On May 25, 2018, the existing regulations on the protection of personal data change. The General Regulation of April 27, 2016 on the protection of personal data (hereinafter “GDPR”) comes into force. Therefore, we address this information to our customers and potential customers as well to inform you about how we process your personal data.
The administrator of your personal data and, therefore, the entity that decides the purposes and methods of processing your personal data is Global Parts Online S.L. Urb. Mares II Edif. 1 Local 1. La Manga del Mar Menor. Murcia. Spain (hereinafter, GPO). Providing the data is voluntary, but necessary to conclude the contract and subsequently provide the service.
Obtaining information about the processing of personal data
In matters related to the protection of personal data, you can contact us at the email address email@example.com or in writing to the address of our headquarters.
Collection of data and the purpose of its processing
We process your personal data because it is necessary to carry out the contract concluded with you, that is, the service (which is in accordance with art. 6 ust. 1 lit. b GDPR), which includes:
Registration of the user in the ordering system and provision of the service to the user, including the presentation of the product offer and the fulfillment of the order (which is in accordance with art. 6 ust. 1 lit. b GDPR);
Examination of complaints and claims (which is in accordance with art. 6 ust. 1 lit. c GDPR),
Investigation of claims related to the concluded insurance contract (which is in accordance with art. 6 ust. 1 lit. f RGPD), where the legitimate objective is the right to claim;
For archiving purposes (which is in accordance with art. 6 ust. 1 lit. c GDPR),
For statistical purposes (which is in accordance with art. 6 ust. 1 lit. f RGPD), where the legitimate purpose of the administrator is to have information about the statistics of our activities, which allows us to improve our business.
In addition, we are required by law to process your data for tax and accounting purposes.
Also, we may process your data for marketing purposes, i.e. promoting our products and services. If we do it without using electronic means of communication, the legal basis for carrying out such activities is art. 6 u. 1 lit f GDPR, where the legitimate purpose of the administrator is to carry out marketing activities. However, if for this purpose we use electronic means of communication, i.e. email, telephone is due to another applicable law, we process data only on the basis of your consent (in accordance with art. 6 ust. 1 lit. a RGPD ).
Your personal data may be transferred to other entities that process your data on their own behalf, including but not limited to the following:
Entities that operate postal or courier services;
Banks – for the recovery of improper profits
State authorities or other entities authorized by law to carry out our tasks (Treasury, Prosecutor’s Office, etc.);
Entities that provide service to our teleinformation systems (hosting companies, IT service providers);
Entities that provide legal, accounting, tax, or advisory services to us.
The storage time of your data
Your personal data will be kept until the contract enters into force (end of service) and also after its end:
The data contained in the contracts – up to the time limit for claims arising from the contract (maximum for a period of 10 years from the date of termination of the contract);
For the purposes of the law, in particular, the obligation to keep accounting documents, issue invoices, etc.
Documents related to warranty and claim will be kept for 1 year after warranty expiration date or claim resolution;
Data for marketing purposes:
In the case of data processing on the basis of consent, until its withdrawal;
In the case of data processing on the basis of the legitimate objective of GPO – pending the presentation of objections;
Data transmitted through the contact form: during the prescription period of any claim (maximum 3 years).
Data processing rights
You have the right to access your personal data and the right to rectify, delete, limit its processing, right to data transfer, right to object, the right to withdraw consent at any time without affecting the legality of the processing, which was done on the basis of consent before its extraction (if the processing is carried out on the basis of consent).
In addition, if you consider that the processing is in breach of the provisions of the RGPD, you have the right to file a complaint with the supervisory authority regarding data protection.
Automated data processing.
Your personal data will be processed automatically, however, it will not cause you any legal effect or materially affect your situation.
The profiling of personal data by GPO is based on the processing of your data (also in an automated way), using it to evaluate certain information, in particular to analyze or forecast preferences.