This Privacy Policy aims to inform users about the collection and processing of personal data obtained through the mobility-assistance.com website and the Mobility Assistance mobile application (hereinafter, the “Website”). MOBILITY ASSISTANCE SL complies with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), ensuring at all times that users’ personal data are used and processed appropriately.

WHAT DATA DO WE COLLECT THROUGH THE WEBSITE?

You may visit and use the Website’s services without identifying yourself or disclosing any personal information about yourself. We may process your IP address, the operating system or browser you use, and even the duration of your visit anonymously. The only personal data to which MOBILITY ASSISTANCE SL will have access are those voluntarily provided by users when contacting MOBILITY ASSISTANCE SL by email or through any other means available on the website. Specifically, MOBILITY ASSISTANCE SL will record the following information:
  • Data provided through the contact form by users interested in obtaining information about our services or making any type of enquiry or request to MOBILITY ASSISTANCE SL
  • Data provided by sending emails to the addresses listed on the website

WHAT DATA DO WE COLLECT THROUGH THE MOBILE APPLICATION?

The Mobility Assistance application (hereinafter, the “App”), available on Google Play, is owned by Mobility Assistance Technologies, S.L., with tax identification number (NIF) B88548250 and registered address at C/ Castrobarto 10, 4th Floor, Office 27, Barajas, 28042 Madrid. This Privacy Policy also applies to the App. Location data. The App requests access to the device’s location, both precise (GPS) and approximate, only with the user’s express permission granted through the Android system itself. We use location data to:
  • Locate the vehicle requiring assistance and assign the nearest towing service.
  • Display the assistance vehicle’s position on the map and calculate routes and estimated arrival times.
  • Record the route and service times for tracking, billing and incident management.
Background location. The App collects location data even when it is closed or not in use, exclusively while the user has an active service or is on duty, to enable real-time service tracking. A persistent notification is displayed on the device while location data are being collected in the background. Who are the data shared with? Location data are shared only with coordination staff and the operators providing the service, and with our technology provider Google Maps (Google Ireland Limited / Google LLC), which acts as a data processor for map display, geolocation and route calculation. We do not sell location data or use them for advertising purposes. Legal basis. The user’s consent when granting location permission and the performance of the contract for the provision of the assistance service (Articles 6(1)(a) and 6(1)(b) GDPR). Retention. Location data associated with a service are retained for as long as necessary to manage the service and, subsequently, for the legally prescribed periods to address potential claims or legal obligations, after which they are deleted or anonymised. Withdrawal of permission and deletion of data. Users may withdraw location permission at any time through Settings > Apps > Mobility Assistance > Permissions; in that case, some App features will not be available. To request the deletion of your account and data, you may write to info@mobility-assistance.com. Security. Data are transmitted in encrypted form (HTTPS/TLS) and stored using the technical and organisational security measures required by applicable regulations.

WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?

The legal basis for processing is the consent given by users through their acceptance of this Privacy Policy and the corresponding checkboxes. This means that you have been informed and have expressly consented to the content of the clause attached to the relevant form or to the acceptance of the privacy policy.

FOR WHAT PURPOSES WILL WE PROCESS YOUR PERSONAL DATA?

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), we inform you that the personal data you voluntarily provide through the various input forms made available for this purpose on the Website or through any other data collection channel will be included in the processing records for which MOBILITY ASSISTANCE SL is responsible, to manage the data  collected for the following purposes:
  • Addressing any enquiry, application or request submitted
  • Managing the requested service, responding to your application or processing your request
  • Managing, administering and processing forms and registrations, and providing the requested services
  • Maintaining and managing the contractual relationship
  • Sending informational communications that the company considers may be of interest to you, through any contact method voluntarily provided, concerning products and/or services similar to those requested. In such cases, the data may be used only for the purposes and uses strictly necessary for which the services were requested, and may not be used for any other purpose. You will be duly informed of any disclosure other than those specified above and may exercise your right to object at any time.
  • Carrying out analyses and making improvements to the website relating to new services
  • Unsubscribing from our services
  • Managing the Ethics Channel and Whistleblowing Channel
  • Managing the Job Opportunities section to assess and manage your potential participation in current or future recruitment processes
  • Managing the Intranet
  • Any other purpose referred to in the forms and features offered through the Portal at any given time

TO WHICH RECIPIENTS WILL YOUR DATA BE DISCLOSED?

