PRIVACY POLICY

The following privacy notice describes how ALQUIBER QUALITY S.A. (followed by, “Alquiber”) and ALQUIBER S.R.L (followed by, “Alquiber Italia”) process the personal data of visitors (“ Users ”) del sito web www.alquiber.it (followed by, the “ Website Section 3 Purposes and Legal Bases of Data Processing in accordance with Regulation (EU) No. 679/2016 (the “ Regulation ” or “ GDPR ”), applicable national and European regulations (including Legislative Decree No. 196/2003 and its amendments), and relevant decisions and guidelines issued by national and European data protection authorities (collectively, “ Applicable Regulations ”).

1. Contact Information for the Data Controller and Data Protection Officer

I The contact details of the data controllers are as follows:

• ALQUIBER QUALITY S.A., headquartered at Calle Almendro, 6, 28942, Fuenlabrada, Madrid, Spain, VAT No.: A09373861, registered with the Madrid Commercial Registry, R.E.A. No. 636604.
• ALQUIBER S.R.L., headquartered in Milan, Piazza Filippo Meda, 3, 20121, VAT No.: 13655020967, registered with the Milan Commercial Registry, R.E.A. No. MI-2736164.

For any inquiries regarding the processing of personal data, Users may contact the relevant parties via email:

• For communications relating to Alquiber and its Data Protection Officer (“DPO”): at protecciondedatos@alquiber.es.and contact the Data Protection Officer Data Protection Officer (“DPO”).
• For communications regarding Alquiber Italia: at info@alquiber.it.

2. Types of Data Processed

the personal data processed include the information provided by the User during registration on the Website or when submitting requests (e.g., full name, email address, phone number, message, and any additional sender data). Additionally, some browsing data will be processed (used for anonymous statistical analysis of the Website’s use and performance etc.). Some browsing data will also be processed (used for statistical and anonymous analysis on the usage and proper functioning of the Website) which, if associated and processed with data held by third parties, constitutes personal data as it allows for the identification of Users (e.g., IP address, domain names of the computers used by Users connecting to the Website, URI addresses of requested resources, request time, method used to submit the request to the server, file size received in response, numeric code indicating the response from the server, and parameters related to the User’s operating system and computer environment).

3. Purposes and Legal Bases of Data Processing

The processing of Users’ personal data will be conducted using both manual and electronic means, ensuring the security and confidentiality of the data for the following purposes:

Purpose of the processing	Legal bases
To allow Users to register on the Website and access the content, services, and products available on it.. Data Controller for this activity: Alquiber and Alquiber Italia	To respond to User requests concerning the Website and/or our Services/Products. art. 6, para. 1, letter b) of the Regulation
Responding to User requests concerning the Website and/or our Services/Products. Data Controller for this Activity: Alquiber and Alquiber Italia	The processing is necessary for the performance of a contract to which the User is a party or to take pre-contractual steps at the User’s request. art. 6, para. 1, letter b) of the Regulation
Where required, fulfilling legal obligations, including tax obligations, in case of purchase of a service or product on the Website. Data Controller for this Activity: Alquiber and Alquiber Italia	The processing is necessary for compliance with a legal obligation to which the Controller is subject. art. 6, para. 1, letter c) of the Regulation
If necessary, enabling the Controller to pursue its legitimate interest to ensure the security and integrity of the Website. Data Controller for this Activity: Alquiber and Alquiber Italia	The processing is necessary for the pursuit of the Controller’s legitimate interest. art. 6, para. 1, letter f) of the Regulation
Sending direct marketing communications (e.g., newsletters, promotional material, market research, economic and statistical analysis, loyalty initiatives, contest invitations, direct sales, customer satisfaction surveys) by mail, email, landline, or mobile phone, with or without operator intervention. Data Controller for this Activity: Alquiber and Alquiber Italia	User consent. art. 6, para. 1, letter a) of the Regulation
Sending personalized marketing communications to the User. Data Controller for this Activity: p> Alquiber and Alquiber Italia	User consent. art. 6, para. 1, letter a) of the Regulation
Protecting rights in judicial and extrajudicial proceedings. Data Controller for this Activity: Alquiber and Alquiber Italia	The processing is necessary for the pursuit of the Controller’s legitimate interest. art. 6, para. 1, letter f) of the Regulation

The User is free to provide the personal data required for registration on the Website and for completing the request forms available on the Website. However, failure to provide such data may prevent registration on the Website, correct use of its features, and the ability to receive requested services and/or information.

