Privacy Policy

The Copart Group of Companies, including Copart Autos España, SLU, consists of various legal entities with Copart, Inc. as the ultimate parent company. This Privacy Notice is issued on behalf of the data controller Copart Autos España, SLU (referred to as “Copart”, “we”, “us” or “our”).

Depending on the context of your relationship with us, we may collect different categories of data. The tables below detail the categories of data subjects and categories of personal data that we process.

We collect Personal Data for the following reasons:

• To provide you with information, products, or services that you request from us, Art. 6(1)(b) GDPR.
• To provide you with email alerts, event registrations and other notices concerning our products or services, or events or news, that may be of interest to you Art. 6(1)(b) and Art. 6 (1)(a) GDPR.
• As necessary or appropriate under our legitimate interests to protect the rights, property or safety of us, our members, our customers, or others, Art. 6(1)(f) GDPR.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations, Art. 6(1)(c) GDPR.

Special Categories

Except in the context of an employment relationship, we do not collect Sensitive Data, which is information regarding criminal convictions or offenses, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, genetics and biometric data. However, because some of our communication channels, such as e-mail, social media, and telephony systems allow end users to provide us with unstructured data, it is possible for Copart to receive unsolicited Personal Data provided by the message sender. We request that you refrain from sharing Sensitive Data through any of these channels.

In addition to sharing your Personal Data within the Copart Group, we may disclose your Personal Data to external third parties in order to provide you with certain of the services you have requested from us. When we disclose Personal Data to an external third party vendor for a business purpose, we enter into a contract or data processing agreement according to Art. 28 GDPR with the vendor that describes the purpose of the processing and requires the recipient to both keep that Personal Data confidential and not use it for any purpose except performing the contract.

We have disclosed the following categories of Personal Data for a business purpose to the corresponding categories of third parties indicated below:

In addition, we may also disclose your Personal Data in the following circumstances:

• In connection with the sale of a business (including merger, acquisition, or sale of all or a material portion of the business’s assets, change in corporate control, or insolvency or bankruptcy proceedings),
• To enforce our terms of service or rules; to ensure the safety and security of our users and third parties; to protect our rights and property and the rights and property of our users and third parties; and to comply with legal process, including pursuant to a judicial warrant, rule, order or subpoena, or in other cases if we believe in good faith that disclosure is required by law or regulation, in each case, without obligation to contest such legal process.

Depending on whether you provide your affirmative consent, we may use your identity, contact, technical, usage and transaction data to form a view on what products or services we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant to you.

Withdrawing Consent for Promotional Marketing

Copart members who have previously opted-in to promotional marketing may also opt-out of promotional marketing by submitting a verified request to privacy@copart.es. Additionally, all recipients of marketing and promotional communications may opt-out of future marketing communications by clicking on the link we include at the bottom of all of our email communications.

Some recipients of your Personal Data are located outside of your country or have offices in countries where data protection laws may provide a different level of protection than the laws in your country. When transferring Personal Data to such recipients, we provide appropriate safeguards.

The transmission of Personal Data between and among certain members of the Copart Group (Copart, Inc. – United States, Copart India Private Limited – India) and its direct and indirect wholly-owned subsidiaries, is based on our worldwide data protection principles contained in our Intra-Group Processing Agreement, which incorporate both controller to controller and controller to processor model clauses prescribed by the European Union. Through our Intra-Group Processing Agreement, the Copart Group undertakes to protect your Personal Data and to comply with applicable data protection laws and regulations.

Subject to possible restrictions under national law, as a data subject under the GDPR, you may have certain rights regarding the Personal Data that we collect on you. These rights are described in the below table.

Exercising Your Rights

You may generally exercise one or more of your rights described above free of charge. When requests are manifestly unfounded or excessive, in particular because of their repetitive character, we may charge an appropriate fee in accordance with the applicable regulations or refuse to process the application.

To exercise your rights as a data subject under the GDPR, please submit a verifiable request to:
privacy@copart.es.

Additionally, as a data subject under the GDPR, you have the right to lodge a complaint with your applicable supervisory authority. However, we would appreciate the chance to deal with your concern before you approach a supervisory authority so please contact us in the first instance.

When you use our services, we and selected third parties may use cookies and similar technologies to provide you with a better, faster, and safer user experience or to show you personalized advertising. Cookies are small text files that are automatically created by your browser and stored on your device when you use the services.

Our cookies and similar technologies have different functions:

• They may be technically necessary for the provision of our services;
• They help us optimize our services technically (e.g. monitoring load times and errors);
• They help us improve your user experience;
• They allow us to show you more relevant advertisements.

Please visit our Cookie Policy if you wish to review our cookies further detail.

We implement and maintain reasonable security measures to prevent your Personal Data from being used, accessed, altered, or disclosed in an unauthorized way. Please note that any information you send to us electronically may not be secure when it is transmitted to us. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us. Please be aware that despite our best efforts, no security measures are perfect or impenetrable.

Data Retention

We will only retain your Personal Data for as long as necessary to fulfill the purpose we collected it for, including for the purpose of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for Personal Data, we consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements.

This website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

When we need to collect Personal Data by law, or under the terms of the contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you. For example, if you do not provide us with required Personal Data, we may be unable to provide you with the services you have requested. In this case, we may have to cancel a contract you have with us, but we will notify you if this is the case.

We will not discriminate against you for exercising any of your Personal Data rights. Unless permitted under applicable law, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

However, we may offer you certain financial incentives permitted by applicable law that can result in different prices, rates, or quality levels. Any legally permitted financial incentive we offer will reasonably relate to your personal data’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time.

We will only use your Personal Data for the purposes for which we collected it. If we need to use your Personal Data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your Personal Data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Changes to our Privacy Policy

We reserve the right to amend this privacy policy at our discretion and at any time. When we make changes to this privacy policy, we will notify you by email or through another appropriate communication method.