Privacy Policy

WHAT PERSONAL DATA IS COLLECTED ON THIS WEBSITE?

For the purposes established in this Privacy Policy, CARTON CARS collects and processes the Personal Data detailed below, which will depend on the different products or services you request on this Website:

• Identification data: name, surname.
• Contact data: postal address, email, mobile phone number.
• Contractual data: contractual operation data, ID, products and services acquired, financial operations, payment data.
• Navigation data: IP address, device type and identification, browser type, domain through which you access the Website, navigation data, activity on the Website.

WHAT IS THE LEGAL BASIS FOR PROCESSING THIS DATA?

We process your personal data on the following legal bases:

• The execution of a contract with CARTON CARS , for contracting services, publishing ads, and managing requested services.
• The user’s consent in relation to contact, content subscription, and sending commercial communications, via email, cookies, or messaging systems.

• The legitimate interest of the data controller to protect website users of CARTON CARS from abuse and fraud in the use of our services.

FOR WHAT PURPOSES WILL WE PROCESS YOUR DATA?

On this website, there are different forms, and in each of them, the information collected will be used as follows:

• Content subscription forms: there are several forms to activate the subscription. The data provided will be used exclusively to send the Newsletter and keep you updated on news and special offers, exclusive to subscribers of
• Comment form: The personal data entered in the form to insert these comments will be used exclusively to moderate and publish them.
• Contact form: There is also a contact form for inquiries, suggestions, or professional contact. In this case, the email address will be used to respond to them and send the information the user requests through the website.
• Registration Form: In this case, we request the following personal data: Name, Email, so you can create an account in our system and gain access to its functionalities.
• Sales form: I also process data to manage the purchase of Otros Servicio financieros ncop, including order management, payment, and all operations related to contracting the chosen service or product. This includes sending follow-up emails, responses, invoices, receipts, etc.
• High affiliate form: We request affiliate data, including payment data, to manage affiliate registration and settle corresponding commissions.
• Download Systems: On this website, various contents are available for download, periodically incorporated in text, video, and audio format. In this case, an email is required to activate the subscription form. Your information is used for the purposes indicated for subscribers.

PERSONAL DATA RETENTION PERIOD

Client Data: The retention period for personal data will vary depending on the service the Client contracts. In any case, it will be the minimum necessary, and may be kept until:

• 4 years: Law on Infractions and Sanctions in the Social Order (obligations regarding affiliation, registrations, cancellations, contributions, salary payments, etc.); Arts. 66 et seq. General Tax Law (accounting books, etc.).
• 5 years: Art. 1964 of the Civil Code (personal actions without special term).
• 6 years: Art. 30 of the Commercial Code (accounting books, invoices, etc.).
• 10 years: Art. 25 of the Law on Prevention of Money Laundering and Financing of Terrorism.
• Subscriber data: From the moment the user subscribes until they unsubscribe.
• Prospective client data: data will be retained in all cases for the duration of the established commercial relationship and, once concluded, for two years, unless the user requests its deletion earlier.

WHAT ARE YOUR RIGHTS REGARDING THE USE OF YOUR DATA?

Anyone has the right to obtain confirmation as to whether CARTON CARS is processing personal data concerning them or not.

Interested parties have the right to:

• Request access to personal data concerning the data subject.
• Request its rectification or erasure.
• Request its cancellation.
• Request restriction of its processing.
• Object to processing.
• Request data portability.

If you have given your consent for a specific purpose, you have the right to withdraw the given consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

In case you feel your rights regarding the protection of your personal data have been violated, especially when you have not obtained satisfaction in exercising your rights, you can file a complaint with the competent Data Protection Control Authority through its website: https://www.aepd.es/es

To exercise these rights, you can write to antoni@cartoncars.com.

There is a form for exercising your rights, which you can request by email or, if you prefer, you can use those prepared by the Spanish Data Protection Agency or third parties.

These forms must be electronically signed or accompanied by a photocopy of your ID.

If someone represents you, they must attach a copy of their ID, or it must be signed with their electronic signature.

Forms can be submitted in person, sent by mail, or by email to the data controller’s address appearing at the beginning of this text.

REMARKETING ACTIONS: GOOGLE ADS

Ads is a Google platform for ADVERTISERS who want to advertise on GOOGLE. cartoncars.com uses Google Ads, Google’s advertising platform that allows you to create campaigns and ads to display on other websites. When generating an ad, the audience can be segmented by:

• Location
• Demographics (age, gender, etc.)
• Interests (activities, hobbies, etc.)
• What they buy online and through other channels

The data obtained through Google Ads is subject to this privacy policy from the moment the user leaves their data in the form on this website to join the subscription newsletter. Under no circumstances will information from Google be used for a different purpose.

