Yay Privacy Policy
In accordance with the regulations on the Protection of Personal Data, namely Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights, be informed of the processing of your data:
1. Who is the data controller?
Aena S.M.E., S.A.
Address: C/ Peonías, 12. 28042, Madrid.
C.I.F: A86212420
Commercial Registry of Madrid, Volume 28,806, Folio 211, Section 8, Sheet M-518648.
Contact data of the Data Protection Officer: dpd@aena.es
2. Which data are we going to process?
Identification and contact details (name, surname, email, telephone number, ID number), registration number, make, model and color of the vehicle, credit card details (token, expiry date), driver's rating.
Your voice (if you call customer service).
3. Why do we process your data? On what grounds do we process them?
We inform you that all the information we request from you is required for the purposes described in this privacy policy and if you do not provide it, we will not be able to contact you or provide you with a response to any request you make. For this reason, we reserve the right not to respond or process any request if you do not provide us with the aforementioned data.
It is important that you ensure the accuracy of the personal data you provide and we may periodically ask you to review and update your personal data to ensure that it is as accurate and truthful as possible.
Main Purpose: We will process your data in order to manage your booking on the Yay website, as well as the payment, based on the execution of the contract (acceptance of terms and conditions).
Additional Purposes: We will also use your personal data to undertake satisfaction surveys and market research (including anonymised analytics), based on our legitimate interest in improving the provision of this service.
We will also process your data to send you marketing communications about our own and/or third party products and services, based on the option you have chosen and on your tastes and preferences. This processing is based on your consent which can be withdrawn at any time on your Yay user profile or by sending an email to rgpd-derechos-comercial@aena.es with the subject "Yay Consent Withdrawal".
If you access the service via the APP, be advised that, for the additional purpose of commercial advertising, we will store certain information on your devices, so the consent granted for this processing also implies consent to store this type of information on your equipment. You may withdraw your consent, by the means indicated previously for withdrawing commercial communication consent, as well as by uninstalling the APP and installing it again.
Market research and analytics do not involve storing information on your device.
If you call our customer service, we will save the conversation for the sole purpose of providing better service to our customers, responding to queries and incidents and improving the service itself, based on our legitimate interest in improving the service and the quality offered to our customers.
4. How long are we going to keep your data?
Your data will be kept for the duration of the commercial relationship and, subsequently, for the relevant legal periods according to the type of foreseen data and purposes.
Personal data subject to processing based on your consent will be kept for the purposes for which they are processed until you revoke your consent.
Conversations will be kept for a maximum of 3 years.
You may also request the deletion of your data at any time.
Notwithstanding the foregoing, your data will be kept duly blocked for as long as liabilities may arise from the execution of our contractual or pre-contractual relationship, as well as for the fulfilment of other legal obligations incumbent upon Aena.
In this respect, Aena guarantees that it will not process said data unless it is necessary for the creation, exercise or defence of claims or when it is required by Public Administrations, Judges and Courts during the period of limitation of your legal rights or obligations.
5. To whom do we transfer your data?
Your data may be communicated to other companies in the Aena group, as well as to the bank for collection and to the company responsible for providing the valet parking service and complementary car park services, all in order to manage the service and/or product contracted by you, based on the contractual relationship between you and Aena when you accept the terms and conditions.
None of your recorded conversations will be shared with third parties.
Aena may communicate your data to third parties to whom it is obligated to transmit information, such as public authorities, for the purpose of complying with the requirements of such authorities and the applicable regulations, where applicable.
Aena may also communicate the data to companies contracted by Aena to carry out satisfaction surveys and market studies.
We do not expect any International Data Transfers.
6. What do we mean by profiling and decision-making based on profiling?
Provided that Aena has the legitimacy to send you marketing communications based on your tastes and interests, we will use your interactions on the website and the contracting of products and/or services to tailor advertising according to your preferences. We will also undertake market research by means of anonymised analytics, in order to better understand the type of customers who access this service.
You also have the right not to be subject to decisions based on automated processing (including profiling), and you may exercise this right at any time by following the instructions set forth in point 8 How can you exercise your data protection rights?.
7. Which security measures are guaranteed for your data?
Aena, as the data controller, will take the necessary technical and organisational measures to ensure the security of the personal data provided, avoiding their alteration, loss, or unauthorised processing.
8. How can you exercise your rights in terms of data protection?
You have the right to obtain confirmation about the existence, or lack thereof, of the processing of your personal data. The General Data Protection Regulation stipulates the interested party has rights to:
Access their data.
Request rectification or deletion of their data.
Request limitation of the processing of their data.
The portability of their data.
Not to be subject to automated decisions (by mail to rgpd-derechos-comercial@aena.es indicating in the mail "Unsubscribe Decisions Yay").
Oppose the processing of your data.
As a user, you have the right to withdraw the consent of commercial communications at any time, without affecting the management of orders. To do so, you can access your profile as a Yay! user, where you can revoke your consent, or by email to rgpd-derechos-comercial@aena.es with the subject "Yay Consent Withdrawal".
To exercise the recognised rights, as interested party you may send an email rgpd-derechos-comercial@aena.es , write to Calle Peonías 12, 28042, Madrid or do so on the Telematic Services Portal (https://serviciostelematicos.aena.es).
For any doubts regarding Data Protection, you may contact our Data Protection Officer via the following email address: dpd@aena.es.
You may also submit a complaint to the Spanish Data Protection Agency (AEPD - www.aepd.es ).
9. Amendment to this Privacy Policy
Aena reserves the right to change this privacy policy, and therefore recommends that you, as a user, periodically review its content.
Last update: 31/05/2022