PRIVACY POLICY AND COOKIES

PRIVACY POLICY

CONTROLLER
The Controller is CLASS RENT A CAR S.L., Avda. Cala Llonga 131, Edif. Ibiza, Local 1, 07849, Santa Eulalia del Rio (BALEARIC ISLANDS).

PRINCIPLES OF PRIVACY
CLASS RENT A CAR S.L. commits to tirelessly striving to guarantee privacy while processing your personal data, as well as to offering the clearest, most comprehensive information possible in a timely manner. We recommend reading this section carefully before providing access to your personal data.

If you are under the age of fourteen, we ask that you do not provide access to your data without consent from your parents.

This section provides information on how we process data pertaining to individuals who have a relationship with our organisation. Firstly, our principles:

We do not request personal information, unless it is necessary to provide the services requested.
We never share personal information with anyone, except for the purposes of meeting with legal requirements or with your express authorisation.
We will never use your personal data for ends other than those expressed in this privacy policy.
Your data shall always be processed in line with a level of protection that is adapted to the data protection legislation, and they will not be subject to automated decisions.
This privacy policy has been redacted taking into account the requirements of the current data protection legislation, namely:

Regulation No 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (GDPR).
Organic Law 3/2018 of 5 December on Personal Data Protection and the guarantee of digital rights (LOPD).
Royal Decree 1720/2007 of 21 December (RLOPD).
This privacy policy was redacted on 6 December 2018.

On occasion of the modification of the processing criteria, and in aid of facilitating its understanding or of adapting it to the legislation in force, we may introduce certain modifications to this privacy policy. We will keep the date updated so you may check on its validity.

Type of processing we carry out:

CONTACTS PROCESSING
Purpose: Attending to petitions, requests or queries received from the website, via email or telephone. Responding to your request or providing follow-up.

Legal standing: Consent by the data subject.

Recipients: The data will not be shared with third parties.

Storage period: Your data will be stored for as long as is needed to meet with the purpose for which they were obtained and to ascertain any potential responsibilities that may derive from said purpose and the processing of the data.

CLIENTS PROCESSING
Purpose: Managing client relationships, invoicing and collections. Managing vehicle reservations and/or rentals. Sending offers.

Legal standing: Contractual relationship and legitimate interest. Executing the vehicle reservation and/or contract. Offering our services.

Recipients: For cases foreseen in the legislation in force, your data will be communicated to the competent public Administrations for the purposes established by the said legislation. We will only communicate them to third parties if they are essential for the provision of services.

Storage period: We will store your data for an undefined period of time once the legally established time period has come to an end, or until such a time as you request their cancellation.

MARKETING PROCESSING
Purpose: Providing information about products and services we consider might be of interest to you. In each of the commercial communications, you will be given a chance to object to this processing by opting out.

Legal standing: Consent by the data subject.

Recipients: The data will not be shared with third parties.

Storage period: We will store your data for an undefined period of time. We will cancel them on your request, or after a certain number of emails resulting in no action on your part.

HR PROCESSING
Purpose: Assessing your résumé for the purposes of any personnel selection processes we may carry out.

Legal standing: Consent by the data subject.

Recipients: The data will not be shared with third parties.

Storage period: We will store your data for a time period no longer than 5 years.

VIDEO-SURVEILLANCE PROCESSING
Purpose: Video-surveillance of the facilities and workforce control.

Legal standing: Legitimate interest by the Controller.

Recipients: The images may be communicated to the Law Enforcement Force and Bodies, Judicial Bodies and the Prosecution Ministry.

Storage period: We will store your data for a time period no longer than 1 month.

YOUR RIGHTS
You have a right to request a copy of your personal data, as well as to rectify any inexact data, complete them should they be incomplete, or delete them when no longer needed for the purposes they were collected.

You are also within your right to limit the processing of your personal data and to obtain them in a structured, legible format.

You may object to the processing of your personal data under certain circumstances (in particular when there is no need for us to process them to meet with any contractual or legal requirement, or when the purpose for the processing is direct marketing).

Consent may be revoked at any time once it has been granted. At that point, we will stop processing your data or, where appropriate, we will stop doing so for that specific purpose. Your decision to revoke consent shall not affect any processing that may have taken place while your consent was still in force.

