Version 3.0 – 15 September 2026. This policy is published in six languages. In case of any difference between the versions, the English version prevails.
This policy explains which personal data AD TYRES INTERNATIONAL collects on the website www.grip500.com, why we process it, how long we keep it, with whom we share it, and which rights you have. We wrote it to be read, not just published: if anything is unclear, write to dpo@adtyre.com.
1. Who is responsible for your data
The controller is AD TYRES INTERNATIONAL SLU, a company incorporated under the laws of the Principality of Andorra:
AD TYRES INTERNATIONAL SLU
C. Prat de la Creu, 59-65
esc. B 4e planta
AD500 Andorra la Vella
PRINCIPAT D’ANDORRA
Recording date: 30/05/2016
Fiscal registration number (NRT): L-711448-M
Company registration number: 16.339
Share capital: 1,000,000 EUR
It acts through its establishment in the European Union:
AD TYRES INTERNATIONAL EU (Malta Branch)
Registered with the Malta Business Registry under number OC 1277 – VAT number MT26896033
Level 3, Suite 2407, Tower Business Centre, Tower Street, Swatar, Birkirkara BKR 4013, Malta
In this policy, “AD TYRES”, “we”, “us” and “our” refer to this company. Our Malta branch is our establishment in the European Union for the processing described here, and the Office of the Information and Data Protection Commissioner (IDPC) of Malta is our lead supervisory authority.
Data Protection Officer. You can contact our Data Protection Officer at dpo@adtyre.com, or by post at the Malta address above, marked “Data Protection Officer”.
2. What this policy covers
This policy covers our corporate website www.grip500.com, published in six languages, and the emails exchanged through its contact form.
It does not cover the national Grip500 shops (grip500.fr, grip500.de, grip500.es and the other country websites), nor the other e-commerce websites operated by the AD TYRES group, which each have their own privacy policy. It does not cover the websites of third parties we link to.
The use of cookies and similar technologies is described in our separate Cookie Policy.
3. The data we process, why, and for how long
We process personal data only for the specific purposes described below. We never sell personal data. We use no audience measurement tool and no advertising tool on this website.
3.1 Visiting the website
| Data | Technical information sent by your browser: IP address, date and time, page requested, browser type and version, referring page. This information is recorded in our hosting provider’s server logs. |
|---|---|
| Purpose | Display the site, ensure its security and availability, detect and block abusive traffic. |
| Legal basis | Our legitimate interest in operating and securing our website (Article 6(1)(f) GDPR). |
| Retention | Server logs are kept by our hosting provider for a maximum of 12 months. |
3.2 Contact form
| Data | Your name, your email address, the subject and the content of your message, and any information you choose to include. The form is protected by a mathematical question checked on our own server; no third-party anti-spam service is used, and the form sets no cookie. |
|---|---|
| Purpose | Answer your request and follow it up. The form is not used to send you commercial messages. |
| Legal basis | Steps taken at your request prior to entering into a contract (Article 6(1)(b)) or our legitimate interest in answering the people who contact us (Article 6(1)(f)). |
| Recipients | The authorised AD TYRES staff concerned, on a need-to-know basis, at our Malta branch, at our headquarters in Andorra and at our Dubai branch (see section 5). |
| Retention | 3 years after our last exchange with you. |
3.3 Your language preference
| Data | When you read the site in one of its six languages, a cookie records that choice so that you find the site in the same language on your next visit. This is described in our Cookie Policy. |
|---|---|
| Purpose | Remember how you want the site displayed. |
| Legal basis | Our legitimate interest in giving you a site that works as you expect (Article 6(1)(f)). |
| Retention | 1 year. |
4. Who has access to your data
Within AD TYRES. Authorised staff only, on a need-to-know basis, for the purpose of answering the messages you send us.
Our processors. They act on our instructions and may not use your data for their own purposes. Our hosting provider is bound by a data processing agreement; the mailbox that receives your messages is operated by Google under its own terms.
| Processor | Service |
|---|---|
| Seo Hosting Ltd, 19 St. Mark Street, Valletta VLT 1362, Malta | Hosting of www.grip500.com on a shared server, and the related server logs. |
| Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland | Google mail services: the cm@grip500.com mailbox (Google Workspace) that receives the messages sent through the contact form, and the Google account through which the site sends them. |
Other recipients. Public authorities, courts and our legal advisers, where the law requires it or to establish, exercise or defend our rights.
We never sell or rent personal data, and we share it with no advertising or data broker company.
5. Transfers outside the European Economic Area
Andorra. Our headquarters is located in Andorra, a country that the European Commission recognises as ensuring an adequate level of protection (Decision 2010/625/EU). Your data therefore travels there with the same protection as in the European Union.
United Arab Emirates. Our Dubai branch (AD TYRES INTERNATIONAL SLU – DMCC Branch, Mazaya Business Avenue BB1, Floor 45, Unit 4501, Dubai) may access the messages described in section 3.2. The United Arab Emirates are not covered by an adequacy decision. This access is internal to our company, restricted to authorised staff who need it for customer service, protected by the measures described in section 7 (encrypted connections, personal accounts), and governed by our internal data protection rules, which require our Dubai staff to apply this policy. You can obtain more information about these safeguards by writing to dpo@adtyre.com.
Google. Google processes email in data centres located in the European Union and in the United States. These transfers are covered by the Standard Contractual Clauses of the European Commission included in Google’s data processing terms, and by Google LLC’s certification under the EU-U.S. Data Privacy Framework.
6. Your rights
Under the GDPR you have the right to:
- access your personal data and obtain a copy;
- rectify inaccurate or incomplete data;
- erase your data, in the cases provided by law;
- restrict the processing, in the cases provided by law;
- object to processing based on our legitimate interest, for reasons relating to your particular situation;
- receive the data you provided to us in a structured, commonly used and machine-readable format (portability);
- withdraw your consent at any time where processing is based on it;
- not be subject to a decision based solely on automated processing: we make no such decision.
How to exercise them. Write to dpo@adtyre.com or to the postal address in section 1. We may ask you to confirm your identity. We answer within one month; this period may be extended by two further months for complex requests, in which case we will tell you.
Complaints. You can lodge a complaint with our lead supervisory authority, the Office of the Information and Data Protection Commissioner (IDPC), Malta, idpc.org.mt, or with the supervisory authority of the country where you live or work, for example the CNIL in France (www.cnil.fr).
7. How we protect your data
- Encrypted connection (HTTPS) across the whole site.
- The fonts used by the site are served from our own server: browsing this site sends nothing to Google.
- Administration access restricted to authorised staff with personal accounts.
- Software kept up to date, and a mathematical anti-spam question that protects the contact form without calling any third-party service.
No system is entirely secure. If you suspect an incident affecting your data, please write to dpo@adtyre.com immediately.
8. Other information
Sources. We obtain your data from you alone, when you fill in the contact form or write to us. We buy no contact list and we receive no data about you from third parties.
Automated decisions. We make no decision producing legal or similarly significant effects based solely on automated processing, and we do no profiling.
Minors. This site is intended for professionals and adults; we do not knowingly collect data about children.
Changes. We update this policy when our processing or the law changes. The version and date appear at the top.