1. How do we collect your personal data?

We collect data provided directly by customers, either when they request a service by filling in the forms provided for this purpose or from data provided by them over the course of the contractual relationship via different means, such as claims or requests for information made to the customer services department. The Customer shall be responsible for the truthfulness of this information and for and updating it When filling in a form on our website, you are obliged to fill in the fields marked with an * (asterisk). If you do not provide this data, we may be prevented from complying with certain obligations. This data will sometimes be shared with partner or third party websites. This shall always be clearly indicated. If these parties process your personal data, this shall be declared in their privacy policies.

Al rellenar un formulario en nuestro sitio web, estás obligado a cumplimentar los campos marcados con un * (asterisco). La consecuencia de no ofrecer estos datos puede ser que no cumplamos ciertas obligaciones. A veces se remite a sitios web de socios o terceros. Esto se indica claramente. El modo en el que estas partes procesan tus datos personales se detalla en sus declaraciones de privacidad.

2. Legitimation for the use of your personal data

We inform you that the processing of your data is legitimated by:

• Your consent
• The preparation or execution of a contract
• To comply with a legal obligation
• To protect your ‘vital interests’
• The need to process personal data to satisfy a task of general interest
• Due to our ‘legitimate interests’ or those of our employees.

3. Purposes and grounds for processing your personal data

Your data may be processed for the following purposes:

• Purpose 1: To provide the contractual service, the information that you provide is processed to offer you the requested service and to bill you. The data provided shall be retained for the duration of the commercial relationship or the years required to comply with legal and contractual obligations.
• Purpose 2: To send information about the fees, promotions and offers of OK MOBILITY or the remaining brands linked to the OK MOBILITY group of companies applicable to the contracted service or those which are similar.

Included in this purpose is the use of your personal data to send you communication related to the provision, improvement and updating of services, as well as advertising about promotions applicable to your service, or other services, including added-value services, which you may find interesting.

• Purpose 3: Development of commercial actions about products and services offered by other companies in the OK MOBILITY group.

If you give your consent, OK MOBILITY will be able to develop commercial actions to ensure that you are sent offers and promotions about products and services from companies in the OK Group via any channel.

• Purpose 4: Development of commercial actions about products and services offered by third party companies belonging to the leisure, culture, insurance, financial services, tourism, health or automotive industries.

If you give consent, OK MOBILITY will be able to develop commercial actions to ensure that you are sent offers and promotions from third party companies from the leisure, culture, insurance, financial services, tourism, health or automotive industries, via any channel.

• Purpose 5: Disclosing your data to companies in the OK MOBILITY group.

If you give your consent, OK MOBILITY shall disclose your data to the remaining companies in the Group for the following purposes: 1. To be able to share information and, by studying the collected information, to complete statistical studies to carry out commercial actions of great value for both parties (e.g. to identify the offices where vehicles are rented from most frequently). 2. To allow the remaining companies in the Group to contact you directly via any communication channel, to develop commercial actions about products or services.

4. Who do we disclose your data to?

Personal data processed by OK MOBILITY may be disclosed to the following recipients to comply with the aforementioned purposes:

• State, Autonomous Community and Local Public Administration, to comply with legal obligations.
• State security bodies and forces, to comply with legal obligations.
• Courts and Tribunals, to comply with legal obligations.
• The Tax Authorities, to comply with legal obligations.
• Banking entities, for financing matters to execute a contract.
• OK MOBILITY companies, if you give consent for this.

5. Data retention period

Personal data shall be retained for the duration of the contractual relationship with the customer and beyond this, until you decide to request the erasure of your data or until this is legally necessary, if you gave consent. Once the contractual relationship has come to an end, if you decide to request the erasure of your data, it shall be erased in compliance with the data protection regulations which implicates its blocking. This is only available at the request of Judges and Tribunals, the tax Authority, or competent Public Administration during the prescription period of the resulting actions.

In any case, if there are any outstanding disputes at the end of the contractual relationship deriving from challenging the invoice or attempts to recover payment, data may be retained which these disputes are being processed, while there is no definitive resolution. When a resolution is reached, the data shall be blocked and then erased, and may only then be used for probationary purposes.

6. Data protection and your rights

OK MOBILITYinforms that they shall process data in a legal, loyal, transparent, appropriate, suitable, limited, accurate and updated way. For this reason, OK MOBILITYshall adopt all reasonable measures so that data is erased or rectified without delay if it is not accurate.

In compliance with the rights established in data protection regulations in force, you may exercise the following rights:

• Right to access: Know what type of data we are processing and the characteristics of the processing that we are carrying out.
• Right to rectification: You may request the modification of your data if it is inaccurate or not correct.
• Right to portability: To obtain a copy of your data which is being processed in an interoperable format.
• Right to limitation of data processing in cases contemplated by Law.
• Right to erasure: Request the erasure of your data when processing is no longer necessary.
• Right to opposition: Request that commercial communication is no longer sent and that direct marketing profiles are no longer made, in the aforementioned terms.
• Right to withdraw previously granted consent. The request shall be processed within approximately 20 days.

