Below, we provide you with information regarding the processing of personal data regarding the use of our online services.
1. General considerations
1.1. Party responsible for the treatment
JORDAUTO,S.L
info@jordauto.com
1.2. Legal basis of treatment
In the performance of our commercial activities, we process personal data of various owners (for example, users of our website, data subjects and customers). In the lower section of this privacy policy document, we provide information on the purposes and legal basis of such processing, as well as additional details organized according to the different processing situations.
1.3. Who is it addressed to?
Depending on the context of the processing, your personal data may be processed by us or by third parties. Possible recipients include, in particular, subcontractors (such as web hosting providers, software providers and other technical services), shipping services and other providers of online services and content. In addition, the disclosure of data may occur in the context of official requests for information, judicial decisions and legal procedures, when necessary for the exercise of legal actions or compliance with the law. For more details, please refer to the specific instructions on the corresponding treatment, if applicable.
1.4. How long is the data saved
Personal data is retained for as long as necessary to fulfill the purpose for which it was collected, as long as there is a legal obligation to retain it, or as long as there are other legal reasons that justify its continued processing.
1.5. Rights of data owners
Under Article 15 of the GDPR, you have the right to request information about the personal data we hold about you, including details about potential recipients and the intended retention period. If the data is incorrect or is no longer incorrect, you can request its correction according to article 16 of the GDPR. Furthermore, under certain legal conditions, you can request deletion (Article 17 GDPR) or restriction of processing (Article 18 GDPR), as well as object to the processing of your data (Article 21 GDPR). If you believe that the processing of your personal data violates data protection laws, you have the right to lodge a complaint with the data protection supervisory authority of your choice (Article 77 GDPR).
Right to object
You can object at any time, for reasons related to your particular situation, to the processing of your personal data carried out on the basis of Article 6, paragraph 1, letter f) of the GDPR. In such case, we will stop processing your personal data, unless there are compelling legitimate reasons that override your interests, rights and freedoms, or the processing is necessary for the exercise or defense of legal claims. Furthermore, you have the right to object at any time, without needing justification, to the processing of your data for direct marketing purposes, including any profiling related to such marketing.
2. Data processing
2.1. On the website
Through our online platforms, we provide information about our company and services, establish contractual relationships, and encourage communication and interaction with our clients and interested parties.
In addition, we manage personal data for the purposes mentioned above. The scope and legal basis of data processing vary depending on the services requested by the user, the corresponding browser settings and any consent granted.
Web Technologies (Cookies and Similar Technologies)
To improve communication and interaction with our clients, as well as optimize the user experience, we use various software solutions and web technologies. These include web analytics and marketing tools provided by third parties, along with services to integrate third-party content such as fonts, maps and videos.
Analytics tools collect, measure and analyze data such as the number of visitors, their origin, pages visited, time spent on the site and the journey through the pages. Marketing tools allow targeted monitoring and evaluation of activities such as advertising campaigns, affiliate advertising and multi-channel analysis.
The use of these tools, for reasons of electronic privacy and data protection, often requires the consent of the respective user. We use a consent management tool to obtain and manage these consents in accordance with Article 6(1)(a) of the GDPR and, where applicable, Article 25(1) of the German Telecommunications and Media Data Protection Act. communication (TTDSG).
Detailed information about consents and data processing based on them is provided through our consent management tool.
When consent is not necessary, the processing of personal data is carried out on the basis of Article 6, section 1, letter f) of the GDPR for the purposes described, which at the same time represent our legitimate interests or those of our collaborators ( "essential services"). The collection of data for the operation of the website and the maintenance of log files are essential for the proper functioning of the site.
Consent Management Tool
We use a consent management tool (CMT) to obtain and document the necessary consents, fulfilling our obligations to provide evidence under Article 6(1)(c) of the GDPR.
The data collected through the CMT is kept until the user deletes the corresponding cookie. The tool's user interface provides detailed information on data processing by the CMT.
