Data Protection Information – Appointment Reminder by SMS (Art. 13 GDPR)

Who is the data controller?

The data controller will be the TÜV Rheinland Group entity with which you book your ITV appointment:

• TÜV Rheinland Ibérica, S.A. (Tax ID A-78999612), Avda. de Burgos 114, 28050 Madrid.
• TÜV Rheinland Navarra, S.A. (Tax ID A-31236128), Soto de Aizoain s/n, Pol. Ind. Mercairuña, 31195 Pamplona (Navarra) – when the appointment takes place in Navarra.
• TÜV Rheinland Certio, S.L.U. (Tax ID B-65081820), C/ Pau Vila 22, 3rd floor, 08174 Sant Cugat del Vallès (Barcelona) – when the appointment takes place in Catalonia or the Balearic Islands.

Data Protection Officer (DPO) contact: dpr@es.tuv.com

What will we use your data for? (purposes)

We will use your phone number and the minimum appointment details (center, date/time, vehicle registration number) to:

• Send you an SMS reminder approximately 24 hours before the appointment.
• Manage incidents related to the appointment (e.g., an issue at the ITV station preventing the service from being carried out).
• Demonstrate compliance with this communication.

What is the legal basis?

Your consent (Art. 6.1.a GDPR) for sending the SMS reminder. You may withdraw your consent at any time without affecting the appointment already scheduled.

We will process your contact details and the vehicle registration number for the performance of the service contract.

What data do we process?

Your mobile phone number and the data strictly necessary for your appointment (center, date/time, vehicle registration number).

Who do we share your data with?

Data will not be shared with third parties unless legally required. Service providers acting as data processors (e.g., SMS sending platforms or telecommunications operators) may have access, under contracts that ensure GDPR compliance.

International data transfers

None are expected. If, for technical reasons, a provider requires transfers outside the EEA, they will be carried out with appropriate safeguards (e.g., Standard Contractual Clauses).

How long do we keep the data?

Until the reminder is sent and, afterwards, for a maximum of 30 days to demonstrate the delivery and handle incidents, or until you withdraw your consent, whichever occurs first.

Is it mandatory to provide your phone number?

Yes, so that we can notify you in case of any incident. However, receiving the SMS appointment reminder is optional.

Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, as well as withdraw your consent at any time, proving your identity when necessary, through:

• Postal mail addressed to the entity with which you booked your appointment, or
• Email to dpr@es.tuv.com (FAO: DPO).

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe your rights have been violated.

Automated decisions

No automated decisions or profiling are carried out for this purpose.