Privacy Policy

ADDITIONAL INFORMATION ON DATA PROTECTION You will find here what is and is not done with your personal data on this website. This policy outlines how the personal information of all individuals interacting with Royal Rides SL through this website will be treated and protected. Please read all sections of the Legal Notice, the Cookies Policy, and this Privacy Policy before using this website. In accordance with the provisions of EU Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR) and Organic Law 3/2018 of December 5 on the Protection of Personal Data and guarantee of digital rights, Royal Rides SL informs you that, by accepting this Privacy Policy, you give your express, informed, free, and unequivocal consent for the Data you provide—to which the security, technical, and organizational measures provided for in current regulations are applied—to be processed by Royal Rides SL as the data controller.

WHO IS THE CONTROLLER OF THIS WEBSITE? Identity of the Controller: Royal Rides SL Trade Name: Royal Rides Tax ID (NIF/CIF): B75683771 Address: Poligon Pla de, nave 7, 17411 Vidreres, Girona Email: support@royalrides.es Activity: Other activities related to transportation

WHAT PERSONAL DATA IS COLLECTED ON THIS WEBSITE? For the purposes established in this Privacy Policy, Royal Rides SL collects and processes the Personal Data detailed below, which will depend on the different products or services requested on this Website: Identification data: name, surname. Contact data: postal address, email, mobile phone number. Contractual data: data from contractual operations, ID/DNI, products and services acquired, financial operations, payment data. Browsing data: IP address, device type and identification, browser type, domain through which the Website is accessed, browsing data, activity on the Website.

ON WHAT LEGAL BASIS IS THIS DATA PROCESSED? We process your personal data based on the following legal grounds: The performance of a contract with Royal Rides SL, for contracting services, publishing advertisements, and managing the requested services. The user’s consent regarding contact, subscription to content, and the sending of commercial communications via email, cookies, or messaging systems. The legitimate interest of the data controller to protect Royal Rides SL website users from abuse and fraud in the use of our services.

FOR WHAT PURPOSES WILL WE PROCESS YOUR DATA? On this website, there are different forms; in each of them, the information collected will be used as follows: Contact Form: There is a contact form for inquiries, suggestions, or professional contact. In this case, the email address will be used to respond to them and send the information the user requires through the website.

RETENTION PERIOD OF PERSONAL DATA Customer Data: The retention period for personal data will vary depending on the service the Customer contracts. In any case, it will be the minimum necessary and may be kept for: – 4 years: Law on Offenses and Sanctions in the Social Order (obligations regarding affiliation, registrations, cancellations, contributions, payment of salaries…); Arts. 66 et seq. General Tax Law (accounting books…). – 5 years: Art. 1964 of the Civil Code (personal actions without a special term). – 6 years: Art. 30 of the Commercial Code (accounting books, invoices…). – 10 years: Art. 25 of the Law on the Prevention of Money Laundering and Terrorism Financing. Subscriber Data: From the moment the user subscribes until they unsubscribe. Potential Customer Data: Data will be kept in all cases during the duration of the established commercial relationship and, once concluded, for two years, unless the user requests its deletion sooner.

WHAT ARE YOUR RIGHTS REGARDING THE USE OF YOUR DATA? Anyone has the right to obtain confirmation as to whether or not Royal Rides SL is processing personal data concerning them. Interested persons have the right to: Request access to personal data relating to the data subject. Request its rectification or deletion. Request its cancellation. Request the limitation of its processing. Object to the processing. Request data portability. If you have given your consent for a specific purpose, you have the right to withdraw the consent granted at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal. If you feel your rights have been violated regarding the protection of your personal data, especially when you have not obtained satisfaction in the exercise of your rights, you may file a claim with the competent Data Protection Supervisory Authority through its website: https://www.aepd.es/es To exercise these rights, you can write to support@royalrides.es. There is a form for the exercise of your rights which you can request by email, or if you prefer, you can use those prepared by the Spanish Data Protection Agency or third parties. These forms must be electronically signed or accompanied by a photocopy of your ID (DNI). If someone represents you, you must attach a copy of their ID or it must be signed with their electronic signature. Forms can be presented in person, sent by letter, or by email to the address of the controller appearing at the beginning of this text.

