The Website www.pla-automobil.com (hereinafter the “Website”) is the property of INTER RECUP 66 S.L.U. hereinafter the Data Controller.

PERSON RESPONSIBLE FOR THE PROCESSING: INTER RECUP 66 S.L.U. B55305403 C/ Nou, 63 – 65 17600

FIGUERES interrecup66.es@gmail.com- 972506194 / 669126319

INTER RECUP 66 S.L.U. welcomes you and invites you to carefully read the Privacy and Data Protection Policy of this Website (hereinafter “Privacy and Data Protection Policy”), which describes the terms and conditions that will be applicable to your browsing of the Website, in accordance with the provisions of the applicable Spanish regulations. As www.pla- automobil.com may change this Privacy Policy in the future, we recommend that you visit it periodically to keep yourself informed of any changes.

With the aim of ensuring that the website meets the criteria of transparency, clarity and simplicity, the User is recommended that any suggestions, doubts or queries regarding the Privacy and Data Protection Policy can be resolved by contacting www.pla-automobil.com by telephone: 972506194 / 669126319 or by e-mail: interrecup66.es@gmail.com.

TREATMENT PRINCIPLES

Your personal data will be processed:

• In a lawful, fair and transparent manner vis-à-vis the data subject

• Collected for specified, explicit and legitimate purposes and shall not be further processed in a way incompatible with these purposes; for archiving purposes in the public interest, scientific and historical research purposes or even statistical purposes is not considered incompatible with the initial purposes.

• Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

• Accurate and up to date; they shall take all reasonable steps to ensure that personal data which are inaccurate in relation to the purposes for which they are processed are erased or rectified without delay.

-Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be kept for longer periods provided that they are processed exclusively for archiving purposes in the public interest, scientific or historical research purposes or even statistical purposes.

• Processed in such a way as to ensure appropriate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, by implementing appropriate technical or organisational measures.

LANGUAGE:

The language applicable to this privacy policy is Spanish. Therefore, in the event of any contradiction in any of the versions provided in other languages, the Spanish version shall prevail. As far as the interpretation of contracts is concerned, specific reference shall be made to Art. 1281 et seq. of the Civil Code.

PURPOSE:

• To manage the sale of products and services compatible with our corporate purpose, dedicated to the sale of all kinds of products parts such as: starter motors, alternators, electric steering pumps, steering racks among others.

• To attend to your requests, invoice these services or purchases, manage cancellations and refunds within the legal deadlines set out in Law 34/2002, of 11 July, on information society services and electronic commerce, Royal Legislative Decree 1 / 2007, of 16 November, which approves the revised text of the General Law for the Defence of Consumers and Users and other complementary laws.

• Send advertising and promotions related to our corporate purpose and areas of interest, by any means, whether by post, telematic, or through fixed or mobile telephony. As well as inviting them to events organised by the company, both in person and online.

REGULATORY COMPLIANCE:

We reserve the right to store and retain information provided by you, including the services used, information including account information and personal data to comply with applicable laws, where necessary to provide evidence in arbitration or court, keeping it locked and pseudonymised, to ensure its security, secrecy and confidentiality.

TENDER:

We will not process data without explicit consent for each of the purposes, only when:

• Where necessary for the performance of a contract to which the data subject is a party or

for the implementation of pre-contractual measures at the request of the data subject.

• Where it is necessary for compliance with a legal obligation applicable

to the controller.

-Where processing is necessary to protect the vital interests of the data subject or of

another natural person;

• Where necessary for the purposes of the legitimate interests pursued by the controller or by a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.

We will ensure that appropriate safeguards, which may include encryption or pseudonymisation, are in place to protect the identity of the user.

LEGITIMACY:

Consent, contractual relationship and legitimate interest.

LEGAL BASE:

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data shall under no circumstances transfer your personal data, Organic Law 3/2018 of 5 December on the protection of personal data and guarantee of digital rights, Law 34/2002 of 11 July on information society services and electronic commerce. Royal Legislative Decree 1/2007, of 16 November, approving the revised text of the General Law for the Defence of Consumers and Users and other complementary laws.

TARGET AUDIENCE:

Your data will be transferred to other companies in the sector with similar corporate purposes, as well as to operators who manage the website and maintain our computer application that allows us to manage our services, which are essential for the management of our activity.

DURATION:

The data provided will be retained for a period of 5 years from the last contract, unless you have not requested the blocking or deletion of the data beforehand, or as prescribed by tax legislation. Tax data will be stored for 5 years by legal prescription.

DATA QUALITY:

All data requested through the website are mandatory, as they are necessary for the provision of an optimal service to the user. In the event that all the data is not provided, the provider does not guarantee the provision of the services requested.

The user shall be solely responsible for the veracity and updating of the data provided through the different forms on the website.

PROFILING

We will not automatically process your personal data in a way that violates your fundamental rights.