Google Tag Manager
Our website uses Google Tag Manager from Google Ireland Limited to manage web page tags and other tracking services, without requiring the use of cookies.
The use of Google Tag Manager is based on Article 6, paragraph 1, letter f) of the GDPR, based on our legitimate interest in integrating and managing tags efficiently on our website.
YouTube
We have integrated YouTube videos on our website, with extended data protection mode activated. This ensures that Google does not collect usage information until the user actively starts playing the video, at which point cookies are set by Google to improve its services and display personalized advertising on the Google advertising network.
The provider is Google Ireland Limited. For more details, please refer to the applicable YouTube privacy policy.
2.2- Customer Management and Direct Marketing
To efficiently manage Jordauto's contact information and marketing strategies, we use a centralized customer relationship management (CRM) system. This system handles data from contacts of existing customers, registered users of the website, newsletter subscribers and other relevant marketing contacts.
Customer/User Profiling
Through CRM, we analyze marketing information from various sources to optimize our marketing strategies and personalize direct emails. This includes creating and analyzing customer and user profiles to identify popular products and services and design marketing campaigns tailored to specific interests.
In addition to operational customer data, the CRM also manages data generated through our online platforms, such as landing pages and contact forms. Likewise, email marketing and social media data, such as open rates and click paths, are processed.
In addition to operational customer data, the CRM also manages data generated through our online platforms, such as landing pages and contact forms. Likewise, email marketing and social media data, such as open rates and click paths, are processed.
Our goal is to optimize Jordauto's sales and marketing strategies, effectively coordinating activities between the various business units. Therefore, the processing of relevant CRM data is carried out in accordance with Article 6, paragraph 1, letter f) of the GDPR, in collaboration with service providers and based on a balance of interests.
Consent Management (Email Advertising)
Consent management is key in our CRM. According to Article 7, sections 2.1 and 2.2 of the German Unfair Competition Act (UWG), direct advertising, such as email or telephone calls, requires explicit prior consent.
When you give us consent to receive advertising through our online platforms (for example, by subscribing to our newsletter), we document and retain the information in accordance with our legal obligations (Article 7, paragraph 1 of the GDPR and, where applicable , Article 7, letter a) of the UWG), based on Article 6, paragraph 1, letter c) of the GDPR.
In the event of revocation of consent, we retain evidence for documentation in accordance with Article 6(1)(f) GDPR until the legal deadlines expire. This supports our potential need for legal defense and we also apply these measures to advertising objections, maintained on an email exclusion list to prevent unwanted sending.
Direct Marketing and Newsletters (Personalized)
Where consent is granted (e.g. for shopping cart reminders or satisfaction surveys), data processing based on consent is carried out in accordance with Article 6(1)(a) GDPR.
Regardless of consent, we use personal data from the CRM and other sources (including service providers) for targeted and personalized direct marketing. The legal basis for this processing, in the pursuit of our advertising interests, is Article 6(1)(f) of the GDPR.
On our website, you can subscribe to a free, regular newsletter that offers personalized information, product news and current special offers.
To subscribe, we use a double opt-in process, ensuring that you will only receive the newsletter if you confirm that the email address provided belongs to you, via a link in the confirmation email. We retain your email address, registration time, and IP address until you unsubscribe. These data are stored to send you the newsletter and as proof of your registration. You can unsubscribe at any time through the link provided in each newsletter. A notification to the indicated contact details is also valid for this purpose.
Your consent is the legal basis for this processing pursuant to Article 6(1)(a) of the GDPR, and the recording of the process serves our legitimate interests as proof of your consent pursuant to Article 6(1)(a) of the GDPR. f) of the RGPD.
To measure the effectiveness of our emails, we use market-standard technologies to collect and analyze access data such as open and click rates. Web beacons, small image files uploaded to our website, let us know when an email is opened and what links are used. We use this data to improve our services and personalize communication, as well as for statistical purposes and to understand your interests.
By subscribing to our promotional emails, we also ask for your consent to personalize messages to your needs and interests, based on data we have about you across different devices and your purchase history. Your consent pursuant to Article 6(1)(a) GDPR is the legal basis for this processing.
Access data (opening and clicks) is kept anonymous. Although you cannot specifically revoke the described analysis and creation of usage profiles, you can configure your email client to receive emails in text format, thus avoiding tracking. This may limit some email functionality. If you do not want access data analysis or personalized usage profiles, you can revoke your consent to receive personalized email advertising at any time, as described above.
Advertising to Existing Clients
Please note that according to Section 7 Paragraph 3 of the German Unfair Competition Act (UWG), consent is not required for postal and targeted advertising to existing customers. Data processing under legitimate interest according to Article 6(1)(f) GDPR may include email and postal marketing if consent to receive advertising has not been given or has been revoked.
You can object at any time to the use of your data for advertising purposes based on our legitimate interest, by using the corresponding link in our emails or by notifying us via the indicated contact details, at no additional cost beyond the standard rates. transmission.
Contact by SMS and Telephone by Jordauto.
If you have given your consent and provided your mobile or landline phone number in your account, we will contact you by phone or SMS to conduct satisfaction surveys, offer special offers, inform about products and for statistical purposes. You can revoke your consent at any time by sending a notification to the contact details indicated.
Surveys and Contests
When participating in surveys, we use your data for market and opinion research, generally anonymously. If surveys are not evaluated anonymously, data is collected and processed only with your consent in accordance with Article 6(1)(a) GDPR.
In competitions, we use your data to organize and notify the winners according to the conditions of the competition, based on article 6, section 1, letter b) of the GDPR.
Ratings and Comments
We offer the possibility of publicly evaluating our products and services through ratings and comments on our websites. Reviews are added to create transparency in sales and verify that they are based on real purchases. This processing is carried out in accordance with Article 6, paragraph 1, letter f) of the GDPR, based on our legitimate interest in obtaining user opinions to build trust in our websites.
2.3. Contact
If you decide to contact us through our contact forms or by email, we will process your personal data in accordance with the law to respond to your inquiry or process your request. This processing is carried out on the basis of Article 6, paragraph 1, letter f) of the GDPR, to protect the essential interests of our commercial activity, with a particular focus on our corporate communications.
The communication necessary for the performance of a contract concluded with you or in the context of pre-contractual measures based on your inquiry is carried out in accordance with Article 6, paragraph 1, letter b) of the GDPR.
You can also contact us by telephone, where, if you give us your consent at the beginning of the call, the conversation will be recorded. We will retain the information provided during the call for the training of our customer service staff and to ensure the quality of our call center.
Typically, this information is deleted after three months, unless a longer retention period is required by law or for evidentiary purposes, in which case we may retain the recording for up to three years. The consent you give at the beginning of the call constitutes the legal basis (Article 6(1)(a) GDPR) for the recording and evaluation of the telephone conversation.
2.4. User or client account
On our website, we offer users the option to create a customer account or register in our login area to access all available features. Registration of a user account constitutes an agreement for the use of the account in the store. The data collected is used to provide the user with access to these platforms and their services. Required fields are clearly indicated during registration. This information is essential to process orders on our online store and create a customer account. The legal basis for this processing is Article 6(1)(b) GDPR.
On our website, users have the possibility to create a Jordauto member account by registering in our login area. During registration, we ask for the user's email address and a password. Registration cannot be completed without this information. The legal basis for this processing is Article 6(1)(b) GDPR.
Data will be deleted when it is no longer necessary for the purpose for which it was collected, unless a longer retention period is required by legal obligations.
2.5. Order process
If you place an order, we may need to collect additional information beyond that provided during registration, necessary to process your order.
It may be necessary to provide optional data, such as telephone or fax numbers, to contact you by these means in case of queries or to arrange a payment by telephone in case of non-payment after the deadline, following a reminder payment in writing if necessary and if we are unable to contact you by other means.
