Privacy Policy

The purpose of this Privacy Policy is to inform you about what data we collect, why we collect it, and how you can update, manage, export, and delete it.

YACARROS.COM may collect and process data from website users and other interested parties obtained through various means such as:

• Forms (paper and electronic forms from sources like the web or social media, for example).
• Email.
• Phone contact.
• Postal mail.
• Sources of public access (official newspapers and bulletins, media, etc.)
• Private entities
• Contracts

The processing of data collected through these sources will be carried out in accordance with the provisions of EU Regulation 2016/679 General Data Protection Regulation (GDPR), Organic Law 3/2018 on Data Protection and Digital Rights Guarantee, and other Spanish and European regulations in force, as well as instructions and recommendations from the supervisory authority (Spanish Data Protection Agency).

Acceptance of this privacy policy by the user implies express, full, and unconditional consent and agreement with the plurality of the purposes and terms set out.

The user who accepts the general conditions and privacy policy declares to be of legal age (18 years).

For the purpose of presenting the company's privacy policy, the following sections are outlined:

Who is the data controller?

In the future, we may refer to the data controller as "controller," "company," or "YACARROS."

For what purpose do we process your personal data?

The data processing carried out at YACARROS includes the following purposes:

a) In case of contracting or using the goods and services offered by the company through the website or other means, maintaining the contractual relationship and carrying out internal administration, economic management, commercial management, service provision, and improvement. This includes the publication of advertisements and contact with advertisers.

b) The management and development of communications (user contact, customer and user support, query resolution, commercial promotion, newsletter sending, management of company profiles on social networks, etc.)

c) Management of services provided by third parties: insurance, valuations, etc.

d) Generation of "leads" for commercial and marketing purposes. This occurs when a user provides their data through forms and information collection tools that generate information related to sales opportunities.

e) Management of programmatic advertising in which external actors and agents may be involved (seller, advertiser, information provider, buyer, advertising agencies, etc.)

f) Management of the company's services and processes in the development of its activity: human resources management; security of people and means; administrative, economic, and commercial management, and any other purpose derived from compliance with the company's object and statutes and the obligations applicable to it.

Based on the information provided, we will create a commercial profile with the aim of improving your user experience and customizing offers and communications that we consider of interest to you. No automated individualized decisions will be made based on this profile.

If the reason for contacting the company and sending information about yourself is to seek employment (sending resumes, etc.), the data provided will be processed to assess your possible candidacy for job offers from the company. If the data provided is of interest to the company, a profile will be created and archived for human resources management.

What type of data do we process?

In addition to the various means of obtaining data mentioned, as well as the different processing purposes outlined, we inform you that the types of data we can process in our information system are as follows, depending on the relationship with the data subject (user, recipient, customer, supplier, employee, etc.):

• Identifying and image data
• Identification codes or keys
• Postal or electronic addresses (including IP address) and other contact data
• Academic and curriculum data in the case of job applications, as well as other labor-related information
• Economic, financial, and insurance data
• Other data and information necessary or implicit in the development of the company's activity and services

The obligation to provide data may be required of the user for total or partial data entry in fields where information is inserted. The user accepts that mandatory data is necessary to address the corresponding requests from the company.

Regarding other internal data processing for employees, customers, or other third parties who somehow maintain a pre-contractual or contractual relationship with the company, the required information is related to the proper compliance and development of that relationship.

In any case, the user and/or interested party must ensure that the provided data are real, truthful, and up-to-date at all times, and must communicate or proceed with any modification when necessary.

How long will we keep your data?

Personal data will be kept as long as a relationship with you is maintained, either as a registered user or as another type of interested party, until the deletion of such data is requested, or as long as there is a legal provision or requirement for their retention.

When the data is no longer necessary for the purposes for which it was collected, it will be deleted, ensuring its confidentiality.

In the case of data provided for job searches, if this data is not of interest to the company, it will be immediately deleted, ensuring its confidentiality.

What is the legal basis for processing your data?

The legal bases for the processing of your data may include:

• a) Execution of a contract in which the data subject is a party (commercial contract, trade contract, service contract, employment contract, etc.)
• b) Provision of express consent, for example, when registering as a user and accepting the legal terms and conditions.
• c) Other informed consent: contact form on the website, registration for activities developed by the company, participation in the company's social media profiles, and any other processing that necessarily involves the collection of personal data, for which a clear affirmative action by the data subject will be a mandatory requirement.

