Privacy

This Privacy Policy explains how we process your personal data in accordance with the GDPR and Spanish data protection law.

1. Data controller

Automóviles H.M. Asturias S.L. · Tax ID B74460528 · Polígono de Proni, Calle E, 22, Meres, 33199 Siero (Asturias) · Phone +34 658 509 380 · Email: contacto@deocasion.online

2. Data we process

• Identity and contact data: first name, last name, email, phone.

• Billing and delivery data: address.

• Purchase data: vehicle, amount, date and payment status (never your full card details).

• Enquiry data: the content of messages sent through the contact form.

3. Purposes and legal basis

• Managing your order, payment, delivery and invoicing: performance of a contract (Art. 6.1.b GDPR).

• Answering your information and contact requests: consent (Art. 6.1.a).

• Complying with tax, accounting and consumer legal obligations (Art. 6.1.c).

• Preventing payment fraud: legitimate interest (Art. 6.1.f).

• Sending commercial communications: only if you have given your express consent, which you may withdraw at any time.

4. Recipients and processors

We do not disclose your data to third parties except where legally required (public authorities, traffic bodies) or where necessary to manage your order. To provide the service we use providers acting as data processors who process data only on our behalf: the card payment gateway (payment processing), Brevo (transactional email) and Vercel (website hosting).

5. International transfers

Some of these providers may process data outside the European Economic Area. In that case, the safeguards provided by the GDPR apply (adequacy decisions or standard contractual clauses).

6. Retention

We keep data for the duration of the contractual relationship and afterwards for the statutory limitation periods; invoicing and accounting data are kept for six years. Contact enquiries are kept for as long as necessary to handle them.

7. Your rights

You may exercise your rights of access, rectification, erasure, restriction, portability and objection, and withdraw your consent, by writing to contacto@deocasion.online or to our postal address with a copy of an identity document. If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Security

We apply reasonable technical and organisational measures to protect your data. Communications with the site use HTTPS and we do not store bank card data.