Privacy policy for the protection of personal data aimed at customers of CONTINENTAL PARKING, SL

1. PRIVACY AND DATA PROTECTION NOTICE

1.1 This Privacy Notice from CONTINENTAL PARKING, S.L., with Tax ID Number: B58161514, registered office at Avda. Josep Tarradellas 123-127, 5º C Barcelona 08029 (hereinafter, "we", "us", "our") informs you of the manner in which we collect and process your personal data. This Privacy Notice also provides certain legally required information. font-weight: 700;">us") informs you about how we collect and process your personal data. This Privacy Notice also provides certain legally required information and lists your rights regarding your personal data in accordance with the European General Data Protection Regulation EU 2016/679 of 27 April 2016.

1.2 This Privacy Notice refers to personal information that identifies you when you are a "you" a customer, a person browsing our website, or a person outside our organisation with whom we interact. If you are an employee, a supplier, or otherwise contracted to work for us, or if you are an applicant for a position with our company, a separate privacy notice or data processing agreement applies to you instead of this Notice.

1.3 We refer to this information throughout this Privacy Notice as "personal data" and clause 3 sets out in more detail what this comprises.

1.4 Please read this Privacy Notice to understand how we may use your personal data.

1.5 This Privacy Notice may change from time to time, so you should check it regularly.

2. HOW TO CONTACT US

2.1 Responsible for processing and contact details

2.1.1 For the purposes of current data protection legislation, we are responsible for processing your personal data and, as such, we use the personal data we have about you in accordance with the provisions of this Privacy Notice.

2.1.2 If you wish to contact us in relation to our processing of your personal data, you may do so as follows:

a) Through our customer service centre: atencionalcliente@copark.com

b) You can contact the Data Protection Officer whose details are provided in section 2.2 of this Notice. border-box; margin: 0px; colour: rgb(119, 119, 119); font-family: ">2.2 Data Protection Officer

You can contact our Data Protection Officer:

(a) by email rgpd@copark.com ;

(b) by post to: Data Protection Officer, Continental Parking SL, with registered office at Avda. Josep Tarradellas 123-127, 5º C, 08029 Barcelona

3 - CATEGORIES AND TYPES OF PERSONAL DATA WE COLLECT AND WHEN WE COLLECT IT

3.1 Personal data refers to all data that allows us to identify you, directly or indirectly, such as your name and surname, address, telephone number and email address.

3.2 The categories and types of personal data we collect from you are:

3.2.1 when you make a request for our car park management services or make a reservation through our website or external booking platforms.

(a) personal data, such as your first and last names, your address and telephone number, which you provide to us or which are recorded when you write to us or send us an email.

(b) personal data that you provide when you create a profile on our website (www.copark.es) or those necessary to make an online booking.

(c) personal data collected through cookies; the following link provides more information about the type of information we collect and how we use cookies: http://copark.es/cookies.php

3.2.2 In relation to the services we provide:

(a) Personal data you provide when you instruct us to provide the services you request, such as your name and surname, telephone number and email address, type of contract, vehicle, etc. Beginning of form

(b) Personal data of the agents responsible for tracking in the event that you do not pay an invoice by the due date and we are unable to locate you using the contact details you have provided.

(c) Personal data in the form of images or video sequences taken at one of our centres installed to optimise car park surveillance. style="box-sizing: border-box; margin: 0px; colour: rgb(119, 119, 119); font-family: ">(d) Personal data that you provide to us when filling out complaint or suggestion forms.p>

3.3 We also create personal data about you if, for example, you contact us by telephone to make a complaint about our services: we make a written record of the key details of the conversation so that we can take the necessary steps to address your complaint. rgb(58, 58, 58); font-size: 30px;">

4 – HOW WE USE YOUR PERSONAL DATA AND WHAT WE BASED OUR USE ON

4.1 When we rely on a basis other than consent

4.1.1 We will only process your personal data using one or more of the following legal bases permitted under data protection legislation. The table below sets out the related purposes for which we may process your personal data:

Purposes for which we process your personal data	What we base our actions on (what the law authorises us to do)
To fulfil our contractual obligations to you. This includes the obligation to provide the services you have contracted from us.	Processing is necessary in relation to all contracts you have entered into with our company.
In order to comply with our own legal obligations, e.g. tax legislation	Processing is necessary for us to comply with applicable law
In order to manage our business, except in compliance with our contractual obligations to you; for example: to send you important notices such as communications about changes to our terms and conditions and policies; to send you information you have requested from us; to deal with your enquiries; to develop, deliver and improve our services; to help us develop our website to make it more useful to you. to protect and defend our rights or property	We have a legitimate interest in processing your personal data, which is not overridden by your interests, fundamental rights or freedoms. This includes our legitimate interest in the following aspects: This includes our legitimate interest in the following aspects: the development, expansion and promotion of our business; protecting our company; the security of our systems and data; the provision of quality services to our customers; supporting and training our employees in order to provide you with quality services

4.1.2 Furthermore, in certain specific circumstances, we may process special categories of data in a certain way, in accordance with current legislation. Below, we indicate how we process these special categories of data, together with the legal basis for doing so.

Purposes for which we process your personal data

What we base our actions on (what the law allows us to do)

In order to respond to a complaint or potential complaint that you send us and that involves personal injury

We have a legitimate interest in processing your personal data, which is not overridden by your interests, fundamental rights or freedoms. Our legitimate interest is:

to manage and operate our business;
to protect our business;
the provision of quality services to our customers

Processing is necessary for the establishment, exercise or defence of legal claims or court proceedings.

