Privacy policy

This policy explains what personal data the Asociación Española del Vehículo Autónomo Conectado (AEVAC) processes through aevac.org, what it uses it for, on what legal basis, who else receives it and how you can exercise your rights. It is governed by Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and by Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and the guarantee of digital rights (LOPDGDD).

Who is responsible for your data

Asociación Española del Vehículo Autónomo Conectado (AEVAC).
Calle Víctor Hugo 4, 1.º dcha., 28004 Madrid, Spain.
Tax ID (NIF): G-87949053.
Email: info@aevac.org.
Website: aevac.org.

What data we process and why

You do not need to register to browse the website. We only process the data you give us, in forms and in comments, and the technical connection data your browser sends when loading pages.

Contact form

On the Let's talk page you can write to us. We ask for the reason for your enquiry, your name, your company or organisation and your email address. The text of the message is optional.

We use this data to reply to your enquiry and, if you ask us to, to prepare a proposal. The message reaches us by email at the website's administration mailbox. The legal basis is your consent, which you give by ticking the acceptance box and submitting the form (Article 6.1.a GDPR). If your enquiry is a request for services, also the application, at your request, of pre-contractual measures (Article 6.1.b GDPR).

Newsletter

If you subscribe to the newsletter, we ask only for your email address and for you to tick the acceptance box. We use it to send you the AEVAC newsletter with news and activities of the association. The legal basis is your consent (Article 6.1.a GDPR and Article 21 of Spanish Law 34/2002 of 11 July on information society services and electronic commerce, LSSI-CE).

You can unsubscribe whenever you like, free of charge: just ask us at info@aevac.org.

Blog comments

To comment on a post we ask for your name and your email address and, if you wish, your website. Your name, your website and your comment are published with the post; your email is not published. WordPress, the software the website runs on, also stores the IP address and the browser details you comment from, to help detect unwanted messages.

To show a profile picture next to the comment, WordPress sends the Gravatar service a code calculated from your email address, not the email address itself. If you tick the box "Save my name, email and website in this browser", your browser stores that data in cookies for one year so that you do not have to type it again.

The legal basis is your consent, which you give by submitting the comment (Article 6.1.a GDPR).

Protection of the forms

The website uses Google reCAPTCHA, a Google service that checks whether a submission is made by a person or an automatic program, to stop unwanted messages. It may be loaded on all pages of the site, not just those with a form. When it loads, your browser sends Google technical connection data, such as your IP address. The legal basis is AEVAC's legitimate interest in protecting its forms against abuse (Article 6.1.f GDPR).

Content from other companies on the blog

The blog posts show author photos that are loaded from Gravatar, a service of the company Automattic. Some posts include YouTube videos, from Google, in enhanced privacy mode. When you open those posts, your browser connects to those companies' servers, which receive technical data such as your IP address. The legal basis is AEVAC's legitimate interest in showing that content (Article 6.1.f GDPR). You can find more detail in the cookie policy.

If you contract services with AEVAC in the future

AEVAC plans to offer paid services. When it does, it will process the data of its customers and of the contact persons of customer organisations to manage the contract, invoicing, payments and tax and accounting obligations. The legal basis will be performance of the contract (Article 6.1.b GDPR) and compliance with legal obligations (Article 6.1.c GDPR).

With that data it may also ask for your opinion on the service you received, out of its legitimate interest in improving it (Article 6.1.f GDPR), and send you information about AEVAC services similar to those you have contracted. You will be able to object to those communications easily and free of charge, both when you give us your data and in each communication (Article 21.2 LSSI-CE).

Whether you are obliged to give us your data

No. The fields marked as required are the ones we need to reply to you or to send you the newsletter; without them we cannot do so.

Automated decisions

AEVAC does not build profiles with your data or make decisions about you automatically. The only automatic process is reCAPTCHA, which may prevent a form from being submitted if it considers it automated. If this happens to you, write to us at info@aevac.org.

Who else receives your data

We do not pass on your data to other entities, except where legally required or with your express authorisation. For the website to work, some data reaches these companies:

• Google, through reCAPTCHA and YouTube videos. It processes data according to Google's privacy policy.
• Automattic, through Gravatar. It processes data according to Automattic's privacy policy.
• The companies that provide AEVAC with website hosting and email services, which process data to provide that service.
• When AEVAC provides paid services, the public administrations to which the law requires data to be reported, such as the Tax Agency.

Transfers outside the European Economic Area

Google LLC and Automattic Inc. are headquartered in the United States, so the technical data they receive may be processed in that country. According to Google, Google LLC is certified under the EU-US Data Privacy Framework and uses standard contractual clauses where necessary. According to Automattic, it uses standard contractual clauses approved by the European Commission.

How long we keep your data

We keep your data only for as long as we need it for the purpose for which you gave it to us:

• Contact messages: the time needed to deal with your enquiry and any follow-up you ask for.
• Newsletter: until you unsubscribe.
• Comments: while they remain published or until you ask us to delete them.
• Customer data, when there is any: for the duration of the relationship and, afterwards, for the time required by tax and commercial law.

After that, the data is blocked: it is kept separately, only available to judges and courts, the Public Prosecutor's Office and the competent administrations, for as long as liability for the processing may be claimed. After that period, it is destroyed.

Your rights

You can ask us at any time to:

• Access your data and know how we process it.
• Rectify data that is inaccurate.
• Erase your data.
• Object to our processing it.
• Restrict its processing.
• Receive it in a format you can take to another entity (portability).
• Withdraw your consent. Withdrawing it does not affect what we did with it before.

To exercise them, write to info@aevac.org or send a letter to Calle Víctor Hugo 4, 1.º dcha., 28004 Madrid, Spain, stating which right you want to exercise. We will reply within one month. If the request is complex, that period may be extended by two more months, and in that case we will let you know within the first month.

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (Article 77 GDPR). Beforehand, if you prefer, write to us at info@aevac.org and we will try to resolve it.

Security

We apply measures to protect your data, such as an encrypted connection (HTTPS) and a limit on login attempts to the website's administration panel. No system is completely secure, but if we detect a problem affecting your data we will act as the regulations require.

Changes to this policy

If the way we process your data changes, we will update this page.

Last updated: 3 October 2026.