FACEBOOK ADS

This website uses Facebook Ads:

Facebook Ads allows audience segmentation to target an ad.

Thanks to Facebook’s custom audiences feature, an audience can be created from user and subscriber data on this website, such as email addresses and phone numbers. To do this, it is necessary to share databases with Facebook to then create custom audiences by directing ads to people with similar profiles.

For ad segmentation in accordance with Facebook’s Policies, no sensitive personal information is used and it is not shared with third parties or other advertisers, and will be deleted by Facebook as soon as this process ends. Furthermore, Facebook will ensure confidentiality.

The advertising system designed by Facebook allows relevant and useful ads to be displayed without revealing your identity to advertisers, reaching groups of people with specific profiles.

As a user, you can revoke your consent at any time via https://www.facebook.com/settings?tab=ads, where you can configure ad reception. You can also indicate that you do not want interest-based ads from Facebook or other companies, through the European Interactive Digital Advertising Alliance (EDAA) of Your Online Choices (http://www.youronlinechoices.com/es/) or in your computer or mobile device settings.

To use the custom audiences feature, this website uses Facebook’s WebsiteCustomAudience tool, which uses the Facebook pixel that anonymously marks visitors to this website. If you wish to object to the use of Facebook WebsiteCustomAudiences, you can do so at: https://www.facebook.com/ads/website_custom_audiences/.

For more information on the scope and purpose of data collection by Facebook and its subsequent processing, as well as to configure your privacy, please refer to the following links:

https://www.facebook.com/privacy/explanation.

Facebook Conversion Tracking Pixel

For the optimization of advertising campaigns for ads published on Facebook, and for statistical purposes, the conversion tracking pixel of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, is used, which tracks user actions after clicking on an ad.

The data obtained through this pixel is anonymous and does not refer to identified natural persons, nor is it stored or used to create profiles with your personal data.

This data may be stored and processed by Facebook, and Facebook may link this data to your Facebook account and also use it for its own advertising purposes in accordance with Facebook’s data use policy, which you can find at https://www.facebook.com/about/privacy/, recently updated at https://www.facebook.com/about/privacy/update.

You can enable Facebook and its partners to place advertisements within and outside of Facebook, and for these purposes, a cookie may be stored on your computer.

TWITTER ADS

cartoncars.com uses Twitter Ads, Twitter’s advertising platform, which allows us to create campaigns and ads. When generating an ad, the audience can be segmented by:

• Location
• Demographics (age, gender, etc.)
• Interests (activities, hobbies, etc.)
• What they buy online and through other channels

The data obtained through Twitter Ads is subject to this privacy policy from the moment the user leaves their data in the form on this website to join the subscription newsletter. Under no circumstances will information from Twitter be used for a different purpose.

LINKEDIN ADS

cartoncars.com uses LinkedIn Ads, LinkedIn’s advertising platform, which allows us to create campaigns and ads. When generating an ad, the audience can be segmented by:

• Location
• Demographics (age, gender, etc.)
• Interests (activities, hobbies, etc.)
• What they buy online and through other channels

The data obtained through LinkedIn Ads is subject to this privacy policy from the moment the user leaves their data in the form on this website to join the subscription newsletter. Under no circumstances will information from LinkedIn be used for a different purpose.

NOTIFICATION AND DECLARATION OF BREACHES

Security notification and declaration of breaches

CARTON CARS S.L. implements security measures appropriate to the risk level to protect personal information against loss, misuse, and unauthorized access, disclosure, alteration, and destruction, taking into account the risks involved in processing and the nature of personal information; however, if CARTON CARS S.L. determines that your service data has been misappropriated (including by an employee of CARTON CARS S.L.), exposed by a security breach, or improperly acquired by a third party, CARTON CARS S.L. will immediately inform you of such security breach, misappropriation, or improper acquisition.

TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?

Many tools used on this website to manage data are contracted by third parties. To provide services strictly necessary for the development of its activity, CARTON CARS S.L. shares data with the following providers under their corresponding privacy conditions:

External service providers (e.g., payment processing services, order processing, analytics, marketing campaign management, website management, and email distribution and other similar service providers) so that they can perform commercial functions on behalf of CARTON CARS S.L..

The web development and maintenance company, or the hosting company, may occasionally have access to this website. They have signed a service provision contract that obliges them to maintain the same level of privacy applied to the processing carried out on this website.