The data collected are adequate, relevant and not excessive in relation to the scope and purposes described. Your data will be processed and stored in compliance with the security measures set out in applicable regulations, ensuring their integrity and confidentiality at all times. Your data will not be disclosed to third parties, except where legally required, nor will they be shared with companies or entities outside MOBILITY ASSISTANCE SL. You are informed of the following possible disclosures of your data:
  • to public and private bodies where necessary to comply with legal obligations under applicable regulations
  • to professionals and companies providing legal advice, consultancy and/or auditing services
  • to data processors necessary for the performance of the corresponding service provision contract
  • to companies responsible for our website support and maintenance
  • to companies responsible for our IT system support and maintenance
  • to companies responsible for our management software support and maintenance
  • to companies responsible for our server and cloud service support and maintenance
  • if any international data transfer occurs when using applications, it will be carried out in strict compliance with, and with all the safeguards necessary to comply with, European data protection policies on privacy
  • to the entity responsible for managing the Ethics Channel and Whistleblowing Channel
  • to other companies, entities and partners for administrative and/or commercial procedures, to manage the purposes described above, to provide services and to ensure the proper management of the entity and its various activities
In such cases, the data may be used only for the purposes and uses strictly necessary to carry out the activity for which their services were requested, and may not be used for any other purpose. You will be duly informed of any disclosure other than those specified above and may exercise your right to object at any time. Consent will be deemed to remain in effect unless you expressly notify us of its withdrawal for any of the processing activities indicated above. You expressly consent to us contacting you through any contact method you have voluntarily provided. Users of the Website are solely responsible for the truthfulness and accuracy of the data provided, with MOBILITY ASSISTANCE SL acting in good faith solely as a service provider. If false data or data belonging to third parties have been provided without their consent, MOBILITY ASSISTANCE SL reserves the right to immediately destroy those data to protect the rights of the data subject or subjects, and MOBILITY ASSISTANCE SL accepts no liability for failure to comply with this requirement. MOBILITY ASSISTANCE SL undertakes to comply with its obligation to maintain the confidentiality of personal data and its duty to safeguard them, and will adopt all technical and organisational measures to ensure the security of personal data and prevent their alteration, loss, unauthorised processing or access, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed, all in accordance with applicable regulations.

DATA RELATING TO MINORS?

We do not process data relating to children under the age of 14. Therefore, please refrain from providing your data if you are under that age or, where applicable, from providing data relating to third parties who are under that age. MOBILITY ASSISTANCE SL accepts no liability for failure to comply with this provision. WHAT RIGHTS DO YOU HAVE?
  • To know whether or not we are processing your data
  • To access your personal data
  • To request the rectification of your data if they are inaccurate
  • To request the erasure of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw the consent you granted
  • To request the restriction of the processing of your data in certain circumstances, in which case we will retain them only in accordance with applicable regulations
  • To data portability: your data will be provided to you in a structured, commonly used or machine-readable format. If you prefer, we can send them to the new controller you designate. This applies only in certain circumstances
  • To lodge a complaint with the Spanish Data Protection Agency or the competent supervisory authority if you believe that we have not properly addressed your request
  • To withdraw consent at any time for any processing to which you have consented.
If any of your data change, please let us know so that we can keep them up to date. Users of the Website may exercise these rights at any time under the terms established in applicable regulations by contacting the data controller:
  • In writing to the entity’s address: Calle Castrobarto, 10, Barajas, 28042 Madrid
  • By email to info@mobility-assistance.com

WOULD YOU LIKE A FORM TO EXERCISE YOUR RIGHTS?