4.1 When we rely on a basis other than consent

4.1.2 In addition, in certain specific circumstances, we may process special categories of data in a certain way, in accordance with current legislation. Below, we indicate how we process these special categories of data, together with the legal bases:

4.2 When we rely on consent

4.2.1 The personal data we hold on our customers is only that which is voluntarily provided when they register to contract our services, so we do not need any consent to incorporate it into our databases.p>

4.2.2 We will only use the legal basis of consent in relation to the processing of personal data for data that is not necessary or mandatory for administrative and commercial management, which is the purpose of the service itself.

4.2.3 You may withdraw your specific consent to the processing of your personal data at any time when we have your consent. Please contact us using the contact details provided in clause 2. Please note that even if you withdraw your consent for us to use your personal data for a particular purpose, we may continue to rely on other grounds to process your personal data for other purposes. We will inform you when this is the case.

4.2.1 We want to use your personal data for different purposes. For some of these purposes, it may be necessary for us to obtain your prior consent. These circumstances are as follows:

(a) when, in the management of a claim, we collect special categories of data relating to health;

(b) when we process personal data of a minor, we will request proof of consent;

(d) when our company or our carefully selected third parties have new products and services that we believe may be of interest to you.

4.2.2 We will only use the legal basis of consent in relation to processing that is entirely voluntary: it will not be used for processing that is necessary or mandatory in any way.

5 – WHO RECEIVES YOUR PERSONAL DATA

5.1 We may disclose your personal data to:

5.1.1 Third-party data processors so that we can carry out or improve our usual business practices. We have entered into contracts with our data processors, which means that they cannot do anything with your personal data unless we instruct them to do so, and they must keep your data secure and only retain it for the period we specify;

5.1.2 Public administration and regulatory authorities that request your personal data or to report any potential or actual breach of current legislation or regulations.

5.1.3 External professional advisers, such as accountants, auditors and solicitors, provided they are bound by a duty of confidentiality.

5.1.4 Law enforcement agencies, courts and tribunals or other relevant parties, to the extent necessary for the establishment, exercise or defence of legal rights.

5.1.5 Third parties when necessary for the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties. 5.1.6 Third parties who are considering or have decided to purchase some or all of our assets or shares (including in the event of a reorganisation, dissolution or liquidation).

6 – INTERNATIONAL TRANSFERS OF PERSONAL DATA

6.1 We do not transfer customers' personal data to a country outside the European Economic Area, which regulates the current GDPR, as the European Commission has decided that the non-EU country in question must guarantee an adequate level of protection.

7 – HOW LONG WE WILL STORE YOUR PERSONAL DATA

7.1 We will store your personal data for as long as is appropriate in accordance with our data retention policy.

The period of time established in our data retention policy is determined by one or more of the following criteria:

7.1.1 We are obliged to retain your personal data in order to comply with legal requirements such as the Trade Act, the Tax Act or the Competition Act.p>

7.1.2 When it is necessary to retain your personal data in order to facilitate and support the original purpose for the processing of your personal data.

7.1.3 protection against possible claims arising from the original purpose of the processing; or when we have your consent to process your personal data and you continue to consent to the processing of your data.

7.1.4 The images obtained by our video surveillance systems will be stored for the period established by current GDPR legislation.p>

If the images have been requested by a public authority, they will remain in force until the end of the process related to the incident.

7.2 If you would like more information about how long we will keep your data, please contact us using the contact details provided in clause 2.

7.3 We keep the length of time we keep your personal data under review. These reviews are carried out annually.

8 – CONTRACTUAL OR REGULATORY REQUIREMENTS FOR WHICH YOU MUST PROVIDE YOUR PERSONAL DATA

8.1 In certain circumstances, it is mandatory for you to provide us with your personal data:

8.1.1 To comply with the law.

8.1.2 When necessary to enter into a contract.

8.2 You decide whether to provide us with your personal data necessary to enter into a contract or as part of a contractual requirement. However, if you do not provide us with your personal data, we will not be able to provide some or all of the services you expect to receive under the contract you have entered into with our company. An example is when we are unable to provide services because however, you do not provide us with your personal data, we will not be able to provide some or all of the services you expect to receive under the contract you have entered into with our company. An example is when we are unable to complete services because we do not have all your data, or when we are unable to fulfil the contract we have entered into with you because we rely on the personal data you provide to do so. For more information, please refer to the data required when requesting customer registration and the relevant contract .

9 – YOUR RIGHTS REGARDING YOUR PERSONAL DATA

9.1 Without prejudice to the provisions of applicable legislation, including current data protection legislation, in addition to your ability to withdraw the consent you have given us to process your personal data (see clause 4.2.3), you may have a number of rights in relation to the processing of your personal data, including:

9.1.1 the right to request access to your personal data that we process or control.

9.1.2 the right to request the rectification of any inaccuracy in your personal data or, taking into account the purposes of our processing, to request that incomplete data be completed.9.1.3 The right to request, for legitimate reasons as established by law:

(a) the deletion of your personal data that we process or control;

(b) the restriction of the processing of your personal data that we process or control;

9.1.4 the right to object, on legitimate grounds as established by law, to the processing of your personal data;

9.1.5 the right to receive your personal data in a machine-readable, structured and commonly used format and to have your personal data transferred to another data controller, to the extent permitted by law;

9.1.6 the right to lodge complaints regarding the processing of your personal data with the Information Commissioner's Office (ICO) or another competent supervisory body.

If you wish to exercise the rights set out above, please contact us using the contact details provided in clause 2.

10 – LINKS TO OTHER WEBSITES

10.1 This policy only sets out how we will collect and process your personal data. If you connect to another website via a link from this website, please remember to read and take into account the privacy policy of that other website as well. We are not responsible for the use of your personal data by other third-party websites.

The General Management
Signed:
Date of approval: JANUARY 2024