Any international data transfer resulting from the use of tools or service providers will adhere to the PrivacyShield agreement, which guarantees that American software companies comply with European data protection policies regarding privacy, secrecy, and data security.

Specifically, this website uses the following tools:

• Email marketing tool:
• Billing tool:
• Analytics tools
• Online chat tool
• Others: {describe tools} (optional)

SEGMENTATION AND PROFILING

The registration of personal data provided at the time of subscription, contact, interaction with the website, and any other data provided during navigation, including information supplied by cookies regarding browsing habits, will be used for segmentation or categorization purposes to apply them to activities related to (general administration management, information, marketing of advertising spaces, analysis of proposals requested by users/clients, statistical study of services and content used, tastes and preferences, and surveys or forms).

Profiling, through the analysis of your automated individual decisions, consists of using your Personal Data to evaluate certain personal aspects, such as (the analysis and prediction of your economic situation, personal preferences, interests, behavior, location, movements, and attitudes). The logic applied to obtain these profiles is the use of statistical procedures, and the consequences of this data processing through profiling are the sending of personalized communications of interest to you with content related to the activity carried out by CARTON CARS .

The legal basis for processing your data for the indicated purposes and for making automated individual decisions by profiling is the consent given by checking the box indicated above.

The data we use in profiling and display to advertisers are not data that allow users to be identified; only the type of audience we have, their age, country, gender, etc., are shown in a graph.

AFFILIATE LINKS AND ADVERTISING

This website offers the User sponsored content, advertisements, and/or affiliate links.

Among the links you may find, there is the possibility of informing and referring to products and/or services and/or infoproducts from third parties. The information appearing in these affiliate links or inserted advertisements is provided by the advertisers themselves, so cartoncars.com is in no case responsible for inaccuracies or errors that the advertisements may contain, nor can it offer guarantees about the experience, integrity, or responsibility of the advertisers, or the quality of their products and/or services, although products or services that cartoncars.com and its team have tested will always be recommended.

Furthermore, advertisements will remain published on the portal until they are removed or suspended by the advertiser or by cartoncars.com, who is logically not responsible for advertisements continuing to be indexed in search engines external to this portal once they have been removed from its databases.

Every user must understand that any contractual or non-contractual relationship between the User and the advertisers, affiliates, or third parties contacted through this website is understood to be made solely and exclusively between the user and the advertiser and/or third party. cartoncars.com acts solely as a channel or advertising medium and, therefore, has no responsibility for damages or losses of any nature caused by reason of its negotiations, conversations, and/or contractual or non-contractual relationships with advertisers or third-party individuals or legal entities contacted through this website.

DATA SECRECY AND SECURITY

cartoncars.com undertakes to use and process the user’s personal data, respecting their confidentiality, in accordance with their purpose; as well as to comply with its obligation to store them and adopt all measures to prevent alteration, loss, processing, or unauthorized access, in accordance with the provisions of current data protection regulations.

(This website includes an SSL certificate. This is a security protocol that ensures your data travels completely and securely; that is, the transmission of data between a server and the web user, and in feedback, is fully encrypted.)

{DOMINIO WEB} cannot guarantee the absolute impregnability of the Internet network, nor, therefore, the violation of data through fraudulent access to them by third parties.

Regarding the confidentiality of processing, CARTON CARS S.L. will ensure that any person authorized by CARTON CARS S.L. to process customer data (including its staff, collaborators, and providers) will be under the appropriate obligation of confidentiality (whether a contractual or legal duty).

Should a security incident occur, upon becoming aware of it, CARTON CARS S.L. must notify the Client without undue delay and must provide timely information related to the Security Incident as it becomes known, or as reasonably requested by the client.

ACCURACY AND VERACITY OF DATA

As a user, you are solely responsible for the veracity and correctness of the data you send to cartoncars.com, exempting CARTON CARS S.L. (CARTON CARS ) from any responsibility in this regard. Users guarantee and are responsible, in any case, for the accuracy, validity, and authenticity of the personal data provided, and undertake to keep them duly updated. The user agrees to provide complete and correct information in the contact or subscription form.

REVOCABILITY

The consent given, both for the processing and for the transfer of data of interested parties, is revocable at any time by communicating it to CARTON CARS S.L. (CARTON CARS ) under the terms established in this Policy for the exercise of ARCO rights. This revocation will in no case have retroactive effect.

CHANGES TO THE PRIVACY POLICY

CARTON CARS S.L. reserves the right to modify this policy to adapt it to legislative or jurisprudicial developments, as well as industry practices. In such cases, it will announce the changes introduced on this page with reasonable anticipation of their implementation.