Transcard Privacy Policy

Both the privacy of data and the confidentiality of information are important aspects for OIL ALBERA S.L. This data protection policy establishes the way in which personal data obtained from users through this website is treated and may be updated over time due to changes in legislation, case law, or the criteria set by the Spanish Data Protection Agency. For this reason, OIL ALBERA reserves the right to modify this policy to reflect any new legislation or case law in effect at the time the website is accessed.

Date last updated: 02/06/2025

1. Data Processing Controller

OIL ALBERA S.L.

Address for tax purposes: Polígono Industrial La Campa, Parcela 5, 17700 La Jonquera, Girona, Spain

Tax ID: B17537424

Email: dpd@onturtle.eu

OIL ALBERA, in its capacity as the Data Processing Controller, undertakes to protect the privacy of the users of the Transcard website and to ensure compliance with the applicable regulations on personal data protection, in particular Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

2. Purposes of Processing

Personal data collected via the Transcard website is processed for the following purposes:

• Query management: Handling requests for information, quotes, or other services made by users, whether via forms or direct contact.
• Contractual relations: Managing and executing contractual relations with clients, users, or service providers.
• Commercial communications: Dispatching commercial communications regarding in-house or related products and services.
• Improvement of the user experience: Analysing browsing behaviour on our website to improve our services, by means of cookies (see the Cookies Policy).

3. Legal Basis

The legal basis for the processing is:

• The express consent of the data subject, in cases where it is required and for the use of non-essential cookies.
• Performance of a contract, to provide the requested services.
• Legitimate interests, for the purposes of service improvement, fraud prevention, and security.

4. Data Retention

The data will be retained:

• For the duration of the contractual or commercial relationship.
• As long as the data subject does not revoke their consent, in cases where the legal basis is consent.
• For the time required by tax, commercial, and data protection legislation.

5. Data Recipients

Personal data will not be disclosed to third parties, except where required by law or where necessary for the provision of the service (e.g. technology service providers under contract for processing).

6. User Rights

You may exercise the following data protection rights:

• Right of access: The right to access your personal data to determine whether it is being processed and to obtain a copy of it.
• Right of rectification: The right to request the rectification of inaccurate data.
• Right to erasure: The right to request the deletion of your data when it is no longer necessary for the purposes for which it was collected (other reasons may also apply).
• Right to restriction: You may request to limit the processing of your data, in which case it will only be retained for the exercise or defence of claims.
• Right to object: In certain circumstances, and for reasons relating to your particular situation, you may object to the processing of your data. The company will stop processing it, unless there are compelling legitimate reasons not to do so, or where it may be necessary to exercise or defend possible claims.
• Right to portability: You have the right to receive personal data which you have provided about yourself in a structured, commonly used, and machine-readable format where (a) the processing is based on consent or a contract, and (b) the processing is carried out by automated means.
• Right to complain: You have the right to lodge a complaint with the supervisory authority (AEPD, the Spanish Data Protection Agency - www.aepd.es) if you are unsatisfied with the exercise of your rights as indicated here.

These rights may be exercised by sending an email to dpd@onturtle.eu or by post to the above address, including a copy of an identification document.

7. Security Measures

OIL ALBERA has adopted the necessary technical and organisational measures to guarantee the security and confidentiality of the personal data processed and to prevent its alteration, loss, processing, or unauthorised access.