To whom will your data be disclosed?

By default, and except for the situations and/or categories of third parties detailed below, the company's policy is not to disclose data to any third party. Except:

a) The publication of ads requires providing the requested information and necessarily involves your consent for such publication, where part of your personal data will be public.

b) User contact with the advertiser, as well as information request or offer forms, requires providing identifying and contact personal data to the advertiser to enable contact.

Particularly when the user requests information about ads published by professional advertisers or requests information through the existing request forms on the website, the identifying personal data, contact information, and other "leads" information provided, according to the purpose stated in the previous section d) of the purposes; will be communicated to such professional advertisers and other intervening third parties (usually dealers, vehicle buying and selling companies, insurance companies, or third-party offer comparison services, actors or agents related to advertising processes) with whom YACARROS has entered into a commercial agreement or has a business relationship for such purposes, allowing these third parties to contact the user directly for commercial purposes related to the ad the user has shown interest in, similar offers, or offers related to the services offered by said third parties.

c) Authorized processors with whom the company has signed the corresponding data access and confidentiality agreement for the provision of auxiliary services they carry out for the development of the company's activity.

d) Third-party websites to improve the dissemination and search results of the ads published by the user.

e) Authorities, competent Public Administration, and other legitimate interested parties, as legally provided.

In the event that the user uses third-party services and websites included on the company's website, such as the insurance offers service or vehicle financing service, the company informs the user that the requested data will not be included in its files. Therefore, the file controller will be the third party to whom the company provides an advertising service or use of web space. This should not result in any reduction or harm to the rights of our users, so the company will be available to users if they want information to contact these third parties and exercise their rights with them.

However, we will ensure that the forms for collecting data by third parties are accompanied by their terms and privacy policies, so that the user gains a better understanding of the data processing that will be carried out by them.

If the company obtains a copy of the data contained in such third-party forms, the terms of use, their processing, and the rights of the data owners will be in accordance with current regulations and will be set out in the corresponding legal texts on this website.

In the event that the user provides us with data about a third party, for example, to inform an acquaintance about the publication of an ad or to recommend our website or an article published on it, it is informed that the user is responsible for obtaining the consent of the person and their provided data.

What are your rights when you provide and/or we process your data?

As an interested party, you may at any time request the exercise of any of the following rights that you have in the field of data protection:

• Access to the personal data of the data subject to confirm whether or not data concerning them are being processed and to obtain more information about this processing.
• Rectification or Deletion of personal data concerning the data subject when, among other reasons, they are inaccurate or no longer necessary for the purposes for which they were collected.
• Limitation of the processing of the personal data of the data subject in certain circumstances, in which case they will only be kept for the purpose of exercising or defending claims, for the protection of the rights of another person, or for reasons of public interest.
• Receive the personal data that concern them, which they have previously provided to us, and in a structured format whenever possible. (Portability of your data).
• Object to the processing of their data in certain circumstances and for reasons related to their particular situation. The company will stop processing their data, except for compelling legitimate reasons, or the exercise or defense of possible claims.
• Revoke consent, which may involve the cancellation or termination of the existing business or contractual relationship, if any. Without prejudice to the processing carried out prior to the withdrawal of consent.

To exercise these rights, you only need to contact us through the email address info@yacarros.com or by sending a written request to C/ Genil 1, 3ºB. 23400 Úbeda (Jaén), Spain.

Optionally, you can also contact our Data Protection Officer via email at info@yacarros.com, or the Data Protection Agency (www.aepd.es) to learn more about your rights or request their protection from the supervisory authority.

Data Security

The company adopts the necessary technical and organizational measures in its information system to ensure an adequate level of confidentiality, integrity, and availability of the information we process, in compliance with the provisions of the GDPR and LOPDGDD. This is done to ensure the fair, lawful, and transparent processing of data concerning the data subject and to process the data in a way that is adequate, relevant, and limited to what is necessary for the purposes of processing.

However, to the extent permitted by law, we do not assume any responsibility for damages or alterations that third parties may cause to our information system. Any security breach will be promptly communicated to the competent authority and/or law enforcement agencies.

