Privacy policy

Who is the controller of your data?

• Registered name: IBER RUEDAS MOVING SOLUTION, S.L.
• Registered office: Avda. de las Bodegas, 10, 13600 Alcázar de San Juan, Ciudad Real (Spain)
• Tax ID (CIF): B13596838
• Email: [email protected]

What do we use your personal data for?

Your personal data will only be used for the following purposes:

• Handling the requests for information made through the website or by email, in order to give you information about our products and services.
• Pre-contractual management when you ask us for a quote.

What is the legal basis for processing your data?

The express consent of the user, given by ticking the box on the form.

Pre-contractual measures in the case of quote requests or other information about our products and services.

What data do we collect?

In general, you can use the website without providing any personal information. The forms collect the data needed to answer you:

• Quote request: company, tax ID (optional), name and surname, email, phone (optional), province or country (optional), type of customer (optional), comments and the list of items with their quantities.
• Contact: name, company (optional), email, phone (optional), subject and message.
• Wheel finder enquiry: name, email or phone, and the reference or details of what you are looking for.

When you send us a form, you guarantee that the information you provide is authentic, accurate and truthful, and you undertake to keep it up to date. The user is solely responsible for any false or inaccurate statements and for any damage they may cause.

How long will we keep your personal data?

The personal data you provide will be kept for as long as our contractual or business relationship lasts. From the end of that relationship, your data will be kept for:

• ONE YEAR: data arising from connections to our website, email and voice calls, instant messaging, SMS or MMS.

If you are our customer, your data will be kept for:

• FOUR YEARS for tax purposes: accounting books and other records required by tax regulations (personal income tax, VAT, corporate tax, etc.) and the supporting documents.
• SIX YEARS: personal data included in the mandatory books, documents and supporting records relating to our business activity, in accordance with the Spanish Commercial Code.

How have we obtained your personal data?

You provide them yourself, through the website forms or by email. We do not obtain data from other sources.

Who will your personal data be disclosed to?

No data will be disclosed to third parties unless required by law.

To provide the service, the following providers process data on our behalf as data processors, under a contract that obliges them to use the data only for that purpose:

• Cloudflare, Inc.: hosting of the website and of the functions that receive the forms, and protection against spam (Cloudflare Turnstile).
• Resend: sending the emails of the forms to Iber Ruedas and, where applicable, the acknowledgement of receipt to you.

Some of these providers are located in the United States or may access data from there. Those transfers are covered by the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023) or, failing that, by the standard contractual clauses approved by the European Commission.

What are your rights when you give us your personal data?

Any data subject may exercise the following rights:

• Right of access: to obtain confirmation as to whether or not personal data concerning them is being processed.
• Right to rectification: to have inaccurate or incomplete personal data rectified.
• Right to erasure: to have personal data erased when it is no longer necessary for the purposes for which it was collected.
• Right to restriction: to ask us to restrict the processing of their data, in which case we would only keep it for the exercise or defence of claims.
• Right to data portability: to ask us to transfer their automated personal data to another company in a structured, intelligible and machine-readable format.
• Right to withdraw consent: at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to object: to object to the processing of their data.

How can you exercise these rights?

We will provide the forms to exercise these rights on request: write to [email protected] stating the right you wish to exercise and we will send you the corresponding form.

Rights must be exercised by writing to [email protected] or to the registered office at Avda. de las Bodegas, 10, 13600 Alcázar de San Juan, Ciudad Real (Spain).

Who can exercise the rights?

The rights are personal and must be exercised by the data subject, duly proving their identity (we will ask for a national ID card or equivalent). They may also be exercised through a legal representative, in which case, in addition to the data subject's ID, the representative's ID and an authentic document proving the representation must be provided.

What will we do when you exercise a right?

The controller will answer every request addressed to it, whether or not it holds personal data of the person concerned. If the request does not meet the requirements, the controller will ask for it to be corrected.

We will answer within one month of receiving the request. That period may be extended by two further months where necessary, taking into account the complexity and number of requests; we will inform you of any extension within one month of receiving the request, with the reasons for the delay.

Right to lodge a complaint with the supervisory authority

You may ask the Spanish Data Protection Agency (AEPD) to protect any rights that have not been properly addressed, through the electronic office on its website (www.aepd.es) or by writing to its postal address (C/ Jorge Juan, 6, 28001 Madrid).

What measures do we take to keep your information secure?

We apply reasonable technical and organisational measures to protect the information collected through the website: encrypted connection (HTTPS), validation of the forms on the server and spam protection.