The legal basis for this processing is Article 6(1)(b) of the GDPR.
2.6. Payment service provider
To make payment, we offer a variety of payment service providers and payment methods, including advance payment, PayPal and invoice. Data necessary for payment processing, such as billing addresses, IBAN, BIC and the selected payment method, may be transferred to these service providers. We receive the relevant payment information from these suppliers to verify payments and proceed with the shipment of the purchased merchandise. We may also receive master data and financial information from payment service providers to comply with identity verification requirements established by law.
The legal basis for the transfer of data to payment service providers in the context of contract processing is Article 6, paragraph 1, letter b) of the GDPR, since the processing is necessary for the execution of the contract. contract and the processing of the order, unless you have given your consent in accordance with Article 6, paragraph 1, letter a) of the GDPR.
For more information on the legal basis and other details regarding data processing carried out by payment service providers under their own responsibility, please refer to the privacy policy of the respective payment service provider. Please note that not all payment methods are available in all countries.
To enforce your data protection rights effectively, we recommend that you contact your payment service provider directly, as only they have access to your data and can take appropriate action accordingly.</ p>
2.7. Verification of sanctions lists
In order to comply with our obligations under EU anti-terrorism legislation, we carry out comparisons with sanctions lists maintained and published by the EU. The legal basis is Article 6(1)(c) of the GDPR, as well as our legitimate interest, in accordance with Article 6(1)(f) of the GDPR, in verifying whether the business relationship infringes the Article 134 of the German Civil Code (BGB) and to avoid actions that may be sanctioned.
3. Online presence on social networks
We maintain an online presence on social networks to, among other things, communicate with customers and interested parties, as well as to provide information about our products and services.
User data is generally processed by the social networks in question for market research and advertising purposes. In this way, it is possible to create usage profiles based on user interests. For this purpose, cookies and other identifiers are stored on users' computers. From these usage profiles, advertisements are inserted, for example, on social networks, as well as on third-party websites. In the scope of the operation of our online presences, we may have access to information such as statistics on the use of our online presences provided by the social networks themselves. These are aggregate statistics that may include, in particular, demographic information and data on interaction with our online presences, as well as the publications and content that are distributed through them. In the list below you can find detailed information and links regarding the social media data to which we have access as the operator of the online presence.
The legal basis for data processing is Article 6(1)(f) of the GDPR, based on our legitimate interest in effectively informing and communicating with users, or the Article 6, paragraph 1, letter b) of the GDPR, in order to keep in touch with our clients and inform them, as well as to carry out pre-contractual measures with future clients and interested parties.
To know the legal basis of data processing carried out by social networks under their own responsibility, please consult the information on data protection of the respective social network. You can also obtain more information about the respective data processing and opposition options at the links below.
We would like to point out that the most effective way to address data protection issues is to contact the service provider of the social network in question, as only these providers have access to the data and can directly take appropriate measures.
Below you will find a list with information about the social networks in which we have an online presence:
- Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
- Operation of the Facebook fan page under shared responsibility on the basis of a agreement on the shared processing of personal data< /a> (the so-called Page Insights supplement relating to the responsible party)
- Information on the data processed relating to knowledge of the website and on the contact option in case of data protection issues: https://www.facebook.com/legal/terms/information_about_page_insights_data
- Privacy policy: https://www.facebook.com/about/privacy/
- Opt-out: https://www.https://www.facebook.com/settings ?tab=ads a http://www.youronlinechoices.com.
- Instagram (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
- Privacy policy: https://help.instagram.com/519522125107875
- Google/YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
- Privacy policy: https://policies.google.com/privacy
- Opt-out: https://www.google.com/settings/ads</ li>
4. Data Protection Officer
You can contact our data protection officer at the following address:
Data Protection Officer
JORDAUTO
Email: info@jordauto.com
Version: 1.0/Last update: July 2024