Privacy policy

1. General provisions

 

Any personal data you provide through this website will be processed by IMSI, acting as data controller.

IMSI is the owner of this website, with address at:

  • Baixada del Moli 15, Ed. Moli II, 1er – AD500 Andorra la Vella

Registered in the Companies Registry of the Principality of Andorra with the corresponding tax registration number.

For any questions related to data protection, you may contact our Data Protection Officer (DPO) as described in §3.

Access, contracting or electronic communication through this website is restricted to persons over 18 years of age. By providing us with personal data, you declare that you are at least 18. If it is found that the data has been provided by a minor under 18, it will be immediately deleted.

No personal data of third parties should be provided through this website. If this is unavoidable, the person providing the data assumes the responsibility of having previously informed the data subject, in accordance with the Andorran LQPD.

If, in order to handle a request, it is necessary to provide personal data of minors under 18, you declare that you are the parent or legal guardian, expressly consenting to the processing. In such cases, you may be required to prove parentage or guardianship with an official document (e.g., copy of family record book).

 

2. Applicable law

 

The processing of personal data is carried out in accordance with Law 29/2021 on the protection of personal data of the Principality of Andorra (LQPD) and its regulations.

This website operates from Andorra and is governed by Andorran law. The parties submit to the exclusive jurisdiction of the Andorran courts.

 

3. Data Controller and Data Protection Officer

 

  • a) Data Controller

    • IMSI with details as described in §1.

  • b) Data Protection Officer (DPO)

 

4. Purposes, legal bases and retention periods

 

  • a) Contact form

    • Purpose: to manage inquiries, complaints or information requests.

    • Legal basis: express consent of the user (acceptance checkbox).

    • Retention: during the processing of the request and, if applicable, as long as necessary to comply with legal obligations or claims.

  • b) Reservation or purchase of products and services

    • Purpose: management of purchases, reservations, deliveries and payments.

    • Legal basis: contract performance.

    • Retention: until completion of the contract and subsequently for the statutory limitation period of legal liabilities.

  • c) Creation of a user account

    • Purpose: to facilitate future purchases, reservations and queries.

    • Legal basis: express consent.

    • Retention: as long as the account remains active or until consent is withdrawn.

If the same data is used for several purposes with different retention periods, the longest one will apply.

 

5. Data recipients

 

Data may be communicated to:

  • IMSI’s service providers and contractors.

  • Financial institutions for payment management.

  • Competent public authorities, in compliance with legal obligations.

  • Third parties when required by law, to exercise rights, or to investigate fraud or security incidents.

 

6. Rights of data subjects

 

You may exercise the following rights:

  • Access to your personal data.
  • Rectification of inaccurate or incomplete data.
  • Erasure of your data (“right to be forgotten”).
  • Objection to processing.
  • Restriction of processing.
  • Data portability.
  • Withdrawal of consent given at any time.
  • Objection to automated decision-making, including profiling.

To exercise these rights, send a signed request with a copy of your ID to pdp@cimexauto.com.

In case of disagreement, you may file a complaint with the Andorran Data Protection Agency (APDA).

 

7. Security and confidentiality

 

IMSI applies appropriate technical and organizational measures to ensure the security and confidentiality of personal data, preventing unauthorized alteration, loss, processing or access.

 

8. Data breaches

 

In the event of a personal data breach, IMSI will notify the APDA without undue delay and, if there is a high risk to the rights and freedoms of individuals, will also inform the affected persons within the legal deadline (72 hours).

 

9. Changes to the privacy policy

 

This privacy policy may be updated at any time in accordance with current legislation. Any modification will be published on this website.