Privacy Policy and Data Protection

 

Last Updated: May 25, 2018

Pursuant to current personal Data Protection law, Unlimited Engineering SL., hereinafter, Unlimited, informs users of its online platform of the company’s Privacy and Data Protection Policy which it applies to the treatment of the personal data that the user voluntarily provides to access the Site at www.rideunlimited.co and to the corresponding mobile application.

Unless stated otherwise users are not required to provide personal data, not providing will not have any consequences. The provision of personal data is neither legally nor contractually obligatory, nor required for conclusion of a contract. “Personal data” refers to any information relating to an identified or identifiable natural person.

Applicable legislation to Users Personal Data (Personal Data Protection)

As part of its commitment to comply with the current legislation concerning data protection at all times, and specifically with General Data Protection Regulation (Regulation EU 2016/679), Organic Law 15/1999, of 13 December 1999, on the Protection of Personal Data; Royal Decree 1720/2007 of 21 December 2007 implementing Organic Law 15/1999; and all other applicable legislation. Pursuant to Article 5 of the aforesaid Organic Law 15/1999, of 13 December 1999, on the Protection of Personal Data, Users are hereby notified that personal information supplied to the website shall be subject to automatic treatment and become part of electronic files belonging to Unlimited, under the responsibility of Unlimited, a company duly included in the General Register of the Spanish Agency for Data Protection, for the purposes set forth on the website: management of the Users registered in the Unlimited Platform.

Personal Data Collection

Unlimited collects and keeps some information that the user introduces in the Unlimited Platform or that the user itself facilitates to Unlimited in any other way:

  • Registration data

  • Data from the User Profile

  • Data from the User Account

  • Additional information that the user wants to share

Duration of Personal Data storage

After an Account opening, a profile registration or any contractual process, personal data will be stored in accordance with the retention period described by tax law and the duration of the Unlimited warranty period. After the retention period has ended the data will be deleted, unless the user agrees to further processing and use.

Rights of the User

If the proper legal requirements are fulfilled, in accordance to articles 15 to 20 of the GPDR Law, any user has the right to access, correct, completely delete or even restrict the processing of their data. Users can contact Unlimited at contact@unlimited.co at any time if they have an objection against data processing based on article 6 (1) of the GDPR Law, and to processing for the purposes of direct marketing, according to article 21 (1) of GDPR Law.

According to the article 77 in the GPDR Law, users have also the right to complain to the regulatory authority if they believe their data is not being processed in accordance to the Law.

Registration Data and Customer Account

When the user opens a customer account, it provides Unlimited with a username and email address. In order to use the services provided by Unlimited, users add their mobile phone, information of the orders made by the user, as well as, the evaluations and/or comments that the user makes about his/her orders.The data processing is for the purpose of improving user shopping experience and will be carried out on the basis of article 6 (1) lit. a of GDPR Law with user consent. Users can withdraw consent at any time by contacting us at contact@rideunlimited.co without affecting the legality of the processing carried out with users consent up to the withdrawal. Customer account will then be deleted.

Service Partners and Third- Party Service Providers

We will not forward user data to third parties without users explicit consent. This only excludes our service partners which we require in order to handle the contractual relationship or service providers we use to process an order. This Unlimited service providers are those who execute orders, handle payments, the web hosts, IT service providers, send packages and / or carry out the delivery services. This service providers will have access to the personal information of the users that is required to perform their functions, but they won’t be able to use it for other purposes. These suppliers must treat personal information in accordance with the present Privacy Policy and the applicable legislation in the matter of Data Protection. The scope of data transmission is restricted to a minimum.

Order Placement and Payment

When the user submits an order, Unlimited only collects and uses personal data where this is necessary for the fulfillment and handling of user requests. The provision of data is necessary for conclusion of a contract. Failure to provide it will prevent the conclusion of any contract. The processing will occur on the basis of article 6 (1) lit. b of GDPR Law and is required for the fulfillment of a contract with the user. Unlimited does not store the credit cards data of the users nor stores data that may relate the identification of the means of payment with the identity of its owner. However, the identification data of the credit / debit card (number and expiration date) are stored by the payment service provider chosen by Unlimited, whose security measures are high as long as it is PC1 Compliant according to the Data Security Standard for the Payment Card Industry or PCI DSS.

PayPal Payment Method

All PayPal transaction are covered by the PayPal Data Privacy Statement. Users can found this at PayPal EEA Privacy Policy.

Newsletter

If users have explicitly agreed, Unlimited will use the users email address outside of contractual processing exclusively to send a newsletter for marketing purposes. The processing will be carried out on the basis of article 6 (1) lit. a of the GDPR Law with user consent. Users can withdraw consent at any time without affecting the legality of the processing carried out with consent up to the withdrawal. If at any given time users want to unsubscribe from the newsletter they can do so by using the relevant link in the newsletter or by contacting Unlimited at contact@rideunlimited.co and their email address will then be removed from the distributor. Unlimited uses a service provider for email marketing in the course of order processing.

