The present Privacy Policy has been developed taking into account the provisions of Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of individuals with regard to the processing of personal data and the free movement of such data, hereinafter referred to as the GDPR, as well as Organic Law 3/2018, of December 5, on the Protection of Personal Data and digital rights (hereinafter, LOPDGDD) and other applicable regulations.
This Privacy Policy aims to inform individuals who provide their personal data, and/or the data of the person they represent, about the specific aspects related to the processing of their data, the purposes of the processing, the contact details to exercise their rights, the retention periods for the information, and security measures, among other things.
In terms of data protection, RIC SUN ESPAÑA, S.L. should be considered the Data Controller, in relation to the files/processing identified in this policy, specifically in the section on Data Processing. The identifying information of the owner of this website is provided below:
All information collected by RIC SUN ESPAÑA S.L. will be treated fairly, lawfully, and transparently. The data requested in each of the treatments will consist only of those strictly necessary to achieve the intended and informed purpose in each case.
Thus, the collected data will be adequate, relevant, and not excessive in relation to the purposes for which they are processed in each case. Therefore, personal data will be collected for specific, explicit, and legitimate purposes, and will not be subsequently processed in a manner incompatible with those purposes. Additionally, they will be updated whenever necessary.
In general, within the framework of various activities conducted in the organization, the following types of data are collected:
In general terms, personal data is processed for the following purposes:
No profiles will be created or automated decisions made based on the collected personal data.
However, all explicit purposes for which each treatment is carried out are outlined in the informative clauses included in each data collection method (web forms, paper forms, announcements or posters, informational notes, invoices, contracts, and other documents containing personal data).
As a general rule, before processing personal data, RIC SUN ESPAÑA, S.L. obtains express and unequivocal consent from the data subject, incorporating informed consent clauses into different information collection systems.
However, if the consent of the data subject is not required, the legitimizing basis for the processing, as supported by RIC SUN ESPAÑA, S.L., is the existence of a specific law or regulation authorizing or requiring the processing of the data subject’s data.
As a general rule, RIC SUN ESPAÑA, S.L. does not transfer or communicate data to third parties, except as legally required. However, if necessary, such transfers or communications of data are communicated to the data subject through the informed consent clauses contained in the different data collection methods.
As a general rule, personal data is always collected directly from the data subject. However, in certain exceptions, data may be collected through third parties, entities, or services other than the data subject. In this regard, this information will be conveyed to the data subject through the informed consent clauses contained in the different data collection methods and within a reasonable period, once the data is obtained, and at the latest within one month.
The information collected from the data subject will be retained for as long as necessary to fulfill the purpose for which the personal data was collected. Once the purpose is fulfilled, the data will be deleted. This deletion will result in the blocking of the data, retaining it solely at the disposal of public authorities, judges, and courts, to address possible responsibilities arising from the processing, during the statutory limitation period for such responsibilities. Once this period is completed, the information will be destroyed.
For informational purposes, the legal retention periods for information related to different matters are outlined below:
According to European regulations, the rights of data subjects are as follows:
The requester can exercise these rights through the following means:
In any case, the requester can seek the protection of the Spanish Data Protection Agency through its website.
In this regard, RIC SUN ESPAÑA SLU will respond to the request as soon as possible, taking into account the deadlines established in data protection regulations.
The data requested in the designated fields marked with an asterisk (*) or provided in the documents or media where information is provided are strictly necessary for the purpose for which they are collected or for the provision of optimal service to the data subject or through a legal obligation imposed on the data controller or a necessary requirement for entering into a contract. The inclusion of data in the remaining fields is voluntary.
If all the required data is not provided, it is not guaranteed that the information and services provided will fully meet the data subject’s needs. Therefore, if the requested data is not provided or is provided incorrectly or incompletely, the request cannot be processed, making it impossible to provide the requested information or carry out the services.
Similarly, the user guarantees that the information transmitted in any of the forms is truthful, accurate, and corresponds to their own data.
Our platform services are not intended for minors. Therefore, only individuals over 18 years old are allowed to register. In case of non-compliance, it is warned that any responsibilities that may arise as a result of the use of our platforms will be the responsibility of the parents or guardians of the minor.
To prevent the use of our services by minors, we attempt to verify the age of our users when they register by requesting their date of birth.
The security measures adopted by RIC SUN ESPAÑA SLU comply with the requirements established in Article 32 of the GDPR.
In this regard, considering the state of the art, the implementation costs, the nature, scope, context, and purposes of the processing, as well as the varying probability and severity risks to the rights and freedoms of individuals, RIC SUN ESPAÑA SLU has established appropriate technical and organizational measures to ensure the appropriate level of security for the existing risk.
In any case, RIC SUN ESPAÑA SLU has implemented sufficient mechanisms to: