Privacy Policy

This Privacy Policy HE refers to solely and exclusively to the processing of data collected through this Website. Data processing derived from the contracting of products and services or the establishment of any another type of relationship legal HE will govern for the privacy policy that ALKAR Automotive, S.A.U. provides to the interested party for this purpose.

1. Data Controller.

Identity: ALKAR Automotive, S.A.U.
Tax ID: A48181929
Registered office: Pol. Ind. Boroa Parcela 2B 4-5, 48340 Amorebieta (Bizkaia). Spain.
Contact email: alkar@alkar.es
Contact phone number: +34 944 544 142
Website: https://www.alkar.es

ALKAR Automotive, S.A.U. determines the purposes and means of data processing personal in accordance with Regulation (EU) 2016/679 (GDPR) and the Law Organic Law 3/2018 (LOPDGDD).

2. Scope of application.

This privacy policy applies to the personal data that ALKAR Automotive, S.A.U. collects and processes:

When a user creates a customer account on the website,
when you make purchases, place orders, or request quotes,
when you use contact forms or information requests,
when you browse the website and browsing data is collected through cookies or analytics tools.

3. Personal data that can be collected.

By way of example, the personal data that may be collected are:

Identification and contact details: name and surname, postal address, email address, telephone number, date of birth, NIF/NIE (when necessary).
Customer account details: username, password, order history, billing, company (if applicable).
Transaction/purchase details: delivery address, billing address, payment method (bank details are not collected except through an external provider), order number, associated invoices, returns.
Website navigation and usage data: IP address, connection data, browsing history, analytics cookies.
Communication data: emails, chats, recorded calls (if applicable), satisfaction surveys.
Data on commercial and marketing preferences: acceptance or rejection of communications, product or service preferences.

4. Purposes of the treatment.

The personal data collected will be processed by ALKAR Automotive, S.A.U. for the following purposes:

Manage the creation of the customer account, its maintenance and the relationship with the customer.
Process orders, purchases, invoicing, product delivery and returns.
Manage requests for quotes or information about products and services.
Inform the customer about news, offers, products, services, when they have given their consent.
Improving user experience, website usage analysis, fraud prevention, and site security.
Comply with legal, accounting, tax or filing obligations.
Adopt internal measures to improve services, quality and customer satisfaction.

5. Legitimization of the processing.

The processing of users' personal data carried out by ALKAR Automotive, S.A.U. is based on:

The user's consent for specific purposes, such as sending commercial communications. (art. 6.1.a GDPR).

The performance of a contract or pre-contractual measures (for example, the creation of a customer account or the placing of orders). (Art. 6.1.b GDPR).

Compliance with a legal obligation (e.g., tax and accounting data). (Art. 6.1.c GDPR).

The legitimate interest of the controller, such as navigation analysis, fraud prevention or service improvement, unless the rights and freedoms of the data subject prevail. (Art. 6.1.f GDPR).

6. Storage period.

ALKAR Automotive, S.A.U. will retain the data:

As long as the contractual relationship exists, the account is active, or the user does not request its deletion.
For the purposes of customer management, orders, returns, etc., the time period will be that necessary to fulfill these purposes.
The data may remain blocked (not used for other purposes) for the periods set by the applicable regulations (e.g., accounting, civil liability, tax).

7. Recipients of the data / transfers .

ALKAR Automotive, S.A.U., will not transfer personal data to third parties except in the following circumstances:

When necessary to fulfill a purpose (e.g., transport companies, third-party hosted payment services) and contractual guarantees exist.
When there is a legal obligation (public administrations, competent authorities).
When the user has given their consent for a specific transfer.

Data may also be transferred to or accessed by entities within the group or other providers located in countries outside the European Economic Area. In such cases, the safeguards provided for by law will be implemented.

8. International transfers.

In the event that ALKAR Automotive, S.A.U. uses third-party services or providers located outside the European Economic Area (e.g., payment platforms, analytics, cloud storage), appropriate security measures (standard contractual clauses, adequacy decision, binding corporate rules) will be adopted to ensure data protection in accordance with the GDPR.

9. Rights of interested parties.

The user has the following rights regarding their personal data:

Right of access: to know what user data is processed and why (art. 15 GDPR).
Right of rectification: request the correction of inaccurate data (art. 16 GDPR)
Right to erasure: request the deletion of data (“right to be forgotten”) where applicable (Art. 17 GDPR).
Right to restriction of processing: request that the processing of your data be restricted (Art. 18 GDPR)
Right to object: to object to processing where appropriate, especially for direct marketing (Art. 21 GDPR).
Right to data portability: to receive the personal data that the user has provided in a structured, readable and reusable format, and where appropriate request its transmission to another controller (Art. 20 GDPR).

To exercise these rights, the user can send a request to:

Postal address: ALKAR Automotive, S.A.U. – Pol. Ind . Boroa Parcela 2B 4-5, 48340 Amorebieta (Bizkaia)
Email: alkar@alkar.es

You must include a copy of your identification document. If you are requesting portability or deletion, identity verification may be required.

The user also has the right to file a complaint with the Spanish Data Protection Agency (AEPD) if they believe that the processing of their data does not comply with current regulations.

10. Safety measures.

ALKAR Automotive, S.A.U. has adopted the appropriate technical and organizational measures to guarantee the confidentiality, integrity and availability of personal data, in accordance with Article 32 of the GDPR.

Users are also advised to keep their password confidential, not to share it, and to change it periodically.

11. Data of minors.

This website is not designed to collect data from children under 14 years of age without verifiable parental or guardian consent. If it is discovered that data from a minor has been collected without such consent, it will be deleted as soon as possible.

12. Commercial communications.

ALKAR Automotive, S.A.U. will send commercial communications only if:

The user has given their express consent (art. 6.1.a GDPR).
If there is a prior contractual relationship and the products or services are similar, in accordance with Article 21.2 of Law 34/2002, of July 11, on information society services and electronic commerce.

The user can unsubscribe at any time by sending a message to alkar@alkar.es or via the link included in each communication.

The user may object to the processing for marketing purposes at any time (art. 21 GDPR).

13. Policy update.

This Privacy Policy may be modified at any time to adapt to regulatory changes, AEPD criteria, or changes in processing systems. The current policy will be the one published on the website.

Last updated: January 2026.