Privacy policy

This is an English translation provided for your convenience. In the event of any discrepancy, the Spanish version shall prevail.

PRIVACY POLICY

1. Introduction.

We have a strong commitment to the privacy of individuals, which is why the protection of personal data is important to us.

We process data in accordance with the provisions of EU Regulation 2016/679 General Data Protection Regulation, Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights, and other applicable regulations.

This Privacy Policy was reviewed in March 2026 to comply with the information and transparency duties of the website itself and generally of the data controller, in order to provide any type of interested party, and not only website users, with the general terms of the controller in this area. Variations may exist until its next review.

2. Who is responsible for processing your data?

Data controller: AUTOLAVADO IGUAZU S.L.

Tax ID (NIF/CIF): B04533659

Address: CTRA. HUÉRCAL OVERA Nº5. 04640 PULPÍ (ALMERÍA)

Email: autolavadoiguazu@hotmail.com

3. What is the origin and type of data we process?

The origin of the information we process may be any of the following categories:

• Forms in paper, electronic or digital format.
• Communication and messaging systems: email and messaging applications, telephone, etc.
• Other lawful sources and origins of information.

The different categories of data that we may process depending on the type of interested party (user, customer, supplier, employee, etc.) and the nature of the controller’s activity and the various data processing operations are:

• Identifying data, for example: name and surname, image.
• Identification codes or keys, for example: username, employee code.
• Postal or electronic contact addresses, for example: telephone, email, social media profile.
• Data on personal and professional characteristics, for example: age, date of birth, qualifications, professional experience, CV.
• Economic, financial and insurance data; for example: bank details, credit card, etc.
• Economic and non-economic payroll data and other information of an employment nature; for example: job position, payslip, etc.
• Transaction data, for example: goods and services supplied and received.
• Special category data, for example: health, trade union membership, racial origin.
• Other data and information necessary for or implicit in the development of our activities, services and purpose.

MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE INTERESTED PARTY.

The interested party, by checking the corresponding boxes and entering data in the fields marked as mandatory (for example, with an asterisk) in the contact form or presented in download forms, expressly, freely and unequivocally accepts that their data is necessary for the controller to attend to their request, with the inclusion of data in the remaining fields being voluntary.

The interested party guarantees that the personal data provided to the controller is truthful and undertakes to communicate any changes to it. The data requested through the website, marked as mandatory, is necessary to provide an optimal service to the interested party. If not all the data is provided, it cannot be guaranteed that the information and services provided fully match your needs.

4. For what purpose do we process your personal data?

In general, data is processed to successfully carry out the actions implicit in the normal development and management of the controller’s activity. However, we can specify different processing purposes depending on the possible categories of interested parties:

• Customers and potential customers: management and maintenance of commercial, pre-contractual and contractual relationships; internal administration; financial management; advertising and marketing, customer service.
• Collaborators, creditors and suppliers: management and maintenance of commercial relationships, internal administration and financial management.
• Workers: management, development and maintenance of the employment relationship, human resources management, communications, training activities, occupational risk prevention, time recording and other purposes arising from legal obligations and the development of employment relationships.
• Candidates: management of CVs received, management of job offers and personnel selection.
• Website and social media users: user service and management of communications between the parties.
• Visitors: visitor service and control of access to the premises.
• The existing information of any other category of interested party processed by the controller will be handled within the framework of its activity, in strict compliance with the applicable regulations and under the general criteria of this Privacy Policy.

Other general purposes that the controller may implement are:

• Creation of a commercial profile, with the aim of improving your experience by personalising offers and communications. No individualised decisions will be made based on this profile, and action will be taken on the basis of legitimate interest.
• Video surveillance, for the security of property and persons, as well as the corresponding workplace monitoring based on legitimate interest.
• Financial management and control of monetary obligations. In the case of debtors with certain, due and payable outstanding payments, the controller may communicate this circumstance to credit solvency files, debtor files, and debt management or recovery services, among others, based on legitimate interest.
• Communications: development and execution of communications through the available contact data and means (email, instant messaging, etc.) with categories of internal interested parties (workers) and external parties (customers, potential customers, collaborators, suppliers, etc.). The purposes of such communications may be informative, organisational, commercial and advertising, as appropriate, based on informed consent and the legitimate interest of the controller.
• Other purposes arising from the nature of the controller, motivated by the normal development and exercise of its activity, on a valid legitimising basis.

5. How long will we keep your data?

In general, personal data will be kept at least as long as there is a relationship with the interested party, as long as its deletion is not requested, as long as liabilities may arise, or as long as there is a legal provision for its retention.

With regard to the data of candidates and job applicants, it will be deleted immediately when it is no longer of interest to the controller.

The data controller has, within its data protection plan, an inventory of retention periods that it observes to manage the different applicable retention periods.

The deletion of data will in any case be carried out ensuring its confidentiality.

6. What is the legitimacy for processing your data?

The controller observes and applies the different legitimising bases that apply to each processing purpose. These are:

1. Informed consent of the interested party.
2. Pre-contractual or contractual commitments.
3. Legitimate interest of the controller.
4. Applicable legal obligations.
5. Other legally prescribed legitimising bases.

