Basic information on data protection

Data controllers

Depending on which ITV Station the vehicle undergoes the inspection at, the data controller will be:

APPLUS ITEUVE TECHNOLOGY, S.L.U. (Applus Iteuve).
Registered office: Parque Empresarial Las Mercedes, Calle Campezo Nº1, Edificio 3, 28022 Madrid.
Tax ID (C.I.F.): B.-81.041.444.

APPLUS ITEUVE EUSKADI, S.A. (Applus Euskadi).
Registered office: Polg. Ugaldeguren I, Parc. 8. 48170 Zamudio (Biscay).
Tax ID (C.I.F.): A48551915

Iteuve Canarias, S.L.U. (Iteuve Canarias)

Registered office: Camino de San Lázaro 166, Los Rodeos 38206, San Cristóbal de La Laguna, Santa Cruz de Tenerife.

Tax ID (C.I.F.) B-76.168.590 

Hereinafter, all of them jointly “Applus+”

More information

Purposes

(a) Management of the appointment booking service for the roadworthiness testing of vehicles, as well as management of the online payment of the service and, where applicable, the sending of appointment confirmation notices / reminders by email and/or SMS, MMS messages or instant messaging services (e.g. WhatsApp) or other equivalent electronic means, confirmation notices of direct access to the inspection line, information and instructions for access, as well as, where applicable, the sending of the invoice in electronic format by email.

(b) Management of the provision to customers of the roadworthiness testing service, as well as management of the documentation required by the regulations in relation to said inspections and the accounting, tax and administrative management of the service itself.

(c) Management of the provision of ITV training courses.

(d) Cooperating with regulatory authorities and Law Enforcement Agencies where necessary to comply with the applicable legal obligations, as set out in Section 4 of this Privacy Policy.

(e) Adequate management, handling and follow-up of suggestions, queries and/or complaints about the vehicle roadworthiness testing services by means of telephone calls, postal mail or the sending of messages by email, SMS, MMS or instant messaging services (e.g. WhatsApp) or other equivalent electronic means.

(f) Management of the level of satisfaction with the service offered by means of surveys sent by email.,

(g) Management of reminder notices for the next inspection and for inspection expiry, by means of telephone calls, postal mail or the sending of messages by email, SMS, MMS or instant messaging services (e.g. WhatsApp) or other equivalent electronic means.

(h) Periodic communication of Road Safety Tips, ITV Promotions and discounts and/or commercial communications about our own products and services by email, SMS, MMS or instant messaging services (e.g. WhatsApp) or other equivalent electronic means.

(i) Participation in prize draws and promotions that you enter;

Legal bases

(a) Performance of a contract to which the data subject is party.

(b) Compliance with the legal obligations in force to which Applus+ is subject.

(c) Legitimate interest.

(d) Consent.

Personal Data

Identification details: name and surname, signature, and, if you request an invoice or enrol on ITV training courses, tax identification number (N.I.F.).

• Contact details: Address, Town, Postcode, Autonomous Community, email, contact telephone number and province.
• Data for payment of the service: debit or credit card, bank accounts (in the case of deferred invoicing).
• Other: vehicle registration number, chassis number, copy of the official qualification (only for ITV training courses).

In the case of corporate customers: name and surname, telephone number and contact details of the representative or contact person at the company.

Recipients

Applus group companies and other service providers

Law enforcement agencies, judges and courts, regulatory bodies, government authorities or other competent third parties.

International transfers

Your Personal Data may be transferred to, stored and processed in countries that do not provide an adequate level of protection of personal data under European Union law. We have implemented appropriate safeguards (in particular, contractual commitments) in order to ensure that your data are adequately protected,

More information

Rights

Among others, the rights of access, rectification and erasure of personal data, the right to object to the processing of personal data and to withdraw your consent.

These rights may be exercised by writing an email to rgpd.automotive@applus.com

More information

Extended information

We recommend that you read this information carefully.

1. ¿What Personal Data do we collect?

1.1   Personal Data that You provide to us directly

1.2. Other Personal Data that we process about You

1.3  Personal Data that we collect from other sources

1.4  Personal Data that you provide to us about third parties.

2. How and on what bases do we process your Personal Data?
3. ¿What rights do you have over your Personal Data?
4. How and with whom do we share your Personal Data?
5. How do we protect your Personal Data?
6. How long do we keep your Personal Data?
7. International data transfers
8. Contact Us
9. Changes to this Privacy Policy

This Privacy Policy describes the way in which Applus Iteuve, Applus Euskadi or Iteuve Canarias, as applicable (depending on the ITV station where the vehicle undergoes the inspection), or Applus Iteuve alone, in relation to the provision of ITV training courses, hereinafter all of them jointly referred to as “Applus+”,  collects and processes your Personal Data, as well as the way in which we respectively use and protect that information, in addition to the rights that You have in relation to it.