You may exercise your rights by writing to: OTHMAN KTIRI GROUP SL, at the following company address: rgpd@okgroup.es indicating the right that you wish to exercise and enclosing the required documentation.

On the Spanish Data Protection Agency website, you will find a series of templates which shall help you to exercise your rights.

To consult all Data Protection information related to OK MOBILITY and the companies belonging to this society, refer to: ventas@okcars.com

Social Media Privacy Policy

In compliance with General Data Protection Regulations in force (GDPR) and Law 34/2002, of the 11 July of Information Society Services and Electronic Commerce (LISS-EC), OK MOBILITY informs users that they have created a profile on social networks Twitter and LinkedIn, to advertise their products and services.

OTHMAN KTIRI GROUP SL (OK GROUP) data:

• Tax identification number: B57653321
• ADDRESS: AVDA GRAN VÍA ASIMA, 36-A, 07009 Palma, Majorca, Spain.
• EMAIL: rgpd@okgroup.es.
• WEB DOMAIN: www.okmobilitygroup.com

The user has a profile on the same social network and has decided to follow the page created by OK MOBILITY, therefore showing interest in the information published on the network. By following our page, you give us consent to process the personal data published on your profile.

The user may access the Social Network’s privacy policies at any time, and configure their profile to guarantee privacy.

OK MOBILITY has access to, and processes, some of the user’s public information, particularly their contact name. This data is only used within the social network itself and not incorporated into any file.

Regarding your rights to access, rectification, erasure and opposition, which you may exercise by contacting OK MOBILITY, in compliance with the GDPR, the following must be considered:

• Right to Access: The right that the user has to obtain information about the specific nature of the personal data being processed and the processing that has been carried out on it, or that will be carried out on it, as well as the information available about the source of this data and any planned or completed disclosure of it.
• Right to Rectification: The data subject may modify any data that is inaccurate or incomplete. This is only applicable to the information that OK MOBILITY has control over, for example, deleting comments published on the page, images or web content containing the user’s personal data.
• Right to limitation of data processing: The right to limit the purposes for which data may be processed to the original purpose established by the controller.
• Right to Erasure: The right to erase the user’s personal data, with the exception of certain cases established in the GDPR or other applicable regulations which stipulate that data must be retained in time and form.
• Right to portability: The right to receive personal data that the user has provided in a structured format which is commonly-used and machine-readable, and to transfer it to another processor.
• Right to opposition: The right the user has to oppose to the processing of their personal data or to insist that OK MOBILITY ceases any data processing which has already begun.

OK MOBILITY shall complete the following actions:

• Access the public information from a user’s profile.
• Publish any information already published on OK MOBILITY’s page.
• Send personal and individual messages via social media channels.
• Update the status of the page which will be published on the user’s profile.

The user can always control their connections, delete content which they are no longer interested in, and restrict which they share connections with. They must access their privacy settings to do this.

Publications

Once they have followed OK MOBILITY’s page, the user will be able to publish comments, links, images or photographs and any type of multimedia content accepted by the Social Network on it. In all cases, the user must be the owner of this content, have copyright and intellectual property rights over it or have consent from the third party data subjects to publish it. Publishing any text, graphics, photographs, videos etc, on the page which threaten or have the potential to threaten the morale, ethics, good taste or decorum and/or which breach, violate or disrupt intellectual or industrial property rights, image rights or the Law is strictly forbidden. In these cases, OK MOBILITY reserves the right to remove the content immediately and may request that the user is permanently blocked.

OK MOBILITY shall not be liable for the content that a user has freely published.

The user must be aware that their publications shall be seen by other users, and that they are responsible for their privacy.

Competitions and promotions

OK MOBILITY reserves the right to run competitions and promotions, which users who follow the page may participate it. The conditions for each of these competitions and promotions shall be published on the social network when they are announced on them. These shall always comply with the LISS-EC and any other applicable regulations.

The Social Network does not sponsor, endorse or manage any of our promotions, and is not associated with any of them.

Advertising

OK MOBILITY shall use the social network to advertise their products and services. In any case, if they decide to process your contact data to carry out direct sales prospecting actions, this shall always be done in compliance with the legal requirements established in the GDPR and the LISS-EC.

Recommending the OK MOBILITY page to other users so that they may also take advantage of promotions or be informed of their activity shall not be considered as publicity.

The link to the Social Network’s privacy policy is provided below:

Twitter: https://twitter.com/privacy
Instagram: http://instagram.com/about/legal/privacy/
Facebook: https://www.facebook.com/help/323540651073243/