Privacy Policy

At BALEAR INVERSIONES Y EXPLOTACIONES, S.A. (AUTOS 21), we work to guarantee privacy in the processing of your personal data. We have updated our Privacy Policy to clearly inform you about how we collect, use, and protect the data of individuals who engage with our Organization:

• Data Controller
• Types of personal data processed by BALEAR INVERSIONES Y EXPLOTACIONES, S.A. (AUTOS 21)
• Purposes of data processing
• Duration of data processing
• Legal basis for data processing
• Data disclosure
• Your Rights

Data Controller

Interested parties who provide BALEAR INVERSIONES Y EXPLOTACIONES, S.A. (AUTOS 21) with personal data through this online platform or by other means (e.g., social media) are hereby informed that their data will be processed by:

BALEAR INVERSIONES Y EXPLOTACIONES, S.A. (AUTOS 21), tax ID: A07300270 and registered office at CURNIOLA, 8 POIMA IV FASE 07714, MAHÓN- MENORCA (ILLES BALEARS).

Phone: +34 971 353 439
Email: lina@biesa.es

Purposes of data processing

At BALEAR INVERSIONES Y EXPLOTACIONES S.A. (AUTOS 21), the data is processed for the following purposes, depending on the reason for which the data was provided:

1. To contact the sender of the information, respond to their request, inquiry or question, manage the publication of questions and comments, and carry out subsequent follow-ups.
2. To manage, if applicable, the CUSTOMER’S order and perform the contracted service, including billing and collection.
3. To manage and monitor the customer portfolio.
4. To handle vehicle rental booking requests.
5. To manage, if applicable, the sale of vehicles.
6. To create a USER profile, if applicable, in order to offer personalized content, products and services.
7. To assess and manage, if applicable, your Curriculum Vitae for recruitment processes that match your professional profile, and to take the necessary steps for hiring.

Duration of data processing

• Data processed for managing the customer relationship and billing and collection of the services will be kept for as long as the contract remains in force. Once the relationship has ended, if applicable, the data may be retained for as long as required by applicable law and until any potential legal liabilities have expired.
• Data related to inquiries and requests management will be kept indefinitely until cancellation is requested.
• Data related to comments posted about our products will be retained during the validity and advertising of the corresponding products or services, unless deletion is required at any time.
• Data from executed contracts will be retained as long as the contracts remain in force, according to their specific terms, to manage performance, and thereafter until any potential legal liabilities have expired.
• Data used for sending commercial communications about our products or services will be kept indefinitely, unless, if applicable, you request their deletion.

Legal Basis for data processing

• The legal basis of the processing of your data for purposes 1 to 6 is the performance of the corresponding service provision.
• The basis for prospective offering of products and services to customers is the legitimate business interest in offering related products or services to our customers, thereby gaining customer loyalty. This legitimate interest is recognized by applicable regulations (General Data Protection Regulation), which expressly authorizes the processing of personal data on this legal basis for direct marketing purposes.

However, we remind you that you are entitled to object to this processing of your data, which you may do through any of the means outlined in this Policy.

• The basis for sending commercial communications to non-customers is the consent previously obtained, which can be revoked at any time. The withdrawal of this consent will not, under any circumstances, affect the performance of the contract, however, data processing activities carried out before the withdrawal will remain lawful.

Data disclosure

Your data will be disclosed to the following entities:

• To financial entities involved in managing payments and collections.
• To competent Public Administrations, in those cases provided by law and for the purposes defined therein.

Your Rights

Anyone who provides us with their data has the following rights:

• Any individual has the right to obtain confirmation whether we are processing personal data concerning them. Interested individuals have the right to access their personal data, as well as to request the correction of inaccurate data or, if applicable, request their elimination when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
• Under the conditions set out in the General Data Protection Regulation, interested individuals may request the restriction of the processing of their data or their portability. In such cases, we will only retain the data for the exercise or defence of legal claims.
• In certain circumstances, and for reasons related to your particular situation, interested individuals may object to the processing of their data. If you have given your consent for a specific purpose, you have the right to withdraw it at any time, without this affecting the lawfulness of the processing based on the consent given before its withdrawal. In such cases, we will stop processing your data or, if applicable, we will stop processing it for that specific purpose, unless there are compelling legitimate reasons, for the exercise or defence of possible claims.
• All rights mentioned above may be exercised through email or certified mail using the contact details provided in the “Data Controller” section of this Privacy Policy.
• In the event of any infringement of your rights, especially if you have not obtained a satisfactory response when exercising them, you can file a complaint with the Spanish Data Protection Agency (contact details available at www.agpd.es – https://www.aepd.es/en) or with any other competent supervisory authority. You may also obtain more information about your rights by contacting these authorities.