Applus+ will respectively collect and process the personal data in its capacity as Data Controller. You may contact Applus+ (“We”) through the channels made available and indicated in section 8  of this Policy.

This Privacy Policy applies to all personal data that we collect about You in relation to the management of the vehicle roadworthiness testing service, the  provision of ITV training courses, as well as the use of our website.

"Personal Data" means any information relating to an identified or identifiable natural person (“the data subject”); an identifiable natural person is one whose identity can be determined, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, an online identifier or one or more factors specific to the physical, cultural or social identity of that person.

1. What Personal Data do we collect?

We collect your Personal Data through various sources, including the information that You provide to us directly  when contacting Us via the contact form,  the appointment booking service available on our website and/or the completion and submission of the forms requesting information or enrolment on ITV training courses, on the terms described below:

Please note that we must collect certain personal data by legal requirement, or as a consequence of the contractual relationship that we have entered into with You. Refusal to provide such information may prevent or delay compliance with such obligations. When collecting your personal data we will inform you as to whether the provision of such data is mandatory, as well as about the consequences of not doing so.

1.1 Personal Data that You provide to us directly

The categories of Personal Data that we will collect directly from You include:

• Identification details: First name(s) and Surname(s); signature, tax identification number (N.I.F.) (for the issuing of invoices or if you enrol on ITV training courses).
• Contact details: Address, Town, Postcode, Autonomous Community, telephone number; email and province.
• Data for payment of the service: debit or credit card number;  bank account number (in the case of deferred invoicing).
• Other data such as: vehicle registration number; vehicle chassis number; copy of the official qualification (only for training courses).
• In the case of corporate customers: name and surname; email; address and telephone number of the representatives or contact persons.
• Information that we collect automatically through cookies or other device identification technologies. You can find additional information about the use of Cookies and Identification Technologies in the Cookie Policy;

1.2. Other Personal Data that we process about You

• We process data relating to the history of courses that you have taken with us;

(b)        Through the use of the e-learning platform (www.applusnet.com), we process information about the results of the assessments of the courses you take, as well as the connections you have made

1.3  Personal Data that we collect from other sources:  

We collect Personal Data about You through the Directorate-General for Traffic: name and surname, national ID number (D.N.I.), chassis number, vehicle registration number,  and information about the existence of compulsory insurance.

If you have failed an inspection with an entity other than Applus+ and wish to take the second inspection at one of our stations, we will collect the data of your file from the other company in order to be able to provide you with the service.

If you request a duplicate of the roadworthiness test card from us due to loss or any other cause, we will request the information contained in that card from the provincial traffic authority or the town council of the place where the vehicle is registered. 

1.4. Personal data that you provide to us about third parties

When you provide Applus+ with personal data, such as contact information and/or vehicle registration number or any other data relating to third parties, you will be directly responsible for informing those persons about their rights and for obtaining their explicit consent, where necessary, with regard to the processing (including disclosures) of their personal data, as deemed necessary and in accordance with the relevant local data protection legislation, as set out in this policy. 

We use and process the Personal Data that we collect about You for the purposes and on the legal bases set out below:

(a)   We will process your personal data in order to fulfil our contractual relationship with you and thereby be able to carry out:

(i)         The management of the appointment booking service for the roadworthiness testing of vehicles, including the management of appointment confirmation/reminder notices by email and/or SMS, MMS messages or instant messaging services (e.g. WhatsApp) or other equivalent electronic means.

(ii)        The management of the online payment of the service, including the sending of confirmation notices of direct access to the inspection line, information and instructions for access by SMS, MMS messages or instant messaging services (e.g. WhatsApp) or other equivalent electronic means and the sending of the invoice in electronic format by email.

(iii)       The management of the provision to customers of the roadworthiness testing service, as well as the management of the documentation required by the regulations in relation to said inspections, and the accounting, tax and administrative management of the service itself.

(iv)       The management of the provision of ITV training courses.

(b)       We will also process your Personal Data in order to ensure an optimal level of compliance with the legal obligations in force to which Applus+ is subject, as well as to cooperate with regulatory authorities and law enforcement agencies where necessary, as set out in Section 4 of this Privacy Policy:

• To disclose your personal data, as well as other supplementary information, in response to requests issued by the competent authorities and/or entities, as provided for in the applicable legislation or by law enforcement officers in the exercise of their duties.

