Privacy policy

The protection of your personal data ("Data") is important to us. Below we inform you about how we handle your data when you use our website.
Data refers to individual details about the personal or factual circumstances of an identified or identifiable natural person. This includes information such as their legal name, address, telephone number, and date of birth.
Our Privacy Policy is based on the General Data Protection Regulation ("GDPR"). The technical terms we use correspond in content to the GDPR definitions of these terms.
We draw particular attention to the definitions in Article 4 of the GDPR.

Responsible Party within the meaning of the General Data Protection Regulation:

NEVAUTO SA
Camino De Ronda, 181,
18003 Granada

Phone: +34 (0) 611 2803 06
Email: info@nevauto.eu

If processing operations involve, for example, joint controllership (Article 26 (1) GDPR), a reference can be found in the relevant subsection.

Contact details of our Data Protection Officer:

NEVAUTO SA
Camino De Ronda, 181,
18003 Granada

Email: privacy@nevauto.eu

Personal identification data such as names and addresses
Electronic identification data such as IP addresses, screen resolution
Contact data such as telephone numbers, email addresses
Contract data such as the date of contract conclusion, specific contract content
Payment data such as payment history, account number
Content data such as submitted documents, text entries.

A detailed description of the individual purposes can be found in the respective subsection. Processing is based exclusively on the following legal bases:

Art. 6 (1) (a) and Art. 7 GDPR for consent to process data for one or more specific purposes
Art. 6 (1) (b) GDPR for the performance of a contract or for the implementation of pre-contractual measures taken at the request of the data subject
Art. 6 (1) (c) GDPR for the fulfillment of our legal obligations
Art. 6 (1) (d) GDPR for the protection of the vital interests of the data subject or another natural person
Art. 6 (1) (f) GDPR to protect our legitimate interests or those of a third party, or
Art. 88 GDPR when processing data related to the initiation or implementation of an employment relationship.
A change in the processing purpose is governed by Art. 6 (4) GDPR.

Data subjects have the following rights:

– to request information about your data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected from us, as well as the existence of automated decision-making, including profiling, and, where applicable, meaningful information on its details

– to request the immediate rectification of inaccurate data or the completion of your data stored by us in accordance with Art. 16 GDPR

– pursuant to Art. 17 GDPR, to request the deletion of your data stored by us, unless processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims

– pursuant to Art. 18 GDPR, to request the restriction of the processing of your data if you dispute the accuracy of the data or the processing is unlawful

– pursuant to Art. 20 GDPR, to receive the data you have provided to us in a structured, common, and machine-readable format or to request its transmission to another controller ("data portability")

Right of Objection
According to Art. 21 (1) GDPR, data subjects may object to data processing that we carry out on the basis of Art. 6 (1) (e) (public interest) and (f) GDPR (legitimate interest) at any time for reasons arising from their particular situation. In particular, data subjects may object to the use of their data for direct marketing purposes at any time with future effect. Unless the objection concerns an objection to direct marketing, we ask you, when exercising such an objection, to explain the reasons why we should not process your data as we do. In the event of your justified objection, we will examine the situation and either stop or adjust the data processing or explain our compelling legitimate grounds for continuing the processing.

Right of Withdrawal
According to Art. 7 (3) GDPR, data subjects may withdraw their consent at any time and without giving reasons. However, the withdrawal does not affect the legality of the processing carried out up to the time of withdrawal. Revocation can be sent by email to privacy@nevauto.eu or by post to our company address.

You can assert the aforementioned rights by contacting our company's data protection officer, whose contact details are listed in Section 1.

Please note that we reserve the right to request further proof of your identity as the actual data subject asserting the rights mentioned here if there are doubts that you are actually asserting these rights as the actual data subject.

Right to lodge a complaint with a supervisory authority
Data subjects may also contact a data protection supervisory authority with questions or complaints in accordance with Art. 77 GDPR.

In certain circumstances, it may be appropriate to transfer data to, for example, a processor to ensure smooth processing. In the relevant section for individual processing operations, you will find information about which recipients receive data. We only use carefully selected and commissioned service providers.

If data is transferred as part of contract processing, this transfer takes place on the basis of a contract processing agreement within the meaning of Art. 28 GDPR. This agreement defines how data of data subjects is to be handled and ensures their protection.

When using our online services, data is transferred to third countries. If data is transferred to a third country, this will only be done in accordance with the GDPR (in particular Articles 44 et seq. GDPR). Details on data transfers to third countries and the respective recipients of the data are described in the respective subsections.

We delete your data when it is no longer required for the purpose pursued by the processing (e.g., the execution of contracts) and no legal retention obligations or legal justifications exist. The statutory limitation periods also influence the retention period. The standard limitation period is three years; in certain cases, the limitation period can also be thirty years. Additional information on the retention period can be found in the respective subsection.

We do not use automated decision-making or profiling.

In principle, you are not legally obligated to provide us with your data. However, if you do not do so, we may not be able to provide you with our website in full, respond to your inquiries, or enter into or execute a contract with you. Mandatory data is marked with an asterisk (*); all other data you provide to us is voluntary.