Direct Marketing

To place an order and conclude a contract, users must provide their email address. Failure to provide it will prevent the conclusion of any contract. Unlimited will use this email address for the electronic transmission of marketing for Unlimited own goods or services which are similar to those the users have already purchased, unless users have objected to this use. The processing of this data will be carried out on the basis of article 6 (1) lit. f of GDPR Law due to our justified interest in direct marketing. Users can object to this use at any time by contacting us at contact@rideunlimited.co.

Website Server log files

Users can use the Unlimited website without submitting personal data. Every time a user accesses the Unlimited website, user data is transmitted by the internet browser and stored in protocol files (server log files). This stored data includes e.g. name of the site called up, date and time of the request, amount of data transferred and the provider making the request. This data serves exclusively to ensure smooth operation of the Unlimited website and to improve Unlimited’s offering. It is not possible to assign this data to a particular person.

Use of Cookies in the Unlimited Website

Unlimited’s website uses cookies. Cookies are small text files which are saved in a user’s internet browser or by the user’s internet browser on their computer system. When a user calls up a website, a cookie may be saved on the user’s operating system. This cookie contains a characteristic character string which allows the browser to be clearly identified when the website is called up again. Unlimited uses cookies to make the offering more user-friendly, effective and secure. Cookies also allow systems to recognise user browser after a page change and to offer the user services. Some functions of Unlimited’s website cannot be offered without the use of cookies. These services require the browser to be recognised again after a page change. Unlimited’s website also uses cookies to analyse the surfing behaviour of visitors to the website. Cookies are also used to address visitors to other websites with targeted marketing relating to their interests. Processing is carried out on the basis of article 15 (3) TMG (Telemedia Act) as well as article 6 (1) lit. f of GDPR Law due to Unlimited’s justified interest in the purposes above. The data collected in this way is pseudonymised using technological measures. It is therefore not possible to connect the data to a user. The data will not be stored together with other personal data pertaining to the user. Users have the right to veto this processing of personal data according to article 6 (1) lit. f of the GDPR Law  by contacting us at contact@rideunlimited.co, for reasons relating to their personal situation. Cookies will be stored on users computers. Users therefore have full control over the use of cookies. By choosing corresponding technical settings in their internet browser, they can prevent the storage of cookies and transmission of the data they contain. Cookies which have already been saved may be deleted at any time. Unlimited would, however, like to point out that this may prevent the user from making full use of all the functions of the website. For further information, consult our Cookie policy here.

Use of Google Analytics

Unlimited’s website uses the web analysis service Google Analytics by Google Inc. hereinafter, Google. Google will use information on behalf of the operator of the Unlimited website to analyze, evaluate the use of the website, to compile reports on website activity and to provide other services to the website operator relating to website and internet use. The IP address communicated by the user browser as part of Google Analytics is not associated with any other data held by Google. Google Analytics uses cookies, which make it possible to analyze the use of the website. The information generated by the cookie regarding the use of the Unlimited website is usually transferred to a Google server in the USA and stored there. User data may be transmitted to the USA. Transmission of data to the USA is covered by an adequacy decision by the European Commission. Processing is carried out on the basis of article 6 (1) lit. f of the GDPR Law due to Unlimited’s justified interest in needs-based and targeted design of the website. Users have the right to veto this processing of personal data according to article 6 (1) lit. f of the GDPR Law  by contacting us at contact@rideunlimited.co, for reasons relating to their personal situation. Users can prevent collection of the data (including the IP address) generated by the cookies and related to the use of the Unlimited website by Google as well as the processing of this data by Google by downloading and installing this browser plug-in Google Analytics Opt-out Browser Add-on. Users can set an opt-out cookie to prevent collection by Google Analytics across devices. Opt-out cookies prevent the future collection of user data when they visit the Unlimited website. Users need to opt-out on all systems and devices in use for this to work comprehensively.

Use of the remarketing function by Google

Unlimited’s website uses the remarketing or “similar target groups” function by Google. This function serves to analyse visitor behaviour and visitor interests. Google uses cookies to analyse website use, forming the basis for producing interest-related adverts. Cookies allow for the recording of website visits as well as anonymised data on the use of the website. The personal data of website visitors is not saved. If a user then visits another website in the Google display network user will then be shown adverts which are more likely to take previous areas of product and information interest into account. User data may be transmitted to the USA. Transmission of data to the USA is covered by an adequacy decision by the European Commission. Processing is carried out on the basis of article 6 (1) lit. f of the GDPR Law due to Unlimited’s justified interest in addressing visitors to the website with targeted marketing by displaying personalised interest-related adverts when they visit other websites in the Google display network. Users have the right to veto this processing of personal data according to article 6 (1) lit. f of the GDPR Law  by contacting us at contact@rideunlimited.co, for reasons relating to their personal situation.

