PRIVACY POLICY

1. USER INFORMATION

Who is responsible for the processing of your personal data?

ON BOARD MOTO S.L., hereinafter "RESPONSIBLE", is the Data Controller of the User's personal data and informs him that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of April 27 (GDPR) and Organic Law 3/2018 of December 5 (LOPDGDD).

What do we process your personal data for?

To maintain a business relationship with the user. The operations planned to carry out the processing are:

Referral of commercial advertising communications by email, fax, SMS, MMS, social communities or any other electronic or physical means, present or future, that makes it possible to make commercial communications. These communications will be made by the RESPONSIBLE and related about its products and services, or its collaborators or suppliers with which it has reached a promotional agreement. In this case, third parties will never have access to personal data.

Perform statistical studies.

· Process orders, requests, respond to queries or any type of request that is made by the USER through any of the forms of contact that are made available on the website of the RESPONSIBLE.

· Send the newsletter online, about news, offers and promotions in our activity.

Why can we process your personal data?

Because the processing is legitimized by Article 6 of the GDPR as follows:

With the consent of the USER: sending commercial communications and the newsletter.

For the legitimate interest of the RESPONSIBLE: conduct market research, statistical analysis, etc. and process orders, requests, etc. at the request of the USER

How long will we keep your personal data?

They will be kept for no longer than necessary to maintain the purpose of the processing or there are legal requirements that dictate their custody and when it is no longer necessary to do so, they will be deleted with adequate security measures to ensure the anonymization of the data or the total destruction thereof.

To whom do we provide your personal data?

No communication of personal data to third parties is provided except, if necessary for the development and execution of the purposes of the processing, to our service providers related to communications, with which the RESPONSIBLE has signed the confidentiality and data processor contracts required by current privacy regulations.

What are your rights?

The rights that assist the USER are:

Right to withdraw consent at any time.

Right of access, rectification, portability and deletion of your data and the limitation or opposition to its processing.

Right to lodge a complaint with the supervisory authority (www.aepd.es) if it considers that the processing does not comply with current regulations.

Contact details to exercise your rights:

ON BOARD MOTO S.L.c/ HOLANDA, 11, Nave 25 - 08917 BADALONA (Barcelona). Email: lopd@onboardmoto.com

2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

Users, by checking the corresponding boxes and entering data in the fields, marked with an asterisk (*) in the contact form or presented in download forms, expressly and freely and unequivocally accept that their data are necessary to meet their request, by the provider, being voluntary the inclusion of data in the remaining fields. The User guarantees that the personal data provided to the RESPONSIBLE are truthful and is responsible for communicating any modification thereof.

The RESPONSIBLE informs and expressly guarantees users that their personal data will not be transferred in any case to third parties, and that whenever it makes any type of transfer of personal data, the express, informed and unequivocal consent of the Users will be requested in advance. All data requested through the website are mandatory, as they are necessary for the provision of an optimal service to the User. In the event that not all data is provided, it is not guaranteed that the information and services provided will be completely adjusted to your needs.

3. MAKING THE PURCHASE

Purposes of data processing / Legal basis:

The purpose of data processing of www.onboardmoto.com is the online sale of products and services. As a result and for the management, realization and/or completion of the purchase, certain data will be processed. In particular, the following:

First and last name

E-mail

Billing address

Delivery address

Date of birth

Contact phone number

The legal basis for the processing of the data mentioned above is Article 6.1b) GDPR, since you make the data available to us on the basis of the contractual relationship.

Recipients / Recipient Categories:

In the context of the aforementioned data processing, your data will be processed, always on behalf of ON BOARD MOTO, SL and mediating contract in accordance with Article 28 GDPR, by processors in the logistics field.

In order to make and carry out the delivery we provide your delivery address, email and contact phone number to the logistics company. To complete and agree on delivery, the logistics or transport company may contact you. This data is only transmitted to the shipping company to manage the delivery.

