FIVEplat Marketplace privacy policy

1. Data controller

The data controller is AGILE DIGITAL SOLUTIONS, S.L. («AGDS»), Spanish tax ID B72527815, registered office at Calle Valle de Enmedio 2, Escalera E, Piso 1C, Madrid (Spain), registered in the Madrid Companies Register, Volume 44068, Folio 128, Sheet M-777335. For data protection matters, write to clientes@agdigitals.com.

This policy covers FIVEplat Marketplace (marketplace.fiveplat.es): your account, move requests, quotes and what happens after a move is awarded. The forms and browsing on fiveplat.es are covered by the website privacy policy.

2. Data we process

Depending on your type of account (individual, customer company or carrier) and what you do on the platform:

• Account data: name, email and password.
• Company data: legal name, tax ID (CIF or NIF), registered tax address and contact phone.
• Carrier data: transport licence number and fleet size.
• Requests and moves: pickup and delivery addresses, dates, and each vehicle's details (make, model, number plate and chassis number or VIN).
• Quotes: price, conditions and dates offered by each carrier.
• Ratings: the ones you give and receive after each move.
• Messages and support: what you write to us and to the other party of a move.
• Technical data: IP address and access and activity logs, needed to keep accounts secure.

If you add other people from your company or give us details of third parties (for example, whoever hands over or collects a car), you are responsible for informing them of this processing.

3. What we use it for

• Creating and managing your account and, for customer company and carrier accounts, checking the details before activating it. A person does that review.
• Publishing requests, sending and receiving quotes, awarding moves and tracking them.
• Putting the customer and the carrier in touch when a move is awarded.
• Managing ratings.
• Handling questions, incidents and complaints.
• Issuing invoices and meeting accounting, tax and transport obligations.
• Protecting the platform and preventing fraud.
• Sending you notices about your account and your moves. Marketing messages only if you agree to them.

4. Legal basis

• Performance of the contract (the terms of use): the account, requests, quotes, awarding and communication between the parties.
• Legitimate interest of AGDS and of users: checking companies before activating them, security and fraud prevention, and ratings.
• Legal obligation: invoicing, accounting and requests from the authorities.
• Consent: marketing messages. You can withdraw it at any time.

5. Who we share it with

• The other party of the move, only once it is awarded. Quotes are blind: no carrier sees the others' offers, and neither the customer nor the carriers get each other's contact details until the move is awarded. Then each of them receives what is needed to carry out the move: name or legal name, phone, addresses and vehicle details.
• Processors: Amazon Web Services hosts the platform and sends its emails from European Union regions, under a contract that meets Article 28 GDPR. Any other technical provider we may use would process the data with the same safeguards.
• Public authorities and courts, when the law requires it.

We do not sell your data or hand it to third parties for their advertising.

6. International transfers

The platform's data is stored in the European Union. If a provider ever had to process it outside the European Economic Area, it would do so with the safeguards of the GDPR, such as the European Commission's standard contractual clauses.

7. How long we keep it

• Account data, while the account is active.
• Moves, awarded quotes and invoices, for the legal periods: six years for commercial records (Article 30 of the Spanish Commercial Code) and the limitation period of tax obligations.
• Requests and quotes that were not awarded, while the account is active.
• Technical access logs, for as long as security requires and twelve months at most.

When you close your account, we block the data the law requires us to keep and delete the rest.

8. Automated decisions

We do not take automated decisions with legal effects on you. A person decides whether an account is approved. The platform may sort requests by how well they fit a carrier's routes, but each user decides who quotes and who gets the move.

9. Your rights

At any time you can exercise your rights of:

• Access to your data.
• Rectification of inaccurate data.
• Erasure when it is no longer needed.
• Objection to and restriction of processing.
• Portability of the data you gave us.
• Withdrawal of consent, without affecting earlier processing.

Write to clientes@agdigitals.com saying which right you want to exercise. If you think we have not handled it properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

10. Security

We apply technical and organisational measures suited to the risk to protect your data from unauthorised access, loss or alteration. Keep your password safe and tell us if you think someone has got into your account.

11. Changes to this policy

If we change this policy we will tell you on the platform or by email before it applies, and publish the new version here with its date.