In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) on the Protection of Individuals with regard to the Processing of Personal Data and on the Free Movement of such Data and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights, which aims to adapt the General Data Protection Regulation to Spanish domestic law, we inform you of the following aspects:

1. Who is the controller of your personal data?

Controller	Carcaracol Autocaravanas S.L.
NIF	B01896802
Address	Diseminado Galbana; 1D – 41500 Alcalá de Guadaíra (Sevilla)
Email	info@carcasol.com

2. Scope of this Privacy Policy?

This Privacy Policy is applicable to this carcaracol.com website.

3. How do we collect your personal data?

We collect information about you, in particular:

• From the forms on this website: Identification data such as your name, surname, telephone number and email address.
• We inform you that our organisation does not process specially protected data.

4. How do we use your personal data?

Your data will be collected exclusively for specified, explicit and legitimate purposes and will not be further processed in a way incompatible with those purposes. They will be processed in a lawful, fair and transparent manner in relation to the data subject. In accordance with the regulations, we identify the legitimacy applied for such processing in the following table.

	Purpose of Processing	Legitimación
1.	Respond to requests and applications from our web pages.	This processing is based on your consent.
2.	Analysis of user browsing data on our website	This processing is based on your consent.
3.	To send you commercial information about our products, services and/or offers.	This processing is based on your consent.
4.	Management of the data and metrics obtained from our ‘Fanpages’ of our social networks and website.	This processing is based on your consent and on our legitimate interest to know what activities or services are of interest to the persons interested in our activity.
5.	Comply with any applicable law, court order, legal process or the requirements of a regulatory body.	This processing is necessary to comply with our legal obligations.

5. To whom do we disclose your personal data?

We may share your personal data with different types of processing companies, depending on our needs:

• Third-party providers of other services (maintenance, hosting, logistics, marketing services, etc.), for the purposes described in section 4 above.
  Governmental or regulatory authorities with competence in the matters processed;
• Please note that this list is not exhaustive and that there may be other instances where we share your data with third parties, where it is in the legitimate interest of our company, permitted by applicable law, or where it is necessary to comply with a legal obligation to which we are subject.

In this context, your personal data may be transferred outside the European Economic Area (EEA) to countries that do not offer a level of protection for your personal data equivalent to that enjoyed in the EEA, such as the United States. In the absence of an adequacy decision by the European Commission, the transfer of your personal data to these countries will be governed by standard contractual clauses adopted by the European Commission.

6. How long do we retain your data?

We keep your personal data for the time necessary to fulfil the purpose for which they were collected. As a general rule, we keep your personal data for the time strictly necessary to manage the business relationship with you. However, we keep your personal data used for marketing purposes for an additional period of three years from the end of the business relationship.

In addition, we may keep some of your personal data for a longer period of time, in particular where required by law or where such data is necessary to prove a right or contract. In this case, your personal data will be archived and stored for the period of time required by applicable law, or for the duration of the applicable statute of limitations.

Data Types	Retention
Contact details	Up to 2 years
Browsing data	Up to 1 year

When your personal data is no longer required, we will ensure that it is deleted or anonymised accordingly.

7. What security measures do we apply to your personal data?

We are committed to keeping your personal data secure. We have implemented appropriate security policies, technical and organisational measures to protect your information from: unauthorised access, improper use or disclosure, unauthorised modification and unlawful destruction or accidental loss.

All our partners, employees, consultants, employees and data processors, who have access to and/or process your personal data are obliged to respect your confidentiality.

8. What are your rights?

The current privacy rules give you the following rights in relation to your personal data. Information about each of these rights is set out below:

Withdrawal of consent. You may withdraw your consent at any time in respect of any processing of personal data based on your consent. In no event shall the lawfulness of the processing prior to the withdrawal of your consent affect such processing.
– Access. You may ask us to confirm whether we process your personal data and, as the case may be, to inform you about the nature of such processing, to allow you to access such data and to provide you with a copy of such data.

– Rectification. You may ask us to rectify or supplement inaccurate or incomplete personal data.

– Cancellation (right to be forgotten). You can ask us to erase your personal data in the following cases: when it is no longer necessary for the purposes for which it was collected; you have withdrawn your consent; you have objected to the processing of your personal data; your personal data has been processed unlawfully; or to comply with a legal obligation. Please note that in some cases, we are not obliged to comply with your request, in particular if the processing of your Personal Data is necessary to comply with a legal obligation or for the establishment, exercise or

• Limitation. You may ask us to restrict the processing of your Personal Data (i.e. to keep but not use your Personal Data) where the accuracy of your Personal Data is in question; the processing may be unlawful, but you do not wish it to be erased; it is still necessary to establish, exercise or defend legal claims; to verify the existence of compelling grounds following the exercise of your right to object. We may continue to use your Personal Data following a request for restriction, where: we have your consent; to establish, exercise or defend legal claims; or to protect the rights of another natural or legal person.
• Portability. You may request that we provide your Personal Data to you in a structured, commonly used and machine-readable format, or you may request that it be “transferred” directly to another data controller. This right may be exercised where the processing is based on your consent or the performance of a contract with you and the processing is carried out by automated means.
• Right to object to processing justified on grounds of legitimate interest. Where processing is based on a legitimate interest (see section 4), you have the right to object to that processing. If you object, we must stop that processing unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or where we need to process the data for the establishment, exercise or defence of legal claims.
  In order to comply with the principle of transparency, you may request access to the legitimate interest assessments that our organisation has drawn up to assess that our interests do not override the data
• Right to object to the processing of data for marketing purposes. Where we process your personal data for direct marketing purposes, you have the right to object to such processing at any time.

You also have the right to file a complaint with the Spanish Data Protection Agency if you believe that the processing of your personal data violates applicable law.

To exercise the rights listed above, you can contact us by sending an email to info@carcaracol.com, indicating in the subject line which right you wish to exercise.

9. Contact information for exercising your rights

If you have any questions, comments, or concerns about the management of your personal data or about this Policy, please contact the email address provided in section 1.

10. Changes to this privacy policy

The terms of this Privacy Policy may be modified at any time. For example, to comply with new requirements established by applicable laws, technical requirements, or good business practices. We will notify you if any significant changes occur.

11. Information about our Fanpages on Social Networks

As joint controllers of the data processing on the social networks where we are present, we inform you that our entity collects all messages, content, and other information you provide directly to us, such as when you post something on a fanpage or send us a private message. Obviously, if you have an account on the social network, we can also access your public information, such as your username, information on your public profile, and content you share publicly.

In each interaction with fanpages, Facebook, Instagram, etc., use cookies and similar technologies to track the usage behavior of visits to the fanpage. Based on this, the fanpage operators receive the so-called “Page Information.” The page information only contains dissociated (anonymous) statistical data about visitors to the fanpage and therefore cannot be linked to any specific individual.

We do not have access to the personal data that Facebook uses to generate the page information (“Page Information Data”). Facebook is solely responsible for selecting and processing the page information data.

The purpose of this processing is to understand the interests of visitors to our Fanpages, which topics and content are most popular. This allows us to optimize our fanpage activities, for example, by better tailoring our content to the interests and usage habits of our audience.

If you want to know in detail how Facebook uses these statistics, access Page Insights Data

.