1. Data controller The data controller is ACOSTA & EVANS HANDLING, S.L. (hereinafter “Acosta & Co”), with tax ID B38877015 and registered address at Calle Callao de Lima 1, 38003 Santa Cruz de Tenerife, Spain. For any data protection queries, please contact: rgpd@acostaevans.com.
2. Data we process Acosta & Co may process the following categories of personal data: identification data (name, address, email, phone), financial and billing data, browsing and traffic data, commercial data and, where applicable, login credentials. Mandatory fields are required to provide the service. Users guarantee that provided data is accurate and that third-party data is shared with proper consent.
3. Purpose of processing Data will be processed to: (i) manage contractual relationships and service delivery; (ii) handle billing and payments; (iii) respond to inquiries; (iv) send commercial communications where legally permitted; (v) produce analytics and improve services; and (vi) comply with legal obligations and prevent fraud.
4. Legal basis Processing is based on: (i) contract performance; (ii) compliance with legal obligations; (iii) legitimate interest in improving services and managing operations; and (iv) user consent where required. Consent may be withdrawn at any time.
5. Data retention Data will be retained for as long as necessary to fulfil the purposes for which it was collected and thereafter for legally required periods (generally up to 5 years), remaining blocked where applicable.
6. Recipients Data may be shared with: financial institutions for payment processing, public authorities where legally required, and service providers acting as data processors under contract.
7. International transfers Where providers are located outside the European Economic Area, Acosta & Co ensures that transfers are carried out with appropriate safeguards under GDPR (such as standard contractual clauses).
8. User rights Users may exercise their rights of access, rectification, erasure, objection, restriction and portability, as well as withdraw consent, by contacting rgpd@acostaevans.com. They may also lodge a complaint with the Spanish Data Protection Authority (www.aepd.es).
9. Data security Acosta & Co implements appropriate technical and organisational measures to ensure data security and prevent unauthorised access, including encryption and access controls.
10. Profiling and automated decisions Acosta & Co may carry out basic profiling for commercial or analytical purposes, without producing automated decisions with legal effects on the user.
11. Updates Acosta & Co reserves the right to update this policy to reflect legal or regulatory changes. The current version will always be available on the website.