Compliance with the aforementioned legal obligations to which Applus+, as applicable,  is subject, is required in order to meet those required for the provision of the vehicle roadworthiness testing service, such as, among others, Royal Decree 920/2017 of 23 October, regulating the roadworthiness testing of vehicles, as well as other concordant rules and any others applicable to Applus+;

(c)    We will process your personal data on the basis of our legitimate interest for the following purposes:

• To manage and improve the provision of the inspection service in the future, by issuing reminder notices for the next inspection and for inspection expiry by means of  telephone calls, postal mail or the sending of SMS, MMS messages or instant messaging services (e.g. WhatsApp) or other equivalent electronic means,
• To administer our website;
• To resolve your suggestions, queries or complaints;
• To protect the security and/or integrity of our website and IT infrastructure;
• To send surveys by email, for quality control purposes.
• To understand how you use our services, thereby enabling us to improve and continue developing the functionalities, performance and support available on our website, which may involve the provision of anonymous statistical information about our visitors (without such information being usable to identify a specific user);
• As mentioned in Section 4 of this Privacy Policy, among others, for communications to any of our employees, agents, business partners, or other companies of the Applus Group, which process the Personal Data for the purposes described in this Privacy Policy;
• In order to allow third-party service providers and suppliers contracted by Us to access the personal data so as to be able to provide us with the services necessary to fulfil the purposes described in this Privacy Policy;
• For any disclosure to third parties, as necessary as part of due diligence processes in the context of corporate restructuring operations to which we are party, in line with the provisions of Section 4 (d) of this Privacy Policy;
• In order to be able to personalise our services;
• To follow up on the training activities on which you are enrolled and to be able to resolve your queries and requests;

Where Applus+, as applicable, processes the Personal Data on the basis of its legitimate interests, it will carry out a balancing test in order to ensure that our legitimate interest is not overridden by your interests or your fundamental rights and freedoms.

(d)       We will process your Personal Data for the following purposes, provided that you have given your prior consent:

• Participation in prize draws and promotions that you enter;
• To send you Road Safety Tips, ITV Promotions and discounts  and/or  commercial communications about our own products and services offered by Applus+ ;
• For any other purpose of which you are informed at the time you provide us with your personal data, provided that you have given us your prior consent for each particular processing operation.

If we request your consent to process your Personal Data, you may withdraw that consent at any time by contacting us by sending an email to: rgpd.automotive@applus.com

3. What rights do you have over your Personal Data?

You have certain rights in relation to your Personal Data, without prejudice to the provisions of local legislation. Those rights include:

• Knowing how we are processing your Personal Data and accessing the Personal Data that Applus+ or other companies in its group  hold about You, as applicable;
• Requesting the rectification of inaccurate or incomplete Personal Data;
• Requesting the erasure of your Personal Data when it is no longer necessary for the purposes for which it was collected, in accordance with the applicable legislation;
• Restricting the processing of your Personal Data, in certain circumstances (in which case we will only process the Personal Data for the exercise and/or defence of the rights of Applus+, as applicable);
• Objecting to the processing of your Personal Data, taking into account certain circumstances and on grounds relating to your particular situation (in which case we will only process the Personal Data for compelling legitimate reasons or for the exercise and/or defence of the rights of Applus+ , as applicable );

This includes your right to object, at any time, on grounds relating to your particular situation, to our processing your Personal Data on the basis of our legitimate interests or those of a third party, in which case we will stop processing your Personal Data unless we can rely on legitimate grounds for doing so.

• Exercising your right to data portability, which will allow you to receive and reuse the Personal Data in a usable electronic format for your own purposes and for different services without hindrance to its use, including its transmission to a third party.
• Withdrawing, at any time, the consent you have given in relation to a particular processing operation.

We recommend that you contact us to update or correct your personal information as soon as it changes, or if the Personal Data we hold about You is inaccurate.

Applus+, as applicable, undertakes to protect your Personal Data as set out in this Privacy Policy, and under the applicable legislation. If you would like to make an enquiry or wish to request additional information about how to exercise your rights, please do not hesitate to contact us at the following email address: rgpdautomotive@applus.com

Applus+  will share your Personal Data with third parties in the following circumstances:

(a) Service providers and business partners: We will allow our service providers and business partners, who provide us with services including customer care (for example, for the use of a call centre, sending SMS messages or emails), administration (e.g. Invoice management), banking (e.g. making available a payment gateway for collecting payment for services by debit or credit card), IT (e.g. database or software management), auditing and the provision of services related to  accreditations, as well as tax, insurance or legal services, to access your Personal Data.