MINORS:

Our services are not intended for minors or persons who are incapacitated at the time of contracting. We understand that they have the authorisation and consent of their parents, guardians or legal representatives. It shall be your responsibility to use them either negligently or negligently, which may result in non-contractual liability.

DIGITAL WILL:

Persons linked to the death for family or de facto reasons, as well as their heirs, may contact the data controller in order to access this content and give the instructions they deem appropriate regarding its use, destination or deletion.

The aforementioned persons may not access the content of the deceased person, nor request its modification or deletion, when the deceased person has expressly forbidden it or when it is established by law.

INTERNATIONAL DATA TRANSFERS

No international transfers of personal data are foreseen.

RIGHTS:

You may exercise your rights of access, rectification, erasure and/or objection, as well as the right of purpose limitation and portability. You can contact us at our mailing address:

or to our postal address by contacting the person in charge of our company’s archives. To do so, it will be necessary to provide personal data and supporting documents together with your request.

In order to do so, you or a legally authorised person must provide the following information. documents:

• • Photocopy of ID card
  • Sufficient identification and representation.
  • Explanation and purpose of the complaint.
  • Address for sending communications, or e-mail, so that we can contact you

as soon as possible.

ADDITIONAL INFORMATION:

You have the right to obtain confirmation about how we are processing your personal data. Therefore, you have the right to access your personal data, inaccurate data or

request its deletion when the data is no longer necessary for the purposes for which it was collected at any time, easily and free of charge.

You can also UNSUBSCRIBE from receiving promotional messages, in compliance with the LSSICE 34/2002. The following information is required for this purpose:

• • Name of the company and details of its representative.
  • Postal and e-mail address where you wish to receive communications.
  • Clear request, which does not need to be motivated.

RIGHTS

• Right of access: allows the data subject to know and obtain information about his or her personal data undergoing processing.

• Right of rectification or erasure: this right allows you to correct inaccurate or incomplete data and to modify it.

• Right of deletion: to allow inappropriate or excessive data to be deleted.

• Right to object: the data subject’s right not to have his or her personal data processed or to have the processing ceased.

• Limitations on Processing: this entails the power to limit the processing of the personal data retained, in order to limit future processing.

• Data portability: The duty on the part of the data controller to provide the data subject’s processed data, and to transmit it to another data controller provided that it is in automated format.
• Right not to be subject to automated individual decisions (including profiling): the right not to be subject to decisions based exclusively on automated processing which may violate fundamental rights of the data subject.

• Right to withdraw consent: As a user, you have the right to withdraw your consent at any time. Withdrawal of consent shall not affect the lawfulness of processing carried out prior to the withdrawal of consent.

• You can always turn to the supervisory authority, in this case the Spanish Data Protection Agency, if you believe that your requests have not been met. https://www.aepd.es/

SECURITY MEASURES

The data you provide will be treated confidentially. The data controller has adopted all the technical and organisational measures and all the necessary levels of protection to guarantee security in the processing of data and to avoid its alteration, loss, theft, unauthorised processing or access, in accordance with the state of technology and the nature of the data stored.

Likewise, it is also guaranteed that the processing and recording in files, programmes, systems or equipment, premises and centres comply with the requirements and conditions of integrity and security established in the regulations in force.

.

CODE OF CONDUCT OF OUR ESTABLISHMENT

We are committed to ensuring that the content of our services:

• They shall not induce or promote sexual, racial or religious discrimination or any other violation of the fundamental rights and public freedoms recognised by the Spanish Constitution or EU regulations.
• They shall not induce or incite unlawful action.
• They shall not lead to erroneous conclusions as a result of inaccuracy, ambiguity, exaggeration, omission or the like.
• They must not induce an unacceptable state of anxiety or fear, or take advantage of or exploit the user’s state of economic, occupational or personal need.
• They shall not induce or incite any person to engage in practices that are dangerous, hazardous or harmful to health or mental equilibrium.
• They shall not infringe legal or regulatory rules on secrecy of communications, intellectual property, the right to honour and personal or family privacy, or any other provision applicable to the nature of the service.
• Not contain false information.
• Services incorporating requests for information or personal data, including name, address or other data, including landline or mobile telephone numbers, must be adequate, relevant and not excessive in relation to the purpose for which they are collected, and must not contain false information.

Users have the right to:

• Receive objective, prior, accurate and complete information on the conditions for the provision of the products offered to them.
• Receive the products in the conditions offered or agreed with the company or the service provider.
• Obtain the documents accrediting the terms of the contract and the invoices for the products paid for, issued in accordance with the regulations in force.
• Make any complaints they consider relevant and obtain without delay the official complaint form and appropriate guidance on how to fill it in.
• Request and obtain the actions of the arbitration bodies regulated by the applicable legislation.
• Request and receive assistance from the administrations, when necessary for the defence of their rights as users, regardless of their origin and destination and without prejudice to the competences of other bodies and authorities.
• Request and receive quality information regarding products and method of delivery and payment.