Data protection policy
showroom.casalamar.com
GRUPO DRIVEN data protection policy for https://showroom.casalamar.com/.
1. Who is responsible for processing your data?
The controllers of data processing relating to users, customers, prospective customers, collaborators and suppliers are the following companies belonging to GRUPO DRIVEN:
- DRIVEN PROPERTIES, S.L., tax identification number B16377277, registered office at Calle Almirante 25, 28004 Madrid. Madrid Commercial Registry: entry 1/2024/74564,0, sheet M-822840, page 43, volume 46882.
- LAMAR IBERIA, S.L., tax identification number B10583730, registered office at Calle Almirante 25, 28004 Madrid. Madrid Commercial Registry: bulletin 141, reference 327590, volume 1, page 1, section 8, sheet 768219, entry 7.
For data protection enquiries, telephone 607033523 or email protecciondedatos@drivenproperties.es (DRIVEN PROPERTIES, S.L.) and protecciondatos@ld.ae (LAMAR IBERIA, S.L.).
2. What data do we hold and how do we obtain it?
- Identification details
- Postal or email addresses
- Commercial information
- Financial and transaction data
Specific processing may also include anti-money-laundering and counter-terrorist-financing documentation and whistleblowing reports. Processing is based on prior consent, which may be withdrawn at any time, unless legislation or the controller's legitimate interests permit processing without consent.
Data is obtained directly from you through commercial offers, contractual proposals or similar communications, or from your company when it provides information needed for the contractual relationship. You or your company must notify us of changes. Job applicants' information comes from submitted CVs or recruitment portals where applicants have authorised disclosure to us.
3. How long do we retain your data?
Data collected through contact and information forms about prospective customers, customers and suppliers is retained until the individual requests erasure. Customer and supplier data is retained while the commercial relationship continues and for the minimum statutory retention periods applicable to the subject matter.
GRUPO DRIVEN may retain data for a reasonable period to respond to questions, resolve problems, make improvements, introduce services and comply with legislation, including after you stop using our products or this website. After that period, data will be deleted from all GRUPO DRIVEN systems.
4. Purposes and legal bases
We process information to manage activities relating to sales, after-sales service, suppliers, recruitment and service quality. The purposes and corresponding legal bases are:
| Purpose | Legal basis |
|---|---|
| Receiving, analysing and resolving reports of irregularities or breaches within the company | Performance of a task in the public interest or exercise of public authority |
| Compliance with anti-money-laundering and counter-terrorist-financing legislation | Regulatory obligation |
| Responding to data protection requests | Regulatory obligation |
| Managing information requests and referring incidents to the appropriate department | Consent |
| Customer accounting, tax, administration, billing, transfers and direct debits | Performance of a contract or pre-contractual measures; regulatory obligation |
| Marketing through physical media to attract new customers | Consent |
| Supplier tax, accounting, administration, payments, transfers, direct debits and billing | Performance of a contract or pre-contractual measures; regulatory obligation |
| Searching for, evaluating and selecting applicants, including unsolicited applications | Performance of a contract or pre-contractual measures |
| Product administration and commercial management | Performance of a contract or pre-contractual measures; regulatory obligation |
| Exercising the right to effective judicial protection | Controller's legitimate interests; performance of a contract or pre-contractual measures |
| Legal, employment, tax and administrative advice | Consent; performance of a contract or pre-contractual measures; regulatory obligation |
| Managing information requests through website forms or social media | Consent |
| Customer complaints service | Consent; performance of a contract or pre-contractual measures |
| Advertising and marketing for customer loyalty | Controller's legitimate interests |
| Customer acquisition campaigns | Consent |
| Managing customer preferences in the website's private area | Performance of a contract or pre-contractual measures |
Where data is required under these legal bases, failure to provide it may prevent performance of your contract or compliance with legal obligations or obligations arising from public powers.
5. Who may receive your data?
GRUPO DRIVEN will not share your personal data with third-party companies for their direct marketing unless you have expressly authorised it. Data may be provided to public bodies and competent authorities when legally required or reasonably necessary in good faith to comply with proceedings, respond to legal claims or protect the rights of GRUPO DRIVEN, customers or the public.
To meet commercial, accounting, tax and administrative needs, data may be communicated between DRIVEN PROPERTIES, S.L. and LAMAR IBERIA, S.L., and to the parent company LAMAR DEVELOPMENT, in Spain or the EU and outside the EU, including countries without an equivalent level of protection, subject to all necessary data protection safeguards.
Data may also be provided to internet service providers, website administrators, IT support and maintenance providers, logistics companies, administrative agencies and tax or accounting advisers. They must maintain the same security standards and, where necessary, be bound by legal commitments to keep data private and secure and use it only according to GRUPO DRIVEN's instructions.
6. Your rights
You may obtain confirmation of whether GRUPO DRIVEN processes your personal data, access that data and receive it in a commonly used machine-readable format where processing is electronic (portability). You may request correction of inaccurate information or erasure when data is no longer needed.
In certain circumstances you may request restriction of processing or object on grounds relating to your situation. Processing will cease unless compelling legitimate grounds, legal claims or applicable statutory exceptions apply. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
Exercise your rights in writing using the contact details in section 1. Identity documentation may be requested only when identity cannot be verified otherwise. You may complain to the Spanish Data Protection Agency, particularly if your rights request has not been satisfied: C/ Jorge Juan, 6, 28001 Madrid; telephone 901100099 / 912663517.
7. Website users' data
Under Regulation (EU) 2016/679, personal data submitted through forms and associated metadata (date, submission time, IP address, etc.) is processed by GRUPO DRIVEN for the activity identified in each form, on the basis of consent. Submitting the form constitutes consent to that processing. Data will not be disclosed to third parties unless legally required or expressly authorised.
You may exercise access, rectification, erasure and other rights recognised in this policy and Regulation (EU) 2016/679 by writing to the contacts in section 1. In accordance with Law 34/2002, email advertising will not be sent without prior express authorisation. Users may oppose advertising through the corresponding consent choice.
8. Additional information
8.1 Security measures
GRUPO DRIVEN implements the security levels required by European and Spanish data protection legislation, taking account of the state of the art, implementation costs, nature, scope, context and purposes of processing, and the varying likelihood and severity of risks to individuals' rights and freedoms.
8.2 Minors' data
Under Regulation (EU) 2016/679 and Organic Law 3/2018, minors over 14 may consent to information society services such as forum registration or contact forms. GRUPO DRIVEN is responsible for checking the stated age. Processing data concerning children under 14 requires express parental or guardian consent.
8.3 Changes to this policy
GRUPO DRIVEN may modify or correct this policy for customers, suppliers and users. Please check it regularly to review changes and their effect on you.
8.4 Why accept this policy?
This policy provides accessible information about the data GRUPO DRIVEN holds, its purposes, your rights and how to exercise them. Deliberately submitting your data or starting a commercial relationship acknowledges and accepts processing as described here. Data is used only for the purposes for which you provided it or purposes permitted by national or regional legislation.
Refusing to provide requested information may hinder the contractual relationship and affect performance of the agreed services. If you have questions, contact the company using the details in section 1.
9. Applicable legislation
This policy is governed at all times by Spanish and European legislation on personal data protection and privacy.