Privacy Policy

ATRAM GESTION 2007 SL PRIVACY STATEMENT


Due to the implementation of the new European regulations to protect customer privacy and the correct use of their data (GDPR, General Data Protection Regulation), our data protection terms are changing as of May 25, 2018. We inform you:

1 – CONTROLLER:


2 - INFORMATION AND CONSENT:
By accepting this Privacy Policy, the User is informed and gives his or her free, informed, specific, and unequivocal consent for his or her personal data to be processed by ATRAM.

3 - FOR WHAT PURPOSE WILL ATRAM PROCESS THE USER'S PERSONAL DATA?
The purpose of processing the personal data that the client provides to ATRAM will be to provide the service contracted with this company. Data will be used solely and exclusively for the agreed purpose, ensuring, at all times, that it is processed in a proportionate and limited manner. The personal data provided by the User will be included in a Data File and processed by ATRAM for the following purposes:


4 - FOR HOW LONG WILL ATRAM PROCESS THE USER'S PERSONAL DATA?
The User's data related to the fulfillment of the contractual relationship will be retained for this purpose for the entire duration of the contract and, even afterward, for the entire time required by applicable law and until any liabilities arising from the contract expire.

Regarding the sending of commercial communications, ATRAM will process the User's data until the User objects or until the User decides to exercise their Personal Data Protection Rights.

In any case, the User may exercise the following Rights:

Access, Rectification, Cancellation, Objection, Information, Deletion, Limitation, and Portability, as described below. In the event that the User is not satisfied with the exercise of these Rights, they may also resort to the Protection of Rights of the Spanish Data Protection Agency (AEPD).

5 - WHAT USER DATA WILL ATRAM PROCESS?
ATRAM will process the following categories of User data:


If the user decides to provide us with third-party data, we must enter into a contract with ATRAM regarding the processing of that data. The user is obliged to inform those third parties of this privacy policy, releasing ATRAM from any liability in this regard. In this case, we would become the Data Processor. However, ATRAM may carry out periodic verifications to verify this fact, adopting the corresponding due diligence measures in accordance with data protection regulations.

The user's data may be processed through access by third-party professionals, without this involving data transfer, provided that, depending on the purpose and the processing of the personal data, it is necessary. In this case, without it being binding on the client, ATRAM will enter into a contract with the Data Processor, and ATRAM will adopt all the protection and security measures described in the aforementioned regulations.

6 - WHAT IS THE LEGAL BASIS FOR PROCESSING USER DATA?
ATRAM is authorized to process the personal data provided by the User by virtue of the contractual relationship entered into between the two parties for the provision of services.
ATRAM's processing of User data for the purpose of sending commercial communications, creating profiles, and conducting satisfaction surveys is based on ATRAM's legitimate interest in accordance with the provisions of the formalized contract and based on the provisions of the GDPR.

7 - TO WHICH RECIPIENTS WILL THE USER DATA BE DISCLOSED?
User data may be disclosed to Public Administrations in the cases provided for by law.
It may also be disclosed to other companies within the corporate group for internal administrative purposes and to improve the provision of the contracted service.
Likewise, the Tax Administration, insurance companies, banks, consultancies, mutual insurance companies, and suppliers, if necessary for the proper provision of the contracted service and solely for that purpose.

ATRAM informs the user of the possibility that their data may be processed by third-party professionals, without implying a transfer or communication of personal data, provided that, depending on the purpose and the processing of the personal data, it is necessary. In this case, without being binding on the client, ATRAM will formalize a contract with the Data Processor.

Similarly, ATRAM will adopt all types of security measures to protect the processing of personal data provided by the client, under the same terms as in the previous section.

8 - COMMERCIAL AND PROMOTIONAL COMMUNICATIONS:
One of the purposes for which ATRAM processes the personal data provided by Users is to send them informative communications about news in the transportation sector that may be of interest to the user, as well as commercial communications by electronic and conventional means, with information regarding products, services, promotions, offers, events, or news relevant to Users. Whenever any such communication is sent, it will be addressed solely and exclusively to those Users who have not previously expressed their objection to receiving it.

If the user wishes to stop receiving informative, commercial or promotional communications from ATRAM, they can request to unsubscribe from the service by sending an email to the following email address: lopd@atramgestion.com or through the link included in promotional emails.

9 - EXERCISE OF RIGHTS:
The User may send a letter to ATRAM Customer Service Department – ​​Data Protection, Plaza de España, 10, Polígono Industrial Base 2000, 30564 Lorquí, Murcia, or an email to lopd@atramgestion.com with the reference "Data Protection," attaching a photocopy of their identity document, at any time and free of charge, to:


Last updated: May 2018