Providing personal data for marketing and/or profiling purposes is entirely optional, and withholding consent will not impede the User’s ability to register. Any consent given by the User can be freely withdrawn at any time—without affecting the lawfulness of processing based on consent before its withdrawal—by using the opt-out checkbox in each promotional email or by contacting the Controller via the contact details in Section 1 of this document.

4. Cookies

The Website uses cookies. Please refer to the Cookies Policy available on the Website.

5. Optional Data Disclosure to Third Parties

Only with the User’s consent, Alquiber may disclose certain personal data to: (i) all companies within its group, and (ii) third-party companies operating in the fields of vehicle construction and marketing or provision of related accessory services, transportation and mobility, insurance and other entities in the insurance chain, banks, companies in the hospitality and tourism industry, and e-commerce companies, so that they may process such data for marketing purposes. For more information on the entities that may receive the User’s personal data, the User may contact the Controller using the contact details provided in Section 1 of this privacy notice.

6. Data Retention

The personal data of Users will be retained for a period not exceeding the time necessary to achieve the purposes for which it was collected, as well as for any longer period required to comply with legal obligations and/or for judicial protection, but in any case, no longer than the ordinary limitation periods.

Specifically:

• the personal data of registered Users will be retained for as long as the account remains active;
• the personal data collected in connection with purchased products and/or services will be retained for the time required by tax laws;
• data collected for marketing, profiling, and data sharing with third parties will be retained until the User withdraws the consent provided;
• browsing data will be deleted immediately after being processed for operational or statistical purposes; however, this data may be used to determine any liability in the event of cybercrime affecting the Website.

7. Scope of Communication and Transfer of Data Outside the EU

The personal data of Users may be processed—exclusively for the purposes outlined in this privacy policy and in accordance with applicable regulations—by employees and/or collaborators of Alquiber and Alquiber Italia, specifically appointed as “data handlers.” Additionally, third parties may access User personal data and process it on behalf of Alquiber and Alquiber Italia as “data processors,” including, for example, providers of IT and logistical services essential for the operation of the Site, outsourcing or cloud computing providers, professionals and consultants, and companies designated to send promotional emails on behalf of Alquiber and Alquiber Italia. Furthermore, the data may be communicated to independent authorities, law enforcement, or judicial and administrative authorities for institutional purposes within the limits prescribed by law, and for crime detection and prosecution, allowing Alquiber and Alquiber Italia to assert, exercise, or defend a right in legal proceedings. User data may be processed outside the European Economic Area (“SEE“), only when adequate safeguards, as defined by the Regulation, are in place by Alquiber and Alquiber Italia for personal data transfers (e.g., adoption of standard contractual clauses, etc.). For more information regarding the entities that may receive User personal data and the list of non-EEA countries involved, the User may contact Alquiber and Alquiber Italia at the addresses provided in Section 1 of this privacy policy.

8. User Rights

To the extent applicable to the processing described in this privacy policy, the User may exercise the rights provided in Articles 15 and following of the GDPR:

1. right of access to data (Art. 15 GDPR)
2. right to rectification of data (Art. 16 GDPR)
3. right to erasure of data (known as the “right to be forgotten,” Art. 17 GDPR)
4. right to restriction of processing (Art. 18 GDPR)
5. right to data portability (Art. 20 GDPR);
6. right to object to processing (Art. 21 GDPR);
7. right to receive explanations about the logic involved in automated decision-making processes and profiling (Art. 22 GDPR);
8. right to withdraw consent given (Art. 7 GDPR).

Additionally, if the User believes that the processing of their personal data violates the principles set by applicable regulations, they have the right to lodge a complaint with the Supervisory Authority, which in Italy is the Data Protection Authority.

The above-listed rights may be exercised at any time via the contact details provided in Section 1 of this privacy policy.