Sending Communications or Information

Our policy regarding sending information through electronic means (email, instant messaging, etc.) is limited to sending only communications that we consider of interest to our users and stakeholders, related to the functions and activities of the company, or that you have consented to receive.

If you prefer not to receive these messages, we will offer you the possibility to exercise your right to cancel and opt-out of receiving these messages, in accordance with the provisions of Title III, article 22 of Law 34/2002 on Information Society Services and Electronic Commerce.

Please note that notifications that may be made by different Internet browsing applications (browsers) are not managed by the company, nor does the company have access to such data to identify or contact the data subject. This is an action carried out by these tools, and it is normal for them to ask the user in advance if they want to receive notifications.

Use of Cookies

This website may use technical cookies (small pieces of information that the server sends to the user's computer when accessing the page) to carry out certain functions that are considered essential for the proper operation and display of the site. The cookies used are, in any case, temporary, with the sole purpose of making navigation more efficient and disappear at the end of the user's session. In no case do these cookies themselves provide personal data, and they will not be used to collect such data.

By using cookies, it is also possible for the server where the website is located to recognize the browser used by the user to make navigation easier. For example, it allows users who have previously registered to access areas, services, promotions, or contests reserved exclusively for them without having to register on each visit.

They can also be used to measure audience, traffic parameters, control progress and number of entries, etc. In these cases, they are technically dispensable cookies but beneficial for the user. This website will not install dispensable cookies without the prior consent of the user.

This website uses its own and third-party cookies for analytical purposes and to show personalized advertising based on a profile created from browsing habits (for example, pages visited).

Every user who visits the website is informed about the use of cookies through a floating banner. In case of accepting their use, the banner will disappear, although at any time, the user can revoke the consent and obtain more information by consulting our Cookie Policy. The user has the possibility to configure their browser to be alerted about the reception of cookies and to prevent their installation on their computer. Please, refer to your browser's instructions for more information. You can find more information about how we use cookies in our Cookie Policy.

Social Media

The company may create profiles on various social networks and electronic services such as Facebook, Instagram, Twitter, YouTube, Vimeo, etc.

The company is responsible for the processing of user's personal data collected or processed through these profiles in accordance with the terms and guarantees set out in this privacy policy.

The purpose of processing the data collected through these means may include the following operations:

• Handling requests and inquiries made to the company.
• Informing about activities and events organized by the company.
• Informing about products or services offered by the company.
• Interacting through official profiles.
• Other treatments directly related to the company.

The legal basis for the processing of data in this case is based on consent for one or more specific purposes, as the user, when following our social media profiles, gives consent for the processing of the personal data published on their own profile.

Users can access the privacy policies of each social network to configure their profile to ensure privacy.

The company has access to and processes the user's publicly available information and may perform the following actions:

• Access to the public information on the profile.
• Publication on the user's profile of any information already published on the responsible party's social network.
• Sending personal and individual messages through the social network channels.
• Status updates from the page that will be published on the user's profile.

The user can always control their connections, delete content that is no longer of interest, and restrict with whom they share their connections; to do this, they must access their privacy settings.

Once the user is a follower or has joined a profile on the company's social media, they can post comments, links, images, photographs, or any other type of multimedia content supported by it. In any case, the user must be the owner of the published content, have the copyright and intellectual property rights, and have the express consent of the affected third parties.

Any publication on the social network, including texts, graphics, photographs, videos, etc., that violates or is likely to violate morality, ethics, good taste, decorum, and/or infringes, violates, or breaks intellectual or industrial property rights, the right to image, or the law is not allowed.

In these cases, the company reserves the right to immediately remove the content, without prior notice, and may request the permanent blocking of the user.

The company will not be responsible for the content freely published by a user.

The user must be aware that their posts will be known to other users, making the user themselves the main responsible party for their privacy.

The images that may be published on the social network will not be stored in any file by the company, but will remain on the social network.

Access and registration through the company's social networks are prohibited for individuals under 18 years of age. In the case of minors or individuals with special needs, the intervention of the person with parental authority or guardianship, or their legal representative through a valid document proving representation, will be necessary.

Through the profiles on social networks, the company does not knowingly collect any personal information from minors or individuals with special needs. The company shall be expressly exempt from any liability that may arise from the use of social networks by minors or individuals with special needs.

This privacy policy was reviewed in December 2023, and there may be variations until its next review.