DATA PROTECTION POLICY

In compliance with the provisions of the European Regulation 2016/679 General of Data Protection and in the Organic Law 3/2018, dated 5 December, on the Protection of Personal Data and the guarantee of digital rights, the lessees are informed that the Identity of the processing manager is the commercial leasing company, specifically Auto Hugar, SA, with CIF A96047014 and address at C/ Fira de la Cerámica i Vidre 1 - Piso 1 46930 Quart de Poblet (Valencia) being the contact details, which are contained in this contract.

In any case you can consult the additional and detailed information on Data Protection on our website: www.keygorent.com.

You are informed that for a greater guarantee in the fulfilment of the Data Protection a Delegate in Data Protection has been designated whose contact information is the following: Grupo Ugarte de Automoción, S.L., with email address protecciondedatos.keygorent@keygorent.com

The purposes for which we will process your data are those of the provision and management of the vehicle leasing service and execution of this contract, the sending of commercial communications, the management of traffic violations and that of vehicle insurance, as well as the control (location) of the vehicle fleet and the sending of advertising about the company's products and services. The legitimacy for the described processing is found in the contract, when it comes to the presentation of the contracted service, the fulfilment of legal obligations in the cases of traffic violations and/or police requirements, as well as in the legitimate interest in the related processing for the sending of advertising or with regard to the location of the vehicle. Other legitimisation will be based on the consent of the customer.

Personal data will be kept for the time necessary to fulfil the purpose for which they were collected. If the data is used for several purposes, which require us to keep it for different periods, we will apply the longest term required.

In any case, we limit access to your data only to those who need to use it for the carrying out of their functions.

Our data retention periods are based on business needs, so that in relation to those personal data that are no longer necessary, access to them will be limited to the fulfilment of strictly legal obligations or they will be securely destroyed.

Purposes related to the execution of a contract: regarding the use of the information for the management of any contractual obligation that we have with the customer, we will keep that data during the period of validity of the contract and for the following ten years, in order to respond to possible queries or subsequent claims.

Purposes related to compliance with legal and regulatory obligations: certain information must be maintained for the periods required by the specific regulations that result from application (fiscal, commercial, money laundering, etc.).

Marketing purposes: regarding the use of your information for marketing purposes, we will retain that information for that purpose during the two years following the date we last obtained your authorisation to direct marketing communications, unless you request that you be excluded from them, revoking the consent given.

The company will not transfer data to third parties unless there is a legal obligation, or it is necessary for the presentation of the contracted service, you can consult additional information regarding the recipients of the data atwww.keygorent.com

You may exercise the rights of access, rectification, deletion, limitation of the processing, opposition or, where appropriate, the portability of the data by request addressed to the Data Controller, providing a copy of your identity document to the email addressprotecciondedatos.keygorent@keygorent.com, specifying the right you wish to exercise.

Finally, we inform you that you can go to the Spanish Agency for Data Protection and other competent public bodies for any claim arising from the processing of personal data.

Auto Hugar, S.A. reserves the right to modify its Privacy Policy, according to its own criteria, or motivated by a legislative or jurisprudential doctrinal change of the Spanish Agency for Data Protection. Any modification of the Privacy Policy will be published at least ten days before its effective application on the company's website