and data processing are limited to the purposes of the processing and are carried out in accordance with current data protection laws and regulations. Where data is sent outside the EEA, the company will use appropriate contractual measures to ensure the protection of the data, which may include, among others, contracts based on the standard data protection clauses adopted by the European Commission applicable to sending personal data outside the EEA.

What rights do you have regarding the processing of your personal data?

You have the right to obtain access to your personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, you may request the restriction of the processing of your data, in which case we will retain it only for the exercise or defence of claims. Likewise, for reasons relating to your particular situation, you may object to the processing of your data, in which case your personal information will no longer be processed for those purposes to which you have objected. Where technically possible, you may request the portability of your data to another data controller.

To exercise these rights, in accordance with current legislation, you may write by post, enclosing a copy of a document proving your identity (ID card or passport), to IBMOT MOTOR SERVICES S.L., C/ Maquinaria nº 1, local 8, 07011, Palma, Spain, or send an email to admin@ibmotexperience.com. You have the right to lodge a complaint with the supervisory authority: the Spanish Data Protection Agency (www.agpd.es). Source of the personal data: the data subject.

You expressly accept the inclusion of the personal data collected during browsing on the website and/or provided by completing any form, as well as that arising from a possible commercial relationship, in the entity's automated personal data files.

The entity guarantees the confidentiality of users' personal data. However, the entity will disclose to the competent public authorities the personal data and any other information in its possession or accessible through its systems that is required, in accordance with the legal and regulatory provisions applicable to the case. Personal data may be retained in the files owned by IBMOT MOTOR SERVICES S.L. even after the commercial relationships formalised through the entity's website have ended, exclusively for the purposes indicated above and, in any event, for the legally established periods, at the disposal of administrative or judicial authorities.

Use of social media

When you interact with our website through various social networks — for example when you connect with us, follow us or share our content on social media (Facebook, Twitter, LinkedIn, Instagram or others) — we may receive information from those social networks, including information about your profile, the user ID associated with your social media account, and any other public information that you allow to be shared with third parties on the social network.

The entity uses social media in order to provide information about the services it offers, as well as about any other activity or event that takes place and is to be publicised, but it will at no time obtain from them personal data of the users who interact on those networks, unless express authorisation has been given.

This data is used only within the social network itself and is not incorporated into any processing system.

Social networks have their own terms of use and privacy policies, which you are obliged to take into account and comply with if you use them.