Through this notice, “RLE International Iberia, S.L.U.” (hereinafter “RLE Iberia”), informs users of the Web www.rleiberia.es is in compliance with Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 (General Data Protection Regulation) and other applicable regulations, of its policy of protection of personal data with the purpose that they decide expressly, freely and voluntarily, to provide “RLE Iberia” the personal data requested of them by the request for information or for the hiring of the various services offered by the After-Sales and Engineering specialized in the automotive sector, and where access is offered to content of the sector of various kinds.
Unless specifically stated otherwise, it is considered necessary to complete all the data required on the form or similar form in a true, accurate, complete and updated manner. Otherwise, “RLE Iberia” may, depending on the case, not proceed with the registration of the user, or deny the specific service requested. All data provided by the user/interested party will be treated in accordance with the characteristics detailed below.
Information regarding the treatment of personal data
Identification of the responsible party: “RLE International Iberia, S.L.U.”, with fiscal address at C/Fructuós Gelabert 2-4, 2º-7ª, 08970 Sant Joan Despí (Barcelona), with NIF number: B81978215, registered in the Mercantile Registry of Barcelona in Volume 12.990, Folio 46, Section 8, Page M-209408, 1st inscription. Contact e-mail email@example.com.
Purpose of treatment:
All data provided will be processed for the following purposes:
To respond to requests made by the person concerned.
To maintain the relationship established in each case.
Management, administration, information, provision and improvement of the services decided to hire.
Commercial communications related to our products and services.
The personal data provided will be kept as long as the commercial relationship is maintained, the data subject does not request its deletion or it is necessary for the purposes of the processing. The destruction of the data will not be carried out when there is a legal provision requiring its conservation, in which case the data will be blocked, and will be kept only at the disposal of public administrations, judges and courts, for the attention of possible liabilities arising from the processing, during the period of limitation of the latter.
At present, no automated decisions, including profiling, are made on the basis of your personal data. In the event that such automated decisions are to be made in the future, prior consent will be obtained.
Legitimization of treatment:
All processing of your personal data has been previously and expressly consented to by you. You are informed beforehand of all those points required by law in order to give informed consent.
You may revoke this consent at any time as detailed below in this document.
Recipients, assignments and transfers of data:
Your data will not be transferred unless it is strictly indispensable for the fulfilment of the above mentioned purposes or legal obligation.
Likewise, your data will not be transferred to countries outside the European Union unless it is indispensable for the fulfilment of the purposes and you have previously and expressly authorised us to do so.
Rights of the interested parties:
You may exercise your rights at any time by sending a letter to “RLE Iberia”, C/Fructuós Gelabert 2-4, 2º-7ª, 08970 Sant Joan Despí (Barcelona); or by sending an e-mail to firstname.lastname@example.org.
The application must contain name, surname and the documentation that proves the identity of the interested party or his/her legal representative, as well as a document that proves the representation, a petition that specifies the request, an address for the purposes of notifications, the date and signature of the applicant and documents that prove the request made.
If the application does not meet the specified requirements, it will be required to be corrected.
The rights of the interested parties are: of access, rectification, limitation, portability, opposition and suppression; and their definition is:
Right of access:
The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed and, if so, the right of access to the personal data and to the following information:
(a) the purposes of the processing
(b) the categories of personal data concerned
(c) recipients or categories of recipients to whom the personal data have been or will be communicated, in particular recipients in third parties or international organisations
(d) if possible, the intended period of retention of the personal data or, if this is not possible, the criteria used to determine this period
(e) the existence of the right to request from the controller the rectification or erasure of personal data or the limitation of the processing of personal data relating to the data subject or to object to such processing
(f) the right to lodge a complaint with a supervisory authority
(g) where the personal data have not been obtained from the data subject, any available information on their origin
(h) the existence of automated decisions, including profiling, as referred to in Article 22(1) and (4) and, at least in such cases, significant information on the logic applied and the significance and expected consequences of such processing for the data subject.
Where personal data are transferred to a third country or to an international organisation, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 concerning the transfer.
The entity responsible for the processing shall provide a copy of the personal data processed. It may also charge a reasonable fee based on administrative costs for any other copies requested by the data subject. Where the request is made by the data subject by electronic means, and unless the data subject requests otherwise, the information shall be provided in a commonly used electronic format.
Right of rectification
The interested party will have the right to obtain from RLE IBERIA, without undue delay, the rectification of inaccurate personal data concerning him/her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of an additional statement.
