EUROCARBID SUBASTA DE SINIESTROS EUROPEOS, S.L. is the brand and trade name under which AUTOACCIDENTADOS, S.L. carries out the intermediation and management activity of its electronic vehicle auction platform, with address at Polígono Industrial "AIMAYR", Calle Plomo 7 nave 2, 28330, San Martín de la Vega, Madrid (Spain), telephone 91 696 89 61 and email address info@eurocarbid.com, in its capacity as data controller of the personal data processed within the framework of its auction platform.

EUROCARBID SUBASTA DE SINIESTROS EUROPEOS, S.L. makes this Privacy Policy available to the User in order to provide concise, transparent, intelligible and easily accessible information about the processing of their personal data in connection with registration on and use of the platform, participation in auctions and the management of purchases and payments, as well as, where applicable, the sending of commercial communications.

1.- Data controller and contact details

The controller of the User's personal data is AUTOACCIDENTADOS SL (Tax ID B-85557932), with address at Polígono Industrial "AIMAYR", Calle Plomo 7, Nave 2, 28330, San Martín de la Vega, Madrid (Spain); telephone 91 696 89 61; and email address info@eurocarbid.com. Through these channels, the User may send communications relating to this Privacy Policy, without prejudice to the specific channels provided for the exercise of rights.

2.- Purposes of the processing

The User's personal data will be processed in order to (i) manage their registration as a user on the auction platform; (ii) enable and manage their participation in vehicle auctions; (iii) manage the purchases and payments made through the platform; and (iv) send commercial communications solely where the User has given their express consent to do so, keeping those purposes that require consent separate and distinct from those necessary for the provision of the services.

3.- Legal bases for the processing

The processing of personal data shall be lawful to the extent that it is necessary for the performance of the services contract accepted by the User upon registering for and using the platform and, additionally, where applicable, on the basis of the User's express consent to the sending of commercial communications, such consent having to be demonstrable and to constitute a freely given, specific, informed and unambiguous indication of the data subject's wishes.

4.- Recipients and disclosures of data

As a general rule, the User's personal data will not be disclosed to third parties. However, they may be disclosed (i) where there is a legal obligation; and/or (ii) where it is strictly necessary for the provision of the service requested by the User, including, by way of example, banking institutions for the management of payments and transport companies for the delivery of vehicles, the data disclosed being limited in all cases to that which is essential for the corresponding operational purpose.

5.- Processors and sub-processors

Where it is necessary for third parties to process personal data on behalf of EUROCARBID SUBASTA DE SINIESTROS EUROPEOS, S.L. for the provision of services linked to the platform, such third parties shall act as processors and their involvement must be governed by the corresponding contract or other written legal instrument setting out the subject matter, duration, nature and purpose of the processing, the type of data and categories of data subjects, and the obligations and rights of the controller; such contract may be based, in whole or in part, on standard contractual clauses adopted by the Commission for contracts between controller and processor. Likewise, the engagement of sub-processors shall require the controller's prior written authorisation (specific or general), and the processor must inform the controller of any intended changes concerning the addition or replacement of sub-processors, thereby giving the controller the opportunity to object where appropriate.

6.- International data transfers

In the event that, for the provision of the platform's services or for the involvement of providers located outside the European Economic Area, it were necessary to carry out international transfers of the User's personal data to a third country or international organisation, such transfers shall only be carried out where (i) an applicable adequacy decision exists, or (ii) appropriate safeguards are provided, in particular by entering into standard contractual clauses adopted by the Commission, including Commission Implementing Decision (EU) 2021/914, which is deemed to offer appropriate safeguards for international transfers and which may be structured in modules according to the relationship between exporter and importer, or (iii) one of the derogations provided for specific situations applies. Where applicable, the User shall be informed of the intention to carry out international transfers, of the existence or absence of an adequacy decision and, where appropriate safeguards are used, of the reference to such safeguards and of the means to obtain a copy of them or of where they have been made available.

7.- Retention periods

The User's personal data will be retained for as long as their account on the platform remains active. Once the relationship has ended, the data will be kept blocked for the applicable legal periods, solely in order to address any liabilities arising from the processing and/or from the contractual relationship, and strictly to the extent necessary for that purpose.

8.- User's rights and how to exercise them

The User may exercise the rights of access, rectification, erasure, restriction of processing, objection and portability by means of a written request addressed to AUTOACCIDENTADOS by email to info@eurocarbid.com or by post to Polígono Industrial "AIMAYR", Calle Plomo 7, nave 2, 28330, San Martín de la Vega, Madrid (Spain). In order to process the request, it may be necessary to verify the identity of the applicant. Likewise, where the processing is based on consent, the User may withdraw it at any time without this affecting the lawfulness of processing based on consent given before its withdrawal.

9.- Complaint before the supervisory authority

The User has the right to lodge a complaint with the competent supervisory authority for data protection matters where they consider that the processing of their personal data infringes the applicable legislation, this information being made available to them as part of the duty of transparency.

10.- Data provided and consequences of not providing it

Where the provision of certain personal data is a necessary requirement for registration, participation in auctions or performance of the services contract, failure to provide such data may prevent the provision of the service or the processing of the requested operation (registration, participation, purchase or payment), the User being informed in a manner consistent with the specific functionalities of the registration process and use of the platform.

11.- Automated decision-making and profiling

In the event that EUROCARBID SUBASTA DE SINIESTROS EUROPEOS, S.L. were to carry out automated decision-making, including profiling, producing legal effects concerning the User or similarly significantly affecting them, the User shall be informed of the existence of such decisions, as well as, at least, of meaningful information about the logic involved, the significance and the envisaged consequences of such processing, on the terms required by the duty to provide information.

12.- Minors

The platform is aimed at users who are able to contract the services. Should the processing of minors' data or access by minors to the platform be envisaged, the applicable specific conditions shall be established and expressly notified in this Privacy Policy or at the point of the data collection process where appropriate.

13.- Cookies

The website uses its own and third-party cookies in order to improve its services and display advertising related to the User's preferences. For further information, the User may consult the Cookie Policy provided for that purpose, which supplements this Privacy Policy.

14.- Security measures

EUROCARBID SUBASTA DE SINIESTROS EUROPEOS, S.L. shall apply appropriate technical and organisational measures to ensure a level of security appropriate to the risk, aimed at preventing the alteration, loss, unauthorised processing of or access to personal data, and at preserving the integrity and confidentiality of the information processed within the framework of the platform.

15.- Commercial communications

EUROCARBID SUBASTA DE SINIESTROS EUROPEOS, S.L. shall only send commercial communications to the User where the latter has given their express consent for that purpose, such consent having to be kept distinct and being revocable at any time on the terms set out in this Policy.

16.- Amendments to the Privacy Policy

EUROCARBID SUBASTA DE SINIESTROS EUROPEOS, S.L. may amend this Privacy Policy in order to adapt it to legislative changes or to updates of the service. In such a case, the User is advised to review its content periodically, and access to the version in force will be provided through the platform.