DIRECTORY SERVICES Directory inclusion services will be referenced on the website itself. royalrides.es will ensure that the listings and advertisements appearing on the Web convey truthful information and are kept up to date, although it does not guarantee the accuracy of the data entered therein at all times. The data and other contents of the advertisements inserted in the directories are provided by the advertisers; therefore, royalrides.es is not responsible for possible inaccuracies or errors that the advertisements may contain, nor does it guarantee in any way the experience, integrity, or responsibility of the advertisers or the quality of their services. Advertisements inserted in the directories will remain published on the portal until they are removed or suspended by the advertising user or by the site, which logically will not be responsible if, once removed from its databases, the advertisements continue to be indexed in search engines external to this portal. Any contractual or extra-contractual relationship that the user formalizes with advertisers or third parties contacted through this portal is understood to be carried out solely and exclusively between the user and the advertiser and/or third party. The user knows and accepts that royalrides.es only acts as a channel or advertising medium and, therefore, has no responsibility for damages of any kind caused by their negotiations, conversations, and/or contractual or extra-contractual relationships with advertisers or third-party individuals or legal entities contacted through this portal.

TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED? Many tools used on this website to manage data are contracted by third parties. To provide services strictly necessary for the development of the activity, Royal Rides SL shares data with the following providers under their corresponding privacy conditions: External service providers (for example, payment processing services, order processing, analytics, marketing campaign management, website management, and email distribution and other similar service providers) so that they can perform business functions on behalf of Royal Rides SL. The web development and maintenance company, or the hosting company, may have occasional access to this website. They have signed a service provision contract that obliges them to maintain the same level of privacy applied to the processing carried out on this website. Any international transfer of data derived from the use of tools or service providers will adhere to the Privacy Shield agreement, which guarantees that American software companies comply with European data protection policies regarding privacy, secrecy, and data security. Specifically, this website uses the following tools: Billing tool: Analytics tools: Online chat tool:

DATA SECRECY AND SECURITY talurluxurycars.com is committed to the use and processing of the user’s personal data, respecting its confidentiality, in accordance with its purpose; as well as complying with its obligation to store it and adapt all measures to prevent alteration, loss, unauthorized processing, or access, in accordance with current data protection regulations. (This website includes an SSL certificate. This is a security protocol that ensures your data travels intact and securely; that is, the transmission of data between a server and the web user, and in feedback, is fully encrypted.) talurluxurycars.com cannot guarantee the absolute invulnerability of the Internet network, nor, therefore, the violation of data through fraudulent access by third parties. Regarding the confidentiality of processing, Royal Rides SL will ensure that any person authorized by Royal Rides SL to process customer data (including its staff, collaborators, and providers) will be under an appropriate obligation of confidentiality (whether a contractual or legal duty). Should a security incident occur, Royal Rides SL shall notify the Customer without undue delay upon becoming aware of it and shall provide timely information related to the Security Incident as it becomes known, or when reasonably requested by the customer.

ACCURACY AND TRUTHFULNESS OF DATA As a user, you are solely responsible for the truthfulness and correctness of the data you submit to talurluxurycars.com, exonerating Royal Rides SL from any responsibility in this regard. Users guarantee and are responsible, in any case, for the accuracy, validity, and authenticity of the personal data provided, and undertake to keep it duly updated. The user agrees to provide complete and correct information in the contact or subscription form.

REVOCABILITY The consent given, both for the processing and for the transfer of the data of the interested parties, is revocable at any time by communicating it to Royal Rides SL under the terms established in this Policy for the exercise of ARCO rights. This revocation shall in no case be retroactive.

CHANGES TO THE PRIVACY POLICY Royal Rides SL reserves the right to modify this policy to adapt it to new legislation or case law, as well as industry practices. In such cases, the changes introduced will be announced on this page reasonably in advance of their implementation.