FIRST LAYER:  To be placed in the same field of vision as the place of the button of conformity with rental request in the electronic form, with a mention that “before giving your conformity to the request you must read the basic information on data protection indicated below:”

Basic information on data protection

SECOND COVER: Additional hyperlink information

For the purposes provided for in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and in Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, we provide you with the following additional information:

Responsible for the treatment

Contact information of the person in charge: VOLT Padel

Purpose of treatment

Description of the purposes of the processing: The personal data collected are necessary to be able to properly evaluate your request for the rental of [type of product] and, in case of a positive evaluation, to be able to properly manage the rental contract and to be able to carry out, on your behalf, the services derived from the same. 

Data retention periods or criteria: The data will be kept for the time necessary to fulfill the purpose for which they were collected and to determine the possible responsibilities that may arise from this purpose and the processing of the data. The provisions of the archives and documentation regulations shall apply. 

Automated decisions, profiling and applied logic: Personal data are not subject to decisions based solely on automated processing that produce legal effects or affect the data subject in a legally relevant way, except in circumstances expressly provided for by data protection regulations. Nor are they used in automated processing for profiling purposes.

Legitimacy of the treatment

Details of the legal basis for the processing:

1. Consent of the data subject: GDPR: 6.1.a): The data subject gave his consent to the processing of his personal data and thus for the evaluation of his rental contract request.
2. Performance of a contract: GDPR: 6.1.b) Processing necessary for the performance of a contract to which the data subject is a party or for the implementation at the request of the data subject of pre-contractual measures.

Mandatory or not to provide data and consequences of not doing so:

The personal data requested are mandatory, so that failure to complete them makes it impossible to comply with the purposes of treatment.

Addressees

Your data will be processed by the entity in charge of the management of the rental business line of the Data Controller as Data Processor, the company Borcanbar, S.L., with CIF B-01902998 and registered office in 41927 Mairena del Aljarafe (Seville), calle de Los Rosales 13, registered in the Commercial Register of the province of Seville on page SE- [____], with CIF B-01902998, telephone 697726564 and email info@newe.eco. The contact details of the Data Protection Officer of the Data Processor are info@newe.eco.

It is possible that in order to carry out some of the services necessary for the proper management of the rental contract, some sub-processors may partially process your data and thus, for example, couriers who deliver and pick up at your home the products subject to rental [examples: credit evaluators, banks for payment].

No assignment to third parties or international transfer to third countries or international organizations of your data is foreseen.

Your rights

You can exercise at any time before the Data Controller, the rights listed below, provided that the necessary requirements for it. The exercise of these rights is free of charge and will be dealt with within one month of receipt by the Data Controller, a period that may be extended for a further two months in accordance with the legal provisions.

• Right to request access to your personal data 

As a data subject, you have the right to obtain from the Data Controller confirmation as to whether or not personal data concerning you are being processed and, if so, you have the right of access to personal data. 

• Right to request the rectification of your personal data

As a data subject, you have the right to obtain without undue delay from the Controller the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of an additional declaration.

• Right to request the deletion of your personal data

As a data subject you have the right to obtain without undue delay from the Data Controller the deletion of personal data concerning you, which shall be obliged to delete without undue delay your personal data when any of the following circumstances occur:

• If the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
• If the processing of your personal data has been based solely on the consent you provided to the Controller, and you withdraw your consent.
• If you have objected to the processing of your personal data by exercising your right to object and no other legitimate grounds for the processing prevail.
• If your personal data has been unlawfully processed.
• If your personal data must be deleted in order to comply with a legal obligation.
• If your personal data has been obtained in connection with the provision of information society services under certain circumstances.

• Right to request the restriction of the processing of your personal data

As a data subject, you have the right to obtain from the Data Controller the limitation of the processing of your data when any of the following conditions are met: 

• for you to challenge the accuracy of the personal data, for a period of time that allows the Controller to verify the accuracy of the personal data;
• the processing is unlawful and you object to the deletion of your personal data, requesting instead the limitation of their use;
• the Controller no longer needs the personal data for the purposes of the processing, but you need them for the formulation, exercise or defense of claims;
• you have objected to the processing under certain circumstances, while verifying whether the legitimate reasons of the Controller outweigh yours.

• Right to object to the processing of your personal data

As a data subject, you have the right to object at any time on grounds relating to your particular situation as provided by law, to the processing of personal data concerning you, including profiling on the basis of such provisions.

• Right to portability

You may exercise the right to portability to receive your personal data from the Data Controller in a structured, commonly used, machine-readable and interoperable format, which allows it to be transmitted to another data controller, provided that the processing is legitimized on the basis of consent or within the framework of the execution of the rental contract.

[If applicable] The right of portability does not apply, in accordance with Article 20 of the General Data Protection Regulation.

• Right to file a complaint with the Spanish Data Protection Agency.

• The right not to be subject to automated individual decisions

This right ensures that personal data subjects are not subject to a decision based solely on data processing, including profiling, which may produce legal effects.

Profiling is considered to be any form of processing of personal data that evaluates personal aspects allowing, in particular, to analyze or predict aspects related to job performance, economic situation, health, personal preferences or interests, reliability or behavior.

This right shall not apply when:

• It is necessary for the conclusion or performance of a contract between the owner of the data and the data controller.

• The processing of the data is based on the consent given in advance

• The processing is authorized by Union or Member State law and appropriate measures are provided for to safeguard the rights and freedoms and legitimate interests of the data subject.

Source of data

Detailed information on the origin of the data (even if they come from publicly available sources): The personal data we process comes from [data collection form when you make your rental contracting request] [data collection form when you make your rental contracting request].

Categories of data processed:  The categories of data processed are:

1. Identification data

Postal and e-mail addresses