Use of Google Adwords

Unlimited’s website uses the online marketing programme Google AdWords by Google, including conversion tracking. If a user clicks on adverts placed by Google, a cookie is placed on your computer for conversion tracking. These cookies have limited validity, do not contain any personal data and thus cannot be used for personal identification. If a user visits certain pages on the Unlimited website and the cookie has not yet expired, unlimited and Google can recognise that a user have clicked on the advert and were forwarded to this page. Every Google AdWords customer receives a separate cookie. Therefore, it is not possible to track cookies relating to the websites of AdWords customers. The information collected using the conversion cookie serves the purpose of producing conversion statistics. This allows Unlimited to find out the total number of users who have clicked on Unlimited’s adverts and were forwarded to a page equipped with a conversion tracking tag. However, they do not receive any information with which could be used to personally identify users. Processing is carried out on the basis of article 6 (1) lit. f of the GDPR Law due to Unlimited’s justified interest in targeted marketing and analysis of the effectiveness and efficiency of this marketing. Users have the right to veto this processing of personal data according to article 6 (1) lit. f of the GDPR Law  by contacting us at contact@rideunlimited.co, for reasons relating to their personal situation. Users can prevent the storage of cookies by choosing corresponding technical settings in your internet browser. Unlimited would, however, like to point out that this may prevent the user from making full use of all the functions of the website. Users will then not be included in the conversion tracking statistics.

Use of Facebook Remarketing

Unlimited’s website uses the remarketing function “Custom Audiences” by Facebook Inc. hereinafter, Facebook.This function serves to address the visitor to the website with interest-related advertising on the social network Facebook. Unlimited has implemented Facebook’s remarketing tag on the website for this purpose. This tag sets up a direct connection to Facebook’s servers when a user visits the website. This informs the Facebook server which of Unlimited’s web pages the user has visited. Facebook assigns this information to the user personal Facebook account. When the user visits the social network Facebook it will then be shown personalized, interest-related Facebook ads. Processing is carried out on the basis of article 6 (1) lit. f of the GDPR Law due to Unlimited’s justified interest in the above purpose. Users have the right to veto this processing of personal data according to article 6 (1) lit. f of the GDPR Law by contacting us at contact@rideunlimited.co, for reasons relating to their personal situation. Users can find more detailed information on Facebook’s collection and use of data and associated rights in Facebook's Privacy policy.

Use of Facebook plug-ins

Unlimited’s website uses plug-ins of the social network Facebook. Whenever a user display’s one of Unlimited Internet pages that hosts a Facebook plug-in, user will be linked to the Facebook servers, a message is sent to the user’s browser, and the plug-in is run on the Internet page. This is telling the Facebook server which of the Unlimited pages the user has visited. Assuming the user is logged on to his or her’s Facebook member account while running the Facebook plug-in, Facebook will allocate the information to their personal Facebook account. Further information collected and allocated by Facebook is the use of plug-in functions (like clicking on the Like button or posting a comment). To prevent this data collection and allocation, users must log off their Facebook user account before running the plug-in. If users do not wish Facebook to collect and directly allocate the above information to their Facebook profile, they will either have to log off from Facebook before visiting the Unlimited website or run a "Facebook blocker" which stops the Facebook plug-ins from running on the Unlimited website pages. Users can find more detailed information on Facebook’s collection and use of data and associated rights in Facebook's Privacy policy.

Use of YouTube

Our website uses YouTube LLC’s (hereinafter, YouTube) function for the embedding of YouTube videos. YouTube is an affiliated company of Google. This feature shows YouTube videos in an iFrame on the website. It is only if a user watch a video that information is transmitted to and stored by YouTube. Further information on the data collected and used by YouTube and Google can be found in YouTube’s Privacy Policy.

Notifications and modifications

As stated before, all users may exercise their rights to access, rectification, cancellation or opposition to the treatment of their personal data. Users can exercise these rights or ask about the present Privacy Policy through the Contact Form.

As Unlimited business changes constantly, our Privacy Policy, Cookies Policy and Terms of Use change accordingly.  Unless stated otherwise by the Users, Unlimited could send Users notifications related to important changes and modifications of those documents via email. Nevertheless, Unlimited will never materially change its policies and security practices to make them less protective of customer information collected in the past without the previous consent of the affected customers.

In case of discrepancy between the translated versions and the Spanish version of this text, the latter will prevail.