As for the data processed on the basis of your consent for advertising purposes, we will store it in our systems, as a general rule, until you request the deletion. Without prejudice to this, it is possible that, due to inactivity for two years both in your online purchase and in your newsletter, we will unsubscribe you.

4. CUSTOMER ACCOUNT OF onboardmoto.com

Purposes of data processing / Legal basis:

To make your purchase process as easy as possible, all your data will be stored in a password-protected customer account for a long time. Once the customer account is created it will not be necessary to re-enter your data and you will be able to access them whenever you want, as well as modify them if necessary.

For the creation of the customer account, in addition to the data requested in the order process, you need to set a password. You must treat your access data confidentially and prevent access by third parties.

The legal basis for the processing of data in accordance with such consent is Article 6.1(b) GDPR. That is, you make available the aforementioned data to carry out the contractual relationship.

Recipients / Recipient Categories:

This data is transmitted for the completion of the purchase in accordance with the provisions of paragraph 3. Beyond that your data is not transmitted to third parties.

Storage Duration / Criteria to determine the storage period:

We will delete your customer account upon request. If there is a legal obligation to file the information, we will comply with this legal deadline.

5. CONTACT FORM / ELECTRONIC MAILS / PHONE CALLS / CUSTOMER SURVEYS

Purposes of data processing / Legal bases:

The personal data you provide us by filling out contact forms, by phone or email will be treated confidentially. We use your data exclusively to manage your query. The legal basis for data processing is Article 6.1(f) GDPR. Both our legitimate interest and your interest in this data processing is derived from the objective of responding to your queries, resolving any existing problems and thus maintaining and improving your satisfaction as a customer or user of our website.

If you participate in one of the surveys we conduct, it will be entirely voluntary. The legal basis that enables us to send satisfaction and/or opinion surveys is Article 6.1(f) GDPR, given our legitimate interest in knowing your opinion regarding the products you have purchased or services you have used. These surveys are anonymous, which means that no data is stored that can relate to survey participants. Only the date and time of your participation are saved. Any personal information you provide in responding to our survey will be deemed to have been provided on a voluntary basis and will be kept in accordance with the PROVISIONS of the GDPR. Please refrain from indicating in the free text boxes names or similar data that may relate to you or others. In the case of a statement of consent in the context of a survey, the legal basis for the processing of data in accordance with such consent is Article 6.1(a) GDPR. If you have given your consent in the context of a survey, you have the possibility to revoke this consent at any time with future effects. For more details, see the data protection policies in the respective survey.

Recipients / Recipient Categories:

The transfer of data to third parties is generally excluded. In exceptional cases, other data processing service providers may process the data on our request. We carefully select such suppliers, control them and contractually enforce them to comply with their obligations in accordance with Article 28 of the GDPR.

In addition, we may need to transmit excerpts from your inquiries to third parties with which we have contractual relationships (e.g. suppliers for product-specific inquiries) for the processing of your inquiry. If it is necessary to transfer your personal data, we will inform you of this in advance and ask for your consent. Personal data regarding queries is in anonymized in our system where possible.

The results of the surveys we conduct among our clients will only be used for internal analysis purposes. We do not transfer personal data to third parties without your express consent.

Storage Duration / Criteria to determine the storage period:

All personal data you provide us in inquiries (suggestions, comments or criticisms) through this website or by email will be kept personal data only for the time necessary for the realization of the purposes for which they were collected. Beyond and only in necessary cases will only the information be kept blocked the legally established deadlines. After such legal limitation periods have ended, your data will be deleted, or, alternatively, anonymised.