These rights may be limited, for instance, should we need to reveal data about another person to meet with your request, or should you request that we delete any of the registries we are under the obligation to keep due to a legal requirement or legitimate interest, such as defending ourselves against complaints. This will further include any cases where the right to freedom of expression or information must prevail.

You may contact us through any of the means indicated in the Controller section of this privacy policy, by providing a copy of a document attesting to your identity (usually the DNI – Spanish National ID document).

Another of your rights is that of not being subject to a decision based exclusively on automated processing, including the creation of profiles that produce judicial effects or otherwise affect you.

In the event of a breach of your rights, such as, for instance, not having attended to your request, you are within your right to present a complaint before the personal data protection Supervisory Authorities. The latter might be that of your country (if you live outside of Spain), or the Spanish Data Protection Agency (if you live in Spain).

Additional Information

Data processing outside the European Economic Area.

For the data processing indicated, we may use the services of the following suppliers who are based outside the European Economic Area, but participate in the Privacy Shield agreement, which is approved by the European Union’s data protection authorities.

GOOGLE: Cloud services and email. More information: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI

MICROSOFT: Cloud services, Skype communications and email. More information: https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK

AMAZON: Cloud services. More information: https://www.privacyshield.gov/participant?id=a2zt0000000TOWQAA4

DROPBOX: Cloud storage and file synchronization and sharing. More information: https://www.privacyshield.gov/participant?id=a2zt0000000GnCLAA0

WHATSAPP: Instant messaging and file sending service. More information: https://www.privacyshield.gov/participant?id=a2zt0000000TSnwAAG
Links to third-party websites.

Our web site may, on occasion, contain links to other web sites. You are responsible for reading the data protection policy and legal conditions applicable to each site.

Third-party data.

Pursuant to article 14 of the GDPR, should you provide us with data belonging to third parties, you are responsible for informing them beforehand.

COOKIES POLICY

INFORMATION ABOUT COOKIES:
Cookies are files that may be downloaded to your system through web pages. Their role is essential for the provision of numerous information society services. Among others, they allow for a web page to store and retrieve information about the browsing habits of a user or their piece of equipment, and depending on the information obtained, they may be used for identifying the user and improving the service offered.

TYPES OF COOKIES:
Depending on the entity managing the domain from which the cookies are sent and that processes the data obtained, two different kinds may be identified: own cookies and third-party cookies.

There is also another classification according to the amount of time they remain stored in the client’s browser, making them either session or persistent cookies.

Lastly, there is a further classification of five types of cookies depending on the purpose for which they process the data obtained, namely technical cookies, personalisation cookies, analysis cookies, advertising cookies and behavioural advertising cookies.

COOKIES USED IN THE WEBSITE:
We will now identify the cookies that are being used in this portal, in addition to their type and function:

A technical-type own cookie called PHPSESSID that is needed for correctly browsing the web pages.
Google Analytics cookies, a web analytics service developed by Google that allows for measuring and analysing web page browsing. The browser uses 4 cookies pertaining to this service. According to the aforementioned types, they are own cookies, session cookies and analytics cookies. For more information and for instructions on how to disable the use of these cookies, please go to https://www.google.es/intl/es_ALL/analytics/learn/privacy.html
No information on your personal data is revealed through this web analysis, guaranteeing safeguarding the privacy of users browsing the web. The information obtained is in relation to the number of users accessing the website, the number of pages viewed, the frequency and repetition of the visits, their duration, the browser used, the operator providing the service, the language, the terminal used or the city to which your IP address is assigned. Information that allows for a better, more adequate service by this portal.

HOW TO MODIFY COOKIES’ SETTINGS:
You may restrict, block or delete cookies on this site or any other web page using your browser. Each browser operates differently, and each of their Help functions provide guidance about how to do it.

Internet Explorer: https://windows.microsoft.com/es-xl/internet-explorer/delete-manage-cookies#ie=”ie-10″
FireFox: https://support.mozilla.org/es/kb/Borrar%20cookies
Chrome: https://support.google.com/chrome/answer/95647?hl=”es”