Privacy Policy
PRIVACY POLICY
DATA PROTECTION POLICY
1. Who is responsible for processing your data?
The data controllers responsible for the processing of personal data relating to the various processes concerning the management of users, clients, potential clients, collaborators and suppliers are the following companies forming part of GRUPO DRIVEN:
DRIVEN PROPERTIES, S.L., with Tax Identification Number (CIF) B16377277 and registered office at Calle Almirante 25, 28004 Madrid, registered in the Commercial Registry of Madrid, Registration 1/2024/74564,0, Sheet No. M-822840, Folio 43, Volume 46882.
LAMAR IBERIA, S.L., with Tax Identification Number (CIF) B10583730 and registered office at Calle Almirante 25, 28004 Madrid, registered in the Commercial Registry of Madrid, Bulletin 141, Reference 327590, Volume 1, Folio 1, Section 8, Sheet 768219, Registration 7.
For the purposes of our Data Protection Policy, the contact telephone number is [NOT SPECIFIED IN THE ORIGINAL DOCUMENT] and the contact email address is [NOT SPECIFIED IN THE ORIGINAL DOCUMENT] (LAMAR IBERIA, S.L.).
2. What types of personal data do we hold about you and how have we obtained them?
The categories of personal data processed in relation to clients and suppliers are:
- Identification data.
- Postal or email addresses.
- Commercial information.
- Financial and transaction data.
Additionally, we inform you that we may process the following types of data relating to you in accordance with specific processing activities. Such processing is always carried out with your prior consent, which you may withdraw at any time, unless there is a legal basis or a legitimate interest of the data controller that authorises such processing without your consent: documentation relating to the Prevention of Money Laundering and Terrorist Financing (PBCFT) and the whistleblowing channel.
We have obtained all the above-mentioned data either directly from you through the submission of a commercial offer, contractual proposal, etc., or through your company when it provides us with identification data and other information necessary to fulfil the purpose of the contractual relationship between the parties.
You or your company are responsible for providing us with updated information in the event of any changes.
With regard to job applicants, we have obtained their data through the submission of a CV or through their application via an employment portal. In the latter case, you have authorised the transfer of your data to our company by entering your professional information on the employment portal.
3. How long will we retain your data?
Personal data relating to individuals associated with potential clients, clients and suppliers, collected through the various contact forms and/or information collection procedures, will be retained for as long as the data subject does not request its deletion.
Data provided by our clients and suppliers will be retained for as long as the commercial relationship between the parties continues, while respecting the minimum legal retention periods applicable to each matter.
In any event, your personal data will be retained for the period reasonably necessary, taking into account our need to respond to questions or resolve problems, make improvements, activate new services and comply with applicable legal requirements.
This means that we may retain your personal data for a reasonable period even after you have stopped using our products or this website.
After this period, your personal data will be deleted from all GRUPO DRIVEN systems.
4. For what purposes and on what legal basis do we process your data?
We process the data provided by interested parties in order to manage various activities arising from specific procedures relating to sales, after-sales service, supplier management, candidate management, service quality, etc.
Accordingly, we will use your data to carry out some of the following activities, based on the corresponding legal basis:
| Purpose of processing | Legal basis |
|---|---|
| Receipt, analysis and resolution of reports concerning irregularities or breaches committed within the company. | Performance of a task carried out in the public interest or in the exercise of official authority vested in the data subject. |
| Compliance with current regulations on the Prevention of Money Laundering and Terrorist Financing. | Regulatory obligation. |
| Responding to requests from data subjects regarding data protection. | Regulatory obligation. |
| Managing requests for information and referring incidents to the relevant department. | Consent of the data subject. |
| Accounting, tax, administrative management and client invoicing. | Performance of a contract or pre-contractual measures; regulatory obligation. |
| Management of client data for payments, transfers, direct debits, accounting, tax and invoicing purposes. | Performance of a contract or pre-contractual measures; regulatory obligation. |
| Marketing activities through physical media to attract new clients. | Consent of the data subject. |
| Tax, accounting and administrative management relating to suppliers. | Performance of a contract or pre-contractual measures; regulatory obligation. |
| Management of payments, transfers, direct debits, accounting, tax and supplier invoicing. | Performance of a contract or pre-contractual measures; regulatory obligation. |
| Management of candidate search, assessment and selection processes, including unsolicited applications. | Performance of a contract or pre-contractual measures. |
| Administrative and commercial product management. | Performance of a contract or pre-contractual measures; regulatory obligation. |
| Proper exercise of the right to effective judicial protection before judges and courts. | Legitimate interests of the data controller; performance of a contract or pre-contractual measures. |
| Legal, employment, tax and administrative advice. | Consent of the data subject; performance of a contract or pre-contractual measures; regulatory obligation. |
| Management of information requests received through the website form and/or social media. | Consent of the data subject. |
| Customer complaints and claims service. | Consent of the data subject; performance of a contract or pre-contractual measures. |
| Management of advertising and marketing activities aimed at customer loyalty. | Legitimate interests of the data controller. |
| Customer acquisition campaigns. | Consent of the data subject. |
| Management of information requests and referral of incidents to the relevant department. | Consent of the data subject. |
| Management of customer preferences within the private area enabled on the website. | Performance of a contract or pre-contractual measures. |
Regarding the legal basis referred to above, you are obliged to provide personal data where necessary. If you do not provide your personal data, it may not be possible to perform your contract, comply with legal obligations or fulfil obligations arising from public authorities.
5. To whom will your data be disclosed?
GRUPO DRIVEN will never share your personal data with any third-party company intending to use it for its own direct marketing activities, unless you have expressly authorised us to do so.
