Please be aware that the Policy applies to all areas, websites, channels, applications, promotions, as well as any other online initiative of any of the companies in the Repsol Group (the updated list can be viewed at www.informeanual.repsol.com) that require the use of our users’ personal information. Therefore, this Policy is not applicable to third-party websites, including those that can be accessed via a link from our areas.
Also bear in mind that this Policy’s principles apply to all the companies in our Group that may be the owners of the services, which we will promptly inform you of upon registration. Also keep in mind that, if the laws of your country so require, the Policy may be complemented by local regulations..
It is important that you read this Policy carefully as it will provide the information you will need to make an informed selection of all the services we provide.
We trust that all of this information will be useful to you, however, you can contact us at any time for any additional clarification of our Policy.
First of all, we would like to provide you with the definition of a number of terms that you will see throughout this document:
- Online Services – This includes any online environment, website, channels, applications, promotions, as well as any other online initiative of a Repsol Group company.
- Personal data – This refers to any information concerning physical persons that identifies them or makes them identifiable, i.e., the information makes your identification possible.
- User or stakeholder – This refers to you as the owner of your information data.
- Third Parties – This refers to any physical or legal person separate from the Repsol Group or the user.
- Consent – This corresponds to any free, unequivocal, specific, and informed declaration of wishes through which you approve the use of your information.
- Use of personal data – technical procedures and operations, automated or otherwise, that are used to collect, record, store, use, produce, modify, block, or deletion as well as transfer or communication of data.
- Transfer or communication of data – Any disclosure of data to a Third Party.
- Unique Repsol User – This is the user you create when you register in the Consolidated Repsol Registry to access the Online Services. Its content is included in your user account in the Consolidated Registry (Your Account).
1. What is the Consolidated Repsol Registry?
Repsol has created a Consolidated Registry system to provide you with access to all the Online Services we offer. Via the Consolidated Registry, you can access Online Services by only providing the information that you have not previously provided and, according to each case, is necessary for the service. This means that you will not need to provide us with your information again each time that you register for another Online Service, but rather you will only need to provide the information which we do not have or is necessary to provide or improve the service.
To this end, once you have created Your Account your data will need to be exchanged between the different Repsol Group companies to identify for what services you have registered. In addition, we will use this information to inform you of news, events, promotions, and offers in the industries of transportation, automotive aid, insurance, finance, leisure, travel, house and home, consulting, or telecommunications.
2. What personal data does Repsol collect in the Online Services and how is it gathered?
We only collect the personal data that you provide us or information resulting from access to and use of an Online Services as well as your own browsing, such as (i) information provided in registration, (ii) information provided when using the service, (iii) information from any communication with us, (iv) information from your browsing, such as cookies (information on a user’s preferences collected when he/she visits a website), links, and system information, which you can find more information on in Section 2 of this Policy), (v) any other information you authorise us to use.
Similarly, provided that you approve it during registration of Your Account or registration for an Online Service, we can receive directly, from the social network of your choice, the information from your profile that you have authorised to share with third parties.
3. What does Repsol use your personal data for?
We use your personal data primarily to create and manage Your Account as a Unique Repsol User and provide you with the Online Services which you register for.
Additionally, the data from your account will be processed to create statistics on the user-friendliness of our Online Services, which will help us to make them easier to use and to provide you with personalised content on products and services related to transportation, automotive aid, insurance, finance, leisure, travel, house and home, consulting, or telecommunications.
When you register for an Online Service you can also approve additional use of your data. Do not worry; each time you register for an Online Service we will provide a complete explanation on how your information will be used so you can make an informed decision.
We will handle your data in accordance with the stipulations of the applicable regulations and, specifically, to (i) use the data which we have access to with sufficient confidentiality guarantees, and to (ii) adopt that technical safety and organisational measures necessary to prevent alteration, loss, or unauthorised access or use of your information. Nonetheless, keep in mind that, due to the current circumstances of security on the Internet, we are unable to guarantee that user information will not be used illicitly by third parties.
4. Where and how does Repsol store your personal data?
Your personal data is stored in databases for which Repsol has taken the steps necessary to store your personal data privately and securely in accordance with European regulations, some of the most protective regulations on user privacy.
Repsol is a global company and it is possible that, in certain cases, due to technical and organisational reasons, your personal data may be transferred internationally. In this case, we will accordingly inform you when you access the Online Service so that you may provide us with your consent in this regard. Notwithstanding, we will adopt the necessary legal measures.
5. Who has access to your personal data and why?
It is important that you know that Repsol S. A. is the company managing the database of your account and will be the entity using your information to control registration and access to the Online Services of the various Repsol Group companies providing the services which we will inform you of in each case.
In addition to registering for any of our Online Services, we will inform you which Repsol Group company will use your information to provide you the service.
We would like to inform you that your personal data is stored in databases that are only accessible to our employees and authorised Third Parties for use in accordance with the long-standing Repsol security policies in which we require our service providers to use your personal data solely and exclusively to perform the services we have requested of them, in accordance with the laws regulating personal data protection guaranteeing the confidentiality of the data.
