Privacy policy

Effective date: October 10, 2024

Your privacy is important to us

In this Privacy Policy and Personal Data Treatment of Flotal Inc. (hereinafter, 'Flotal'), the terms under which personal data of employees, clients, suppliers, and other third parties related to the company are collected, used, stored, and protected are established.

This document seeks to guarantee the privacy and security of the information in compliance with applicable U.S. laws on personal data protection, such as the California Consumer Privacy Act (CCPA), Health Insurance Portability and Accountability Act (HIPAA), and other relevant federal and state regulations.

Introduction

Information about the controller

Flotal is a U.S.-based corporation specializing in fleet management, administration, and monitoring services by developing and commercializing specialized software. As the data controller, Flotal ensures the proper handling of personal data, applying the principles of confidentiality, security, and legality established by applicable regulations.

Tax domicile: Carretera Panamericana #5831 Col. Plan de Ayala; Tuxtla Gutiérrez, Chiapas.
Email: flotal@gpomontajes.com
Teléfono: +52 961 693 2867
Página web: Flotal

Legal framework and scope of application

This policy aligns with the provisions of the California Consumer Privacy Act (CCPA), the Health Insurance Portability and Accountability Act (HIPAA) (when applicable), and other relevant state and federal regulations regarding data privacy and protection. It applies to all Flotal activities involving the collection, storage, use, transmission, or deletion of personal data, whether in physical or electronic format.

Definitions

Personal data: Any information that relates to an identified or identifiable individual.
Processing: Any operation performed on personal data, such as collection, use, storage, sharing, or deletion.
Controller: Flotal, which determines the purposes and means of processing personal data.
Processor: A third party that processes personal data on behalf of the controller.
Data Subject: The individual to whom the personal data relates.

Personal data to be collected

Flotal Flotal may collect the following types of personal data, depending on the individual's relationship with the company:

Employees and Job Applicants:

Full name, nationality, marital status, official identification, social security number, educational and employment history, criminal records, work references, fingerprints, occupational health records, among others.

Clients:

Full name, business name, tax identification number, address, phone number, email, financial information, service requirements, purchase history, and contracts.

Suppliers:

Full name, business name, tax identification number, address, phone number, email, commercial information, billing, and payment history.

Sensitive Data:

Flotal will only collect sensitive data when strictly necessary and in compliance with applicable laws. This includes health-related data for employees and contractors to fulfill legal and occupational protection purposes.

Purposes of data processing

The personal data collected by Flotal will be processed for the following purposes:

Primary Purposes:

Fulfillment of contractual obligations.
Provision of requested products and services.
Billing and payments.
Quality evaluation of services provided.
Registration and management of employees, contractors, and suppliers.
Monitoring and management of vehicle fleets.

Secondary Purposes:

Sending promotional and commercial information.
Conducting market research and consumption analysis.
Advertising new products, promotions, or events organized by Flotal.
Contacting clients and suppliers for administrative, commercial, or service-related purposes.

Data sharing and transfer

Flotal will not sell, rent, or share personal data with third parties without the explicit authorization of the data subject, except in the following cases:

Transfers necessary to comply with legal obligations.
Flotal may subcontract third parties for certain services, requiring them to adhere to corresponding security and confidentiality measures. Authorized Transfers: Transfers explicitly authorized by the data subject for contract
Transfers explicitly authorized by the data subject for contract execution or service provision.

Data subject rights

Under applicable U.S. laws such as the CCPA, data subjects have the following rights:

Access: To know what personal data Flotal has about them.
Rectification: To request corrections to inaccurate or incomplete data.
Deletion: To request deletion of data when it is no longer necessary or improperly handled.
Opt-Out: To object to the processing of their data for certain purposes.

To exercise these rights, the data subject may submit a request to privacy@flotal.us, including a valid government-issued identification.

Information security

Flotal is committed to implementing technical, physical, and administrative measures to ensure the security of personal data, preventing its alteration, loss, unauthorized access, or misuse.

Data retention period

Flotal will retain personal data only for as long as necessary to fulfill the purposes for which it was collected and to meet legal obligations. Once the purposes are fulfilled or obligations terminated, data will be deleted following established procedures.

Modifications to the privacy policy

Changes to the Privacy Policy apply to your use of our Services after the «Effective Date».

Flotal reserves the right to modify this policy at any time, which will be notified to the data subject through the provided contact means or via its website. Continued use of Flotal's services implies acceptance of any changes made.

Contact

For inquiries, complaints, or to exercise CCPA rights, data subjects can contact Flotal at:

Email: flotal@gpomontajes.com
Phone: +52 961 693 2867
Address: Carretera Panamericana #5831 Col. Plan de Ayala; Tuxtla Gutiérrez, Chiapas

This policy is subject to the provisions of the California Consumer Privacy Act (CCPA) and its regulations, with the aim of guaranteeing the protection of personal data in all Flotal activities.