We inform you that we may provide your personal data to Public Administration bodies and competent authorities where we receive a legal request from such authorities or where, acting in good faith, we consider such action reasonably necessary to comply with legal proceedings, respond to a legal claim or lawsuit, or protect the rights of GRUPO DRIVEN, its clients and the general public.
In order to meet the various requirements arising from the commercial, accounting, tax and administrative management of our users, clients or suppliers, it may be necessary for your data to be communicated between the companies identified at the beginning of this policy (DRIVEN PROPERTIES, S.L. and LAMAR IBERIA, S.L.), as well as to our parent company LAMAR DEVELOPMENT, located both in Spain/the EU and abroad, in countries that may not offer a level of protection equivalent to that of Europe, always in compliance with all necessary data protection safeguards.
Your personal data may be provided to third parties (for example, Internet service providers that help us manage our website or perform contracted services, IT support and maintenance companies, logistics companies, administrative agencies, and tax and accounting advisers, etc.).
In any event, these third parties must maintain, at all times, the same levels of security in relation to your personal data and, where necessary, will be bound by legal commitments to keep your personal data private and secure and to use the information only in accordance with specific instructions from GRUPO DRIVEN.
6. What are your rights as a data subject?
Everyone has the right to obtain confirmation as to whether personal data concerning them is being processed.
In particular, data subjects may request access to their personal data and receive it in a commonly used, machine-readable format where processing is carried out by electronic means (right to data portability).
Data subjects may also request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
Additionally, in certain circumstances, data subjects may request the restriction of the processing of their data or, in certain circumstances and for reasons relating to their particular situation, exercise their right to object to the processing of their data.
Processing will cease unless there are compelling legitimate grounds for continuing, the exercise or defence of potential legal claims, or exceptions established under applicable regulations.
We also inform you that you have the right to withdraw any consent previously granted at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Users may exercise the aforementioned rights at any time by contacting us in writing using the contact details provided in Section 1, "Data Controller", of this GRUPO DRIVEN Data Protection and Privacy Policy.
In any event, the entity reserves the right to request proof of identity from the applicant for verification purposes, and only where such verification cannot be carried out by other means.
You also have the right to lodge a complaint with the Spanish Data Protection Agency, particularly where you have not obtained a satisfactory response in exercising your rights.
Spanish Data Protection Agency (Agencia Española de Protección de Datos)
C/ Jorge Juan, 6 – 28001 Madrid
Telephone: 901 100 099 / 912 663 517
7. Data protection for website users
In accordance with Regulation (EU) 2016/679, GRUPO DRIVEN informs users that their personal data (such as the information provided through completed forms and the metadata associated with those forms, including date, submission time, submission IP address, etc.) will be processed for the processing activity indicated in each data collection form on our website.
Such processing of your data will be based on your own consent.
By clicking the "SEND" button, the User consents to the processing of their data by GRUPO DRIVEN.
We also inform you that, unless required by law or expressly authorised by you, GRUPO DRIVEN will not disclose your data to third parties.
Users may exercise their rights of access, rectification or deletion of data at any time, as well as other rights recognised in this document and regulated by Regulation (EU) 2016/679, by contacting us in writing using the contact details provided in Section 1, "Data Controller".
Furthermore, in accordance with Law 34/2002 of 11 July on Information Society Services and Electronic Commerce, GRUPO DRIVEN undertakes not to send advertising by email without first obtaining the express authorisation of the recipient.
Users may object to receiving advertising by selecting the corresponding checkbox.
8. Other information of interest regarding our Privacy Policy
8.1 Security measures
The security levels required by current European and Spanish data protection regulations are adopted, taking into account the state of the art, implementation costs, and the nature, scope, context and purposes of the processing described, as well as the varying likelihood and severity of risks to your rights and freedoms as an individual.
8.2 Processing of minors' data
Under Regulation (EU) 2016/679 and Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), minors over the age of 14 may give their consent to the use of information society services, such as registering on a forum, completing a contact form, etc.
Nevertheless, GRUPO DRIVEN shall be responsible for verifying the accuracy of the age indicated by the minor.
For the processing of data relating to children under the age of 14, such data collection shall always be carried out with the express consent of their parents or legal guardians.
8.3 Changes to our Data Protection and Privacy Policy
Changes and corrections may occasionally be made to this section of the Data Protection Policy for Clients, Suppliers and Users.
Please check this section regularly to review any changes that may have been made and how they may affect you.
8.4 Why is it necessary to accept this Data Protection and Privacy Policy?
This section provides you, in an easily accessible manner, with all the information necessary to understand the types of data that GRUPO DRIVEN holds about its users, potential clients, clients and/or suppliers, the purposes pursued, the rights recognised to you as a data subject under data protection regulations and how to exercise those rights.
Therefore, by deliberately submitting your personal data through our contact channels and/or entering into a commercial relationship with our company, we consider that you acknowledge and accept the processing of your personal data as described in this policy.
This personal information will only be used for the purposes for which you have provided it or for which certain national or regional regulations authorise us to use it.
In any event, we must inform you that refusing to provide certain requested data could hinder the development of the contractual relationship between the parties, with potentially serious consequences for the provision of the various services contemplated under the commercial contract entered into with the contracting party.
If you have any questions regarding this Data Protection Policy for Users, Potential Clients, Clients and Suppliers of GRUPO DRIVEN, please contact the company using the address provided in Section 1, "Data Controller", and we will be pleased to assist you and answer any additional questions you may have.
9. Applicable legislation
This Data Protection Policy shall at all times be governed by Spanish and European legislation on personal data protection and privacy.