Privacy Policy

Information about how we protect and manage your personal data.

1. Data Controller

In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation) and Organic Law 3/2018 on Personal Data Protection, we inform you that the data controller of your personal data is:

2. Personal Data We Collect

The personal data we process has been obtained directly from you through our website forms, email, or WhatsApp. This data includes:

• Identification and contact data: name, email address, phone number, or WhatsApp.
• Information about your import request: desired vehicle make and model, year, available budget, delivery city, and any other preferences you indicate.
• Content of your messages: information you include in contact forms or send via email or WhatsApp.
• Technical browsing data: IP address, browser type, operating system, pages visited, and other website usage information (if you use cookies or analytics).

3. How We Obtain Your Data

We obtain your personal data only when you decide to provide it to us, through the following channels:

• When you fill out and submit the contact form or the "Custom Import" form on our website.
• When you communicate with us by email.
• When you start a conversation with us via WhatsApp.
• When you browse our website, through the use of technical cookies and, where applicable, analytics cookies (see the Cookies section for more information).

4. Processing Purposes

We process your personal data for the following purposes:

• Respond to information requests and quotes

  Answer your inquiries and send you personalized quotes about our import services.

• Manage the business relationship

  Manage all communications and coordination related to your vehicle import request.

• Send communications about your request

  Keep you informed about the status of your request, vehicle inspection, logistics, and any other relevant updates.

• Improve our website

  Analyze how users interact with our website using analytics cookies to improve the experience.

• Comply with legal obligations

  Comply with applicable legal obligations regarding taxes, accounting, and any other applicable regulations.

5. Legal Basis (Legitimacy)

The processing of your personal data is carried out under the following legal bases, in accordance with Article 6 of the GDPR:

6. Data Recipients

We do not share your personal data with third parties for commercial purposes. Your data is only shared with recipients strictly necessary to provide our services:

• Necessary service providers: management and advisory services (for legal, tax, and administrative procedures), email and hosting service providers (for website operation and communications), and form or CRM tools (to manage your requests).
• Import collaborators: logistics providers, freight forwarders, customs agents, and other collaborators directly related to managing your import request, only when necessary to provide the service.

7. International Transfers

Since XPORTS EMIRATES SLU's activity consists of importing vehicles from the United Arab Emirates, we may need to communicate your data to collaborators, providers, or entities located in the UAE or other countries outside the EEA to manage your request.

These transfers are made only when strictly necessary to provide you with the service you request, applying the safeguards required by the GDPR:

• Transfers to countries with an adequacy decision by the European Commission (when applicable).
• Signing Standard Contractual Clauses (SCCs) approved by the European Commission.
• Minimization principle: we only transfer data strictly necessary for each specific purpose.

8. Data Retention Periods

We retain your personal data for the time necessary to manage your request and, subsequently, for the legal periods that apply to us:

• Data from managed requests: retained for the duration of the commercial relationship and, subsequently, for the legally established period for compliance with tax and accounting obligations (minimum 5 years).
• Data from uncontracted requests: retained for a maximum period of 2 years for follow-up and possible resumption of contact, unless you revoke your consent earlier.

After these periods, your data will be deleted or, when possible and legally permissible, irreversibly anonymized.

9. Your Rights

Data protection regulations grant you a series of rights that you can exercise at any time. These rights are:

How to Exercise Your Rights

To exercise any of your rights, send an email to [email protected] indicating in the subject line "Data Protection" and proving your identity (for example, by attaching a copy of your ID or identity document).

We will respond to your request within a maximum of one month from receipt.

Right to Lodge a Complaint

If you believe we have not processed your personal data in accordance with the regulations, you also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

10. Data Security

XPORTS EMIRATES SLU implements appropriate technical and organizational measures to ensure the security of your personal data and protect it against unauthorized or unlawful processing, loss, destruction, or accidental damage.

• Restricted access control to your personal data (only authorized personnel).
• Use of secure services and platforms (with encryption and security protocols).
• Minimization principle: we only process data strictly necessary.
• Regular updating and review of security measures.

11. Minors

This website and our services are not directed to minors. If we detect that we have collected personal data from a minor without verifying the corresponding authorization, we will proceed to delete such data as soon as possible.

12. Cookies

Our website may use cookies and similar technologies to ensure its proper functioning and, where applicable, to analyze how visitors use the site.

Cookies are small files stored on your device when you visit a website. We use:

• Technical cookies: necessary for the basic functioning of the website.
• Analytics cookies: (if we use them) allow us to understand how users interact with the website to improve it.

For detailed information about the cookies we use, their purposes, and how you can configure or reject them, see our:

Policy Updates

We may update this Privacy Policy periodically to reflect changes in our data processing practices, applicable regulations, or for other operational reasons. Any update will be published on this page with the corresponding "Last Updated" date. We recommend reviewing this policy periodically.