6. SWEEPSTAKES / CONTESTS

Purposes of data processing / Legal bases:

Through our website or newsletter you can participate in various sweepstakes. Unless otherwise provided in the data protection policy of the respective sweepstakes, or if you have not given us your express consent for further processing of your personal data you provide to us in connection with participation in the sweepstakes and/or contest, this data will be used exclusively in connection with the sweepstakes (e.g., designation and notification of the winner, sending the prize). As a general rule, the legal basis for the processing of data in the context of the sweepstakes and/or contest is Article 6. 1(b) GDPR. In the case of a declaration of consent in the context of a sweepstakes, the legal basis for the processing of data in accordance with such consent is Article 6.1(a) GDPR. You have the possibility to revoke this consent at any time with future effects. For further details, see the data protection policies of the respective sweepstakes and/or contests.

Recipients / Recipient Categories:

The data is only transferred to third parties if this assignment is necessary for the realization and management of the draw (e.g. sending the prize through a transport company). We carefully select such suppliers, control them and contractually enforce them to comply with their obligations in accordance with Article 28 of the GDPR.

Storage Duration / Criteria to determine the storage period:

Once the sweepstakes and/or contest has been completed and the winners have been proclaimed, the personal data of the participants will be deleted. The winners' data will be kept during the term of the legal guarantee, in the case of material prizes, in order to proceed with the correction or replacement thereof if they are defective. After the legal limitation periods have ended, the data will be deleted, or, alternatively, anonymised.

7. SENDING EMAIL AND NEWSLETTERS (NEWSLETTER)

Purposes of data processing / Legal bases:

On our website you can subscribe to our Newsletter. If you have consented to receive our emails, we will use your email address and, if necessary, your name to send you information (if possible, personalized) about products, promotions, sweepstakes and news from our offers, as well as other current and future services from ON BOARD MOTO, SL as well as for customer satisfaction surveys. We store and process this data for the sending of the Newsletter.

The Newsletter reports on promotions (offers, discounts, sweepstakes, etc.) as well as products and services of ON BOARD MOTO, SL

With your consent, we may record your usage habits on websites under www.onboardmoto.com and newsletter. The analysis of usage habits includes, in particular, which areas of the website or Newsletter you access and which active links. Individual user profiles assigned to you and/or email address may be created so that you can send personalized information in the form of Newsletter, internet advertisements and print advertising, as well as to improve our offers on the web.

The legal basis for the processing of data in relation to the sending of emails and newsletters (Newsletter) is your consent in accordance with Article 6.1a) of the GDPR.

You can revoke your consent at any time to receive our emails and newsletters (Newsletter) or to create personalized user profiles with future effects, for example by unsubscribe from our website. The link to the unsubscribe page can be found in each newsletter. Revocation involves deleting the collected user data.

Recipients / Recipient Categories:

If you are responsible for sending newsletters to third-party providers, they are contractually obliged to comply with their obligations in accordance with Article 28 of the GDPR. To conduct purchasing evaluations, we may use the services of independent purchasing assessment providers, who after purchase send you an email with a link to the page corresponding to our on-demand purchase evaluation. As a general rule, a transfer of the data to third parties for other purposes is excluded.

Storage Duration / Criteria to determine the storage period:

If you revoke your consent to receive our emails and newsletters from ON BOARD Newsletter, your data will be deleted from the respective email distribution lists.

8. SAFETY MEASURES

That in accordance with the provisions of the current regulations on the protection of personal data, the RESPONSIBLE is complying with all the provisions of the GDPR and LOPDGDD regulations for the processing of personal data of its responsibility, and manifestly with the principles described in Article 5 of the GDPR, by which they are treated lawfully, fairly and transparently in relation to the data subject and appropriate , relevant and limited to what is necessary in relation to the purposes for which they are treated.

The RESPONSIBLE guarantees that it has implemented appropriate technical and organizational policies to implement the security measures established by the GDPR and LOPDGDD in order to protect the rights and freedoms of Users and has communicated to them the appropriate information so that they can exercise them.

For more information on privacy guarantees, you can contact the RESPONSIBLE through ON BOARD MOTO S.L.c/ HOLANDA, 11, Nave 25 - 08917 BADALONA (Barcelona). Email: lopd@onboardmoto.com