(b) Applus+ group entities. Applus+  may share your personal data relating to the invoicing of the service we have provided to you, as well as in relation to the training provided, with other companies belonging to the Applus+ Group for economic, tax, administrative, human resources, reporting and internal investigation management purposes, as well as for the provision of means and support for the delivery of the training service. You can consult a list of Group Applus+ entities at: www.applus.com/appluscompanies.     

(c) Law enforcement agencies, judges and courts, regulatory bodies, government authorities or other competent third parties. We may share your Personal Data with these third parties where necessary to comply with a legal or regulatory obligation, or otherwise to protect our own rights as well as the rights of third parties.

(d) Purchasers of assets and merger. We will share your Personal Data with any third party that purchases, or to which we transfer, all or substantially all of our assets and business, or with those with which we carry out a merger, consolidation, integration or similar restructuring. In the event of such a sale or transfer, we will use all reasonable efforts to ensure that the entity to which we transfer your Personal Data processes it in a manner consistent with this Privacy Policy.

Since we operate as part of a global business, the recipients mentioned above may be located outside your jurisdiction (or the one where we provide the services), including third countries outside the European Union ("EU") which are considered not to provide an adequate level of protection of Personal Data. Please refer to the "International Data Transfers" section for further information.

5. How do we protect your Personal Data?

We implement technical and organisational measures to ensure a level of security appropriate to the risk to the Personal Data processed. Those measures are intended to ensure the ongoing integrity and confidentiality of the Personal Data. We assess these measures periodically in order to ensure the security of the processing.

6. How long do we keep your Personal Data?

In relation to the management of the ITV service we will keep your Personal Data for as long as we maintain a relationship with You and for a period of five (5) years thereafter. We will only  keep your Personal Data once that period has elapsed if we are required to do so in compliance with the law, or in the event that there are pending claims or complaints that reasonably require the retention of your Personal Data.

In relation to the management of ITV training courses, for the time during which the   training is provided, and once that service has concluded, for a period that allows us to:

• Maintain business records for analysis and/or audit purposes;
• Comply with the retention requirements established in the applicable regulations;
• Defend or bring any legal claim, whether existing or potential;
• Process any complaint relating to the services;

In the event that the purpose of the processing is participation in prize draws or similar promotions, the retention period will be limited to the time between your entry into the specific prize draw and/or promotion and one (1) year after it has been held and concluded.

Your Personal Data may be transferred to, stored and processed in countries such as, for example, the Philippines or the United States that do not provide an adequate level of protection of personal data under European Union law.

We have implemented appropriate safeguards (in particular, contractual commitments) in accordance with the applicable legal requirements, in order to ensure that your data are adequately protected, on the basis of the standard contractual clauses approved by the European Commission, which you may consult at:

• Standard contractual clauses for the transfer of personal data from the Community to third countries (controller-to-controller transfers): Decision 2004/915/EC.
• Standard contractual clauses for the transfer of personal data to processors established in third countries: Decision 2010/81/EU.

For further information about such appropriate safeguards, please contact us as indicated in section 8  of this Policy.

8. Contact us

Applus+, as applicable, is the data controller in relation to the Personal Data that we collect and process.

If you have any questions or concerns about the processing of your Personal Data, please contact us at: rgpd.automotive@applus.com

We are committed to working with You to obtain a fair resolution with regard to any complaint or concern relating to privacy. However, if you consider that we have not been able to help you with your complaint or concern, you will have the right to lodge a complaint with the Spanish Data Protection Agency through its website www.agpd.es.

9. Changes to this Privacy Policy

You have the right to request a copy of this Privacy Policy using the contact details indicated above. This Privacy Policy is subject to change, as deemed necessary from time to time.

In the event that we modify this Privacy Policy, we will notify you of the changes in those cases in which the changes to the Privacy Policy have a fundamental impact on the nature of the processing, or otherwise have a substantial impact on You; we will notify you sufficiently in advance so that you have the opportunity to exercise your rights (for example, among others, to object to the processing).

Furthermore, and to the extent that Applus+ relies on consent to carry out any of its processing activities, we will ensure that we request your consent where the aforementioned changes may have a substantial impact on the processing in question, before such changes take effect.

21 APRIL 2020

1st updated Version of this Privacy Policy dated 25/5/2018.