7. To which recipients will your data be communicated?

The data of interested parties will not be communicated to any third party by default, except: a) auxiliary services, authorised data processors or other implicit third parties necessary for the correct provision of goods and services; b) competent authorities and public administrations in the exercise of their functions; c) other legitimate interested parties and third parties legally provided for.

8. What are your rights when you provide us with and/or we process your data?

As an interested party, you may at any time request the exercise of any of the following rights that assist you regarding data protection:

• Access to the interested party’s personal data to confirm whether or not data concerning them is being processed and to obtain more information about this processing.
• Rectification or Deletion of the personal data concerning the interested party when, among other reasons, it is inaccurate or no longer necessary for the purposes for which it was collected.
• Restriction of the processing of the interested party’s personal data in certain circumstances, in which case it will only be kept for the purpose of exercising or defending claims, for the protection of the rights of another person or for reasons of public interest.
• Receiving the personal data concerning you that you have previously provided to us, in a structured format where possible. (Portability of your data).
• Objecting to the processing of your data in certain circumstances and for reasons relating to your particular situation. The company will stop processing your data, except for compelling legitimate reasons, or the exercise or defence of possible claims.
• Revoking consent, which may entail the annulment or cancellation of the existing business or contractual relationship, if any. This is without prejudice to the processing carried out prior to the withdrawal of consent.

To do so, you only need to contact us through the email or postal address indicated at the beginning.

Optionally, you can also contact our appointed data protection officer, or the Data Protection Agency to learn more about your rights or to request their protection by the supervisory authority.

9. Data security.

In our information system we adopt the technical and organisational measures necessary to guarantee an adequate level of confidentiality, integrity, availability and resilience of the data in order to protect the rights and freedoms of interested parties.

The controller complies with the provisions and principles described in the GDPR to process data lawfully, fairly and transparently in relation to the interested party, and in a manner that is adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.

However, to the extent permitted by law, we assume no liability for the damage caused by alterations that third parties may cause to our information system. Any security breach will be duly and immediately communicated to the competent authority and/or the State security forces and bodies.

10. Sending communications or information.

Our policy regarding the sending of information through electronic means (email, instant messaging, etc.) is limited to sending only communications that we consider to be of interest to our users and interested parties, in relation to the company’s functions and activity, or that you have consented to receive.

If you prefer not to receive these messages, we will offer you, through them, the possibility of exercising your right to cancel and refuse to receive these messages, in accordance with the provisions of Title III, article 22 of Law 34/2002 on Information Society and Electronic Commerce Services.

11. Social media.

The controller may have a presence on social media through the corresponding profiles, with this section and any legal and privacy terms present on the website applying to the processing of data of users or interested parties who become followers or in any way link to said profiles.

The purposes of the controller’s use of these profiles are communication, commercial development, marketing and advertising, handling queries submitted to the controller and user service, informing about actions, activities and events organised by the controller or in which it participates, and interacting through the official profiles.

The legitimising bases set out in section 6 above are complemented in this case because the user or interested party may have a profile on the same social network as the controller and has decided to join or connect with the controller’s profile, thus showing interest in the information published by the controller. Therefore, when following the controller’s profiles, they provide their consent for the processing of the data available in their profile.

The user may access, at any time, the policies and privacy terms of the corresponding social network, as well as configure the privacy features that can be set in their profile. Publications made by the user will be known by other users, so the user is the main party responsible for their own privacy.

Users who follow and/or participate in our profiles shall refrain from:

1. Publishing content or information contrary to the law, morality and good faith. No unlawful, annoying or inappropriate use or behaviour is permitted that may generate negative opinions on the profile or that infringes the rights of individuals.
2. Behaving in a manner contrary to the principles of legality, honesty, responsibility, protection of human dignity, protection of minors, protection of public order, protection of privacy, consumer protection and intellectual and industrial property rights.

The controller reserves the right to remove, without prior notice, any content considered inappropriate. Likewise, it is released from any liability in relation to the security measures corresponding to each platform; the user must be aware of them together with the legal terms and conditions of use of the platform itself.

The controller shall be expressly exempt from any liability that may arise from the use of social media by minors or persons with special capacities. The controller’s social media profiles do not knowingly collect any personal information from minors; therefore, if the user is a minor, they must not register, use the controller’s social media profiles, or provide any personal information. Particularly in Spain, the processing of a minor’s personal data may only be based from the age of 14. Moreover, if any rule or regulation so requires, or the user has special capacities, the intervention of the holder of parental authority or guardianship, or of their legal representative, will be necessary by means of a valid document certifying the representation.

12. Employment and candidate management

Those interested in accessing the controller’s job offers may provide their data and professional information to the controller through different channels, preferably through the existing forms, email addresses, and means available for this purpose, where applicable.

This data will be processed in accordance with these privacy terms with the purpose of managing applications for possible job offers, internships and training of the responsible entity and any subsidiary companies or companies belonging to the same business organisation, where applicable.

The processing will be carried out on the basis of the informed consent of the interested party or another valid legitimising basis.

The data provided, if it is not of professional interest to the entity or once it is no longer necessary for the purposes for which it was collected, will be deleted ensuring its confidentiality and anonymisation.

Any interested party may revoke their consent and exercise the rights that assist them regarding privacy under the terms set out in this privacy policy.