1. Identification of the Data Protection Officer
Identity: Astara Store, S.L.
CIF: B-87677043.
Address: Avenida de Bruselas, 32. Alcobendas, 28108
Telephone number: 910 552 477
Email:
privacy.es@astara.com
2. Purpose of the Processing of your personal data
When personal data is collected through any form that may be enabled on the Web Platform, the user shall be required to provide, at least, those data fields marked with an asterisk, since, if the data considered necessary is not provided, the user shall not be able to accept or manage the web service or query.
The personal data that we process through the Web Platform shall be used for the following purposes only:
To manage your registration as a registered user on the Web Platform.
To help manage the contracting of the products and/or services offered through the Web Platform.
To send our electronic newsletters containing offers, promotions and news related to our Website, on a periodic basis.
To carry out anonymous statistical reports regarding access habits and the activity carried out by users on the Web Platform.
To comply with legally established obligations.
In general, the purpose of the treatment shall be to manage any request made through the web, either through a contact form or any other type of online form, or through a request by email. Such requests may include, without limitation, the management of a request, the response to a request for commercial information, an application for employment or, where appropriate, a registration to receive company newsletters, as well as any other interaction between the web user and Astara Store S.L. that is intended to satisfy the needs of the user. All the requested data is necessary to be able to handle the request.
We inform you that, in the case of vehicle loans, the car may be geolocated at all times.
Likewise, the data provided shall also be processed to send you commercial information about our products and services that may be of interest to you, by post, email, SMS, or any other equivalent electronic means of communication. In the event that the user does not want to receive such commercial information, they shall have the opportunity to opt out, by not checking the corresponding box on the information or contact form itself, or even by exercising their right of opposition at the aforementioned address.
Access to this website may involve the use of cookies. Cookies are small amounts of information that are stored in the browser used by the user, so that the server records information that can be used in subsequent accesses. The information stored allows a specific user to be identified and information about their preferences, the pages they visit, etc. to be recorded. If you do not wish to allow the installation of cookies on your computer, you must configure your browser for this purpose.
3. Data retention period
Personal information shall be kept for the duration of the period of validity of the commercial relationship, or of the interest for which you are reading this policy (for example, if you have sent your CV, or have subscribed to a newsletter), provided you do not request the deletion of your data, during the period of validity of the actions that may arise in relation to this contract; as well as for any claim that we may receive from official bodies in compliance with legislative regulations.
4. Information to send you commercial communications
The personal data that you provide for the sending of commercial communications shall be retained until you revoke your consent, notwithstanding your right to deletion and opposition.
5. Legal grounds for the processing of your personal data
The legal basis for the treatment of your data is the execution of the commercial relationship to which you are a party, so that we can manage, develop and control the corresponding commercial and contractual relationship. All the information we request is mandatory, and so failure to comply in full may make it impossible to provide the services we offer through our website.
With regards to the sending of commercial communications by electronic means - as a result of a prior contractual relationship - the legal basis is the legitimate interest of Astara Store S.L. under article 21.2 of the Information Society Services Law.
With regards to the sending of commercial communications by any means, including electronic ones - outside of any contractual relationship, but based on a legitimate interest since you are addressing the entity - the legal basis is the consent that is requested at the time and which you give freely. In the event that your consent is not obtained, Astara Store S.L. agrees to not process your data for advertising purposes.
6. Communication or Transfer of data and international transfer of data
Your personal data will be transferred to the official dealership that owns the vehicle, to its distributor and to the manufacturer itself in order to provide you with the services that result from the fulfilment, maintenance and control of the contract that, where appropriate, has been signed with respect to the vehicle, such as post-sales and warranty services. You will also be kept informed about and invited to participate in satisfaction surveys about products and services and the automotive sector by telephone, post, or electronically.
Likewise, your personal data may be transferred to those financial entities or corresponding insurance companies in the event that the user has contracted vehicle financing and/or vehicle insurance through the Platform.
Astara Store S.L. may communicate your personal data to those public administrations with competence in the matter and in the event that there is a legal obligation to do so.
However, if at any time during the commercial relationship we need to communicate your data to third parties for new purposes, such communication will only happen once Astara Store S.L. has obtained your prior consent to do so and in the legally required manner.
There may also be third parties who, as a result of services they provide to Astara Store S.L., have access your personal data.
An international data transfer may take place in cases where the vehicle manufacturer is located outside the European Union.
7. Rights
Anyone has the right to obtain confirmation as to whether we at the Astara Store S.L. are processing personal data that concerns them, and in such cases, the right of access to their personal data, details of the purposes of the processing, and the categories of personal data that are being treated.
Likewise, you shall have the right to request the rectification of inaccurate data or, where appropriate, request its deletion when the data is no longer necessary for the purposes for which it was collected; the consent on which the treatment is based has been withdrawn or you object to the treatment; the personal data has been unlawfully processed; or must be deleted for the fulfilment of a legal obligation established by the law of the European Union or of the Member States.
You may request the limitation of the processing of your data when you challenge the accuracy of the personal data during the period that allows the person in charge to verify the accuracy of it; the treatment is unlawful and the interested party opposes the deletion of the personal data and requests instead the limitation of its use; the person in charge no longer needs the personal data for the purposes of the treatment, but the interested party needs it for the formulation, exercise or defence of claims; or the interested party has opposed the treatment, while it is verified whether the legitimate reasons of the person in charge prevail over those of the interested party. In such cases, we shall only keep the data for the exercise or defence of claims.
In certain circumstances and for reasons relating to your particular situation, you may object to the processing of your data. In such cases, Astara Store S.L. shall stop processing the data, except for compelling legitimate reasons, or for the exercise or defence of possible claims.
You shall have the right to receive the personal data that concerns you, and that you have provided, in a structured format, and to transmit it to another data controller without being prevented by the data controller to whom it was provided, when the processing is based on consent; or the treatment is carried out by automated means.
The User may exercise their rights by writing to ASTARA STORE, S.L., Avenida de Bruxelles 32, 28108 Alcobendas or by email to privacy.es@astara.com, attaching a copy of their national identity document, passport or other valid identification document, in all cases, and indicating "Data Protection" as the reference or subject.
Finally, under the terms established by the current legislation, you may revoke the consent that has been provided to us, and interested persons may file a claim with the Spanish Data Protection Agency.
8. Background
The personal data that we process at Astara Store S.L. is provided by the interested party.
9. Additional information
Users guarantee and are responsible for, in all cases, the veracity, accuracy, validity and authenticity of the Personal Data provided, and undertake to keep them duly updated. Likewise, users guarantee that they are 14 years old or over.
In the event that personal data is provided by persons who are not the owners of it, the user must, prior to its inclusion, inform said persons about the contents of the preceding paragraphs. In such cases, the user guarantees that the reported data is from people aged 14 years old or older and that the information is accurate and truthful. Astara Store S.L. shall be exempt from any liability for non-compliance by the user with these requirements.
Astara Store S.L. has adopted the legally required Personal Data protection security levels, and has installed all the means and technical measures available according to the technological status to prevent the loss, misuse, alteration, unauthorised access and theft of the Personal Data provided.
The user is entitled to the confidentiality and duty of secrecy of the employees of Astara Store S.L. and of all those who process the data in the name and on behalf of that firm. Notwithstanding the above, the user is aware of the possibility that the security of communications via the network is not invulnerable.