PRIVACY POLICY

BASIC INFORMATION

• Person in charge of the treatment: MAFLOW SPAIN AUTOMOTIVE S.L , hereinafter Maflow
• Purpose of processing: management of the service requested by the customer and supplier within the framework of a contractual relationship.
• Legitimation: The legal basis that legitimizes the processing of your personal data is the execution of the contract for the provision of services as well as the legitimate interest of the responsible party as will be detailed in the additional information.
• Recipients: No data will be transferred to third parties, unless legally required or with the consent of the interested party.
• Rights: You have the right to access, rectify and delete data, as well as other rights, as explained in the additional information.

1. WHO IS THE DATA PROTECTION CONTROLLER?

The responsible party is the company MAFLOW SPAIN AUTOMOTIVE S.L provided of CIF: B-39734579 with domicile in industrial estate of Guarnizo (Cantabria) parcela number 50, postal code 39611 provided of Fax 942 55 89 90 and of e-mail maflow.spain@maflow.com

2. WHO WILL PROCESS YOUR PERSONAL INFORMATION?

The information collected is necessary and its processing is indispensable because it is directly linked to the fulfillment of the contractual relationship that binds you to Maflow or because it is information that Maflow has to process by law.

3. TREATMENTS

a) Necessary treatments, covered by the contract or in compliance with regulations:

• Maflow will use your information in order to provide the contracted service and manage the contractual relationship by performing, among others, the following operations: service provision, attention to requests, billing, collection, claims management, customer service.
• The personal data requested are necessary and mandatory to carry out the contractual relationship, and refusal to provide them or their inaccuracy, will make it impossible to carry out the provision of contracted services. The interested parties undertake to provide truthful data and to communicate any modification.
• Likewise, Maflow may use your personal information in order to comply with legal obligations applicable to the data controller imposed by commercial, accounting, fiscal and/or administrative regulations. The personal data requested, in these cases, are necessary and mandatory to carry out the above purposes, and refusal to provide them or their inaccuracy, will make it impossible to carry out the provision of contracted services. Therefore, the interested parties undertake to provide truthful data and to communicate any modification.

b) Additional processing operations covered by the legitimate interest of the data controller for which the exercise of the data controller's right to object is possible.

• No additional processing of information other than that described above, such as advertising, commercial prospecting or marketing, is foreseen.

c) Additional treatments covered by the client's express consent, which can always be withdrawn by the client

• No processing of data for which the General Data Protection Regulation of the European Parliament and of the Council (hereinafter GDPR) requires express consent, such as the processing of special categories of personal data (health, trade union affiliation, genetic data, biometric data, etc.), is foreseen.

4. DEADLINES

How long will we keep your data?
The data collected for the provision of the service will be kept during the period in which our contractual relationship is in force. Once it has expired (the tax and commercial regulations (article 70.2 and 29.2 letter e) of Law 58/2003, of December 17, General Tax Law and article 30 of the Commercial Code respectively) establish the legal obligation to keep the essential tax information for a period of 6 years, period in which such information will be blocked at the disposal, if necessary, of the Tax Administration. The rest of your information will be automatically blocked as it is not necessary for the purpose for which it was collected. This blocking will mean that your data will be kept only at the disposal of the competent Public Administrations or Judges and Courts for the attention by Maflow of the possible liability arising from the treatment and during the statute of limitations of such liability.

5. LEGITIMACY

Why do we need your data and possible treatment?

The legal basis for the processing of your personal information is the necessary execution of the contract signed with Maflow. Also the lawfulness for the processing of your personal information may be imposed by the fulfillment of legal obligations applicable to Maflow such as administrative, tax, commercial, accounting or tax provisions. In these cases the processing of your information is necessary and mandatory for the fulfillment of such legally imposed duties.

It is also possible that Maflow may use your personal information based on the existence of a legitimate interest over which does not prevail their rights or interests requiring the protection of personal data in accordance with the provisions of Article 6.1 paragraph f of the GDPR. Specifically the processing of data of natural persons who provide services in legal entities customers or suppliers of Maflow (contact data) previously excluded from the scope of protection of the rules on protection of personal data (Article 2.2 of Royal Decree 1720/2007 of December 21) and now, with the RGPD, is subject to the new legal regulation. In this sense it is reported that the minimum essential contact data will be treated and always for the sole purpose of maintaining commercial transactions ("business to business" relationships).

6. TARGET

Who uses my information?

The data provided by you will be processed exclusively by Maflow and will only be transferred to third parties in the event that such transfer is covered by a mandatory legal rule or if we have your express consent to do so.

Notwithstanding the above, the execution of the service contract signed with Maflow could involve the transfer of information to collaborators or professionals who, as data processors, process your personal data on behalf of Maflow. By way of example: companies in charge of the business accounting, auditing companies, computer companies in charge of the maintenance of our software, hosting companies ..... In these cases such processing will be governed by a contract or legal act under European law in which, among other contents, will be guaranteed confidentiality in the processing of personal information and the adoption of security measures included in Article 32 of the RGPD.

7. WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE US WITH YOUR PERSONAL DATA?

Maflow undertakes to comply with its duty to maintain the secrecy of personal data, and shall adopt the legally foreseen and necessary measures, especially of a technical and organizational nature, to avoid its alteration, loss, treatment or unauthorized access, taking into account at all times the state of the applicable technology.

Any changes that may affect the current Privacy Policy will be updated on the website www.maflow.com which you can access at any time.

At all times, you will have:

• The right, in relation to processing operations that are based on obtaining your consent, to withdraw or revoke your consent in accordance with the following indications.
• The right to request access to personal data, and to obtain information about whether or not Maflow is processing personal data concerning him or her.
• The right to request the rectification or deletion of inaccurate data or, as the case may be, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
• The right to request the limitation of their processing, when any of the conditions provided for are met, in which case they will only be kept for the exercise or defense of claims.
• Right to data portability

You may exercise your rights, enclosing a photocopy of your ID card, passport or any other identification document, petition in which the request is specified, by means of: - Written communication to MAFLOW SPAIN AUTOMOTIVE S.L provided of CIF: B-39734579 with domicile in industrial estate of Guarnizo (Cantabria) parcela number 50, postal code 39611 or through electronic mail maflow.spain@maflow.com

Likewise, you may file a claim in relation to the processing of your personal data before the competent authority for the protection of personal data, if applicable, the Spanish Data Protection Agency (AEPD), with NIF Q2813014D, and address at Calle Jorge Juan, nº6, 28001 Madrid, and telephone 901 100 099, or on the web associated with the domains agpd.es