We have forms for exercising your rights; please request them by email or, if you prefer, you may use those prepared by the Spanish Data Protection Agency or third parties. These forms must be electronically signed or accompanied by a photocopy of your national identity document (DNI). If you are representing someone, you must attach a copy of their national identity document, or have them sign the form with their electronic signature.

HOW LONG DO WE TAKE TO RESPOND TO A REQUEST TO EXERCISE YOUR RIGHTS?

This depends on the right concerned, but we will respond within a maximum of one month of your request, or two months if the matter is very complex and we notify you that we need more time.

HOW LONG WILL WE RETAIN YOUR PERSONAL DATA?

  • Personal data will be retained for as long as you maintain a relationship with us
  • Once that relationship ends, the personal data processed for each purpose will be retained for the legally prescribed periods, including the period during which a judge or court may require them, taking into account the limitation period for legal actions
  • The data processed will be retained until the legal periods referred to above expire, where there is a legal obligation to retain them, or, if there is no such legal period, until the data subject requests their erasure or withdraws the consent granted
  • We will retain all information and communications relating to the provision of our service for the duration of the service warranty periods in order to address potential claims
  • Once those periods have elapsed, users’ personal data may be blocked and retained by MOBILITY ASSISTANCE SL to address potential liabilities arising from the processing, and only for the limitation period applicable to those liabilities. After that period, the personal data will be erased by MOBILITY ASSISTANCE SL
  • In the case of personal data provided through the “Work with us” section, we will retain the personal data for a maximum period of one year. We consider that, after that period, your data may be out of date, so we will delete all your information.

SECURITY, COOKIES AND IP ADDRESSES?

The Website uses information security techniques generally accepted in the industry, such as firewalls, access control procedures and cryptographic mechanisms, all with the aim of preventing unauthorised access to data. To achieve these purposes, the user agrees that the provider may obtain data for the corresponding access control authentication.

NOTIFICATION OF PERSONAL DATA BREACHES

In the event of a personal data breach, unless the breach is unlikely to result in a risk to the rights and freedoms of natural persons, MOBILITY ASSISTANCE SL will notify the Spanish Data Protection Agency within 72 hours of becoming aware of the incident, describing the nature of the breach, its possible consequences and the measures taken or proposed to address the security breach; where possible, the categories and approximate number of data subjects and data affected will also be provided. Likewise, MOBILITY ASSISTANCE SL will notify the data subjects as soon as possible when the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, describing the possible consequences and the measures taken or proposed to address the security breach.

USE OF COOKIES AND THE ACTIVITY LOG

If we use cookies other than necessary cookies, you may consult the cookie policy through the corresponding link on our website’s homepage. The provider, on its own behalf or on behalf of a third party contracted to provide measurement services, may use cookies when a user browses the Website. Cookies are files sent to the browser by a web server to record the user’s activities during their browsing session. The cookies used by the Website are associated only with an anonymous user and their computer and do not, in themselves, provide the user’s personal data. Cookies enable the server hosting the website to recognise the web browser used by the user in order to make browsing easier, allowing, for example, previously registered users to access areas, services, promotions or competitions reserved exclusively for them without having to register on each visit. They are also used to measure audience and traffic parameters and to monitor progress and the number of visits. Users may configure their browser to notify them when cookies are received and to prevent their installation on their computer. Please consult your browser’s instructions and manuals for further information. To use the Website, users do not need to allow the installation of cookies sent by the Website or by a third party acting on its behalf, although they may need to log in to each service that requires prior registration or login. The cookies used on this Website are, in all cases, temporary, with the sole purpose of making their subsequent transmission more efficient. Cookies will under no circumstances be used to collect personal information.

IP ADDRESSES

The Website’s servers may automatically detect the IP address and domain name used by the user. An IP address is a number automatically assigned to a computer when it connects to the Internet. All this information is recorded in a duly registered server activity log that allows the data to be subsequently processed solely to obtain statistical measurements, such as the number of page impressions, the number of visits to web services, the order of visits, the access point, etc.