Repsol will not transfer your data to any Third Party except for the Repsol Group companies for which you provide your consent and for specific purposes which you approve.
6. How long does Repsol store your personal data?
Repsol will store your personal data as long as you continue to use the Online Services. However, if we detect that you have not used or performed any activity on your account or any of our Online Services for a period of one (1) year, we will delete your account by blocking your data.
In this way, if you wish to use any of the Online Services again, you must register as a new user.
Keep in mind that you have the right to delete your personal data at any time. Please, review Question 7 – What rights do you have regarding the use of your data?
7. What rights do you have regarding the use of your data?
At any time, you can exercise a series of rights, known as ARCO rights, regarding the use of your data. These rights are inherent to each person and are therefore inalienable. Below, we have provided a description of them and an explanation as to what each consists of:
- Access. The right to know the information on how Repsol uses your personal data, but not that of other parties..
- Rectification. The right to correct or modify your data in the event they are inaccurate or incomplete to ensure that the information we have for you is correct.
- Cancellation. The right to request that we delete your data.
- Opposition. The right to request we do not use your data or that we stop using them when their use does not require your consent or when you would like us to stop delivering commercial communication. However, as you will be informed, there are Online Services for which you will be sent commercial communication in exchange for the use of the Online Service.
If you would like to exercise any of the rights that we have described in the above paragraph, you only need to send a request via email to REPSOL, S. A. to the following address email@example.com, including in the subject line: ARCO ONLINE USERS, so that we can identify and prioritise your request.
8. Does Repsol communicate with third-party web pages?
Repsol does not transfer your data to any Third Party with linked web pages in order to provide you with the opportunity to review interesting information on Repsol, except if you specifically approve it. These third-party websites are outside of our control and are not covered by this Policy. If you access other web pages using the links provided, remember that the web page operators can collect your personal data. Please, make sure that you are familiar with and agree to their legal notices and privacy regulations before continuing to browse on their web pages or providing any type of personal information.
9. How does Repsol use your data on social networks?
We recommend that you avoid providing personal information—yours or third-party information—when you interact with us on social networks. However, should you decide to provide personal information despite this recommendation, please know that we will use your data in accordance with this Policy.
Specifically, the data you provide to us via any social network will be included in a file held by REPSOL, S. A. with registered offices in Madrid, calle Méndez Álvaro, 44, 28045, in order to interact with you on the various social network so you can become more familiar with us, our operations, and values. This is not the ideal channel to submit complaints or suggestions. However, if you do send any request, claim, suggestion, or complaint related to another Repsol Group company via a social network, we inform that we will transfer your minimum data to the company so that it can help you and process your request appropriately.
In this case, you can exercise your rights to access, rectification, cancellation, and opposition with Repsol, S. A. or with the company to which we transfer your information, in accordance with the response to Question 7 – What rights do you have regarding the use of your data?
10. What happens with my personal data when I send/share any content from an Online Service with another person?
Some of our Online Services may give you the option to send/share some content with another person, however, you must know that you are the person who will perform this action by your own means. Repsol will not send or use any information or data of the Third Parties to which you wish to send or share any information.
11. What is Repsol’s policy regarding the personal data of minors?
The Online Services are intended for persons older than 18. We recommend that parents and guardians regularly check and supervise their children’s activity on the internet and social media. Please, make sure that your children do not provide us with personal data without first requesting your approval and consent.
If you are younger than 14, you must request the consent and approval of your parents or guardians to provide your personal data to the Repsol Online Services. If you do not understand something in our explanation, ask for help from your parents or guardians..
You can access the personal data of your children or minors younger than 14 under your responsibility in their private area. Remember that you have more details regarding this issue in Question 7 What rights do you have regarding the use of your data?
12. How can you deactivate your account from the Consolidated Repsol Registry and/or an Online Service?
You can deactivate Your Account by sending a request via e-mail to firstname.lastname@example.org.
Remember that if you deactivate Your Account, you will no longer be a Unique Repsol User. This means you will not be able to access the Online Services you have registered for. Keep in mind that to use any of the Online Services, it is necessary to have previously created an account as a Unique Repsol User.
You can deactivate any Online Service following the instructions that we provide and/or are specified in the corresponding specific conditions. If you deactivate an Online Service, you will simply no longer be able to access that service in accordance with the Service’s specific conditions. Your Account will continue to be active while any Online Service is active.
13. Can Repsol change the terms of the Policy?
In the event you do not agree to our new Policy, we regret to inform you that you will not able to continue using the Online Services affected by the changes.
You can exercise your ARCO rights in accordance with Question 7 What rights do you have regarding the use of your data?
14. What are your responsibilities?
You are responsible for all of the data you provide to Repsol, for the falsehood, inaccuracy, invalidity, and lack of authenticity of said data, as well as for the consent you provide for their use. You are also responsible for the third-party data that you provide and for which you are required to attain their consent.