Right of withdrawal:
The interested party will have the right to obtain without undue delay from RLE IBERIA the deletion of the personal data concerning him/her, which will be obliged to delete without undue delay the personal data when any of the following circumstances occur:
a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed
(b) the data subject withdraws the consent on the basis of which the processing is carried out in accordance with Article 6(1)(a) or Article 9(2)(a) and the processing is not based on another legal basis
(c) the data subject opposes the processing according to Article 21(1) and no other legitimate grounds prevail for the processing, or the data subject opposes the processing according to Article 21(2)
(d) the personal data have been processed unlawfully
(e) the personal data must be deleted in order to comply with a legal obligation under Union law or the law of the Member States which applies to the controller
(f) the personal data were obtained in connection with the supply of information society services referred to in Article 8(1)
When RLE IBERIA has made public the personal data of which the person concerned has exercised his or her right of deletion, the person responsible must adopt, taking into account the technology available and the cost of its implementation, reasonable measures to communicate to third parties who are processing such information the request for deletion of the data, as well as any link to such data or any copy or replica thereof.
This right shall be limited by other rights such as the right to freedom of expression and information, by the fulfilment of any legal obligation, or where there are grounds of public interest.
Right to limitation of treatment:
The data subject shall have the right to obtain from RLE IBERIA the limitation of the processing of the data when any of the following conditions are met
(a) the data subject contests the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the data
(b) the data subject is unlawful and the data subject opposes the deletion of the personal data and requests instead the limitation of their use
c) RLE IBERIA no longer needs the personal data for the purposes of processing, but the data subject needs them for the formulation, exercise or defence of claims
(d) the data subject has opposed the processing pursuant to Article 21(1), while it is verified whether the legitimate interests of the controller prevail over those of the data subject
Where the processing of personal data has been restricted pursuant to paragraph 1, such data may be processed, with the exception of their storage, only with the consent of the data subject or for the purpose of lodging, exercising or defending complaints or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or of a particular Member State.
Any data subject who has obtained a restriction to processing pursuant to paragraph 1 shall be informed by RLE IBERIA before the restriction is lifted.
Right of opposition:
The data subject shall have the right to object at any time on grounds relating to his/her particular situation to the processing of personal data concerning him/her on the basis of Article 6(1)(e) or (f), including profiling on the basis of those provisions.
RLE IBERIA, as the controller, will stop processing the personal data, unless it proves that there are compelling legitimate reasons for the processing that outweigh the interests, rights and freedoms of the data subject, or for the formulation, exercise or defence of claims.
Where the processing of personal data is carried out for the purpose of direct marketing, the data subject shall have the right to object at any time to the processing of personal data relating to him/her, including profiling insofar as it relates to such marketing.
Where the data subject objects to the processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.
Where personal data are processed for the purpose of scientific or historical research or statistical purposes in accordance with Article 89(1), the data subject shall have the right, on grounds relating to his/her particular situation, to object to the processing of personal data concerning him/her, except where necessary for the performance of a task carried out in the public interest.
Data portability law:
The data subject shall have the right to receive personal data relating to him/her which he/she has supplied to a controller, in a structured, commonly used and machine-readable form, and to pass them on to another controller without being prevented from doing so by the controller to whom he/she has supplied them, where
(a) the processing is based on consent within the meaning of Article 6(1)(a) or Article 9(2)(a) or on a contract within the meaning of Article 6(1)(b); and
(b) processing is carried out by automated means.
2.When exercising his/her right to data retention according to paragraph 1, the data subject shall be entitled to have the personal data transferred directly from controller to controller where this is technically possible.
The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17. This right shall not apply to processing operations necessary for the performance of a task carried out in the public interest or in the exercise of public authority vested in the controller.
The controller shall communicate any rectification or erasure of personal data or any restriction to the processing carried out pursuant to Article 16, Article 17(1) and Article 18 to each of the recipients to whom the personal data have been disclosed, unless this is impossible or involves a disproportionate effort. RLE IBERIA shall inform the data subject of such recipients, if he or she so requests.
Withdrawal of consent: The interested party, who at the time had given consent to process their personal data, may also withdraw it with equal ease. Withdrawal of consent shall not render unlawful the processing carried out previously.
The person concerned shall have the right to lodge a complaint with the competent supervisory authority.
When personal data are to be further processed for different purposes, the controller shall inform the data subject of this fact.
Security measures: The Data Controller states that he or she has adopted the necessary technical and organisational measures to guarantee the security of the data and to avoid its alteration, loss, processing or unauthorised access, taking into account the state of technology, the nature of the data stored and the risks to which it is exposed, whether caused by human action or by the physical or natural environment.
The www.rleiberia.es website contains links to other websites that may be of interest to the interested party. RLE IBERIA does not assume any responsibility for these links, without being able to give any guarantee of compliance with appropriate privacy policies, so that the person concerned accesses the content of these websites under the conditions of use set out in them and under their sole responsibility.
“RLE International Iberia, S.L.U.”
All rights reserved