The present Privacy Policy has been developed taking into account the provisions of Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of individuals with regard to the processing of personal data and the free movement of such data, hereinafter referred to as the GDPR, as well as Organic Law 3/2018, of December 5, on the Protection of Personal Data and digital rights (hereinafter, LOPDGDD) and other applicable regulations.

This Privacy Policy aims to inform individuals who provide their personal data, and/or the data of the person they represent, about the specific aspects related to the processing of their data, the purposes of the processing, the contact details to exercise their rights, the retention periods for the information, and security measures, among other things.


In terms of data protection, RIC SUN ESPAÑA, S.L. should be considered the Data Controller, in relation to the files/processing identified in this policy, specifically in the section on Data Processing. The identifying information of the owner of this website is provided below:

  • Data Controller: RIC SUN ESPAÑA, S.L.
  • Postal Address: Calle Orense, 37, Torre Norte, Piso 10, 28020, Madrid, (Spain).
  • Email Address:
  • Phone: 910886320

Processing of personal data

All information collected by RIC SUN ESPAÑA S.L. will be treated fairly, lawfully, and transparently. The data requested in each of the treatments will consist only of those strictly necessary to achieve the intended and informed purpose in each case.

Thus, the collected data will be adequate, relevant, and not excessive in relation to the purposes for which they are processed in each case. Therefore, personal data will be collected for specific, explicit, and legitimate purposes, and will not be subsequently processed in a manner incompatible with those purposes. Additionally, they will be updated whenever necessary.

In general, within the framework of various activities conducted in the organization, the following types of data are collected:

  • Identifying information.
  • Academic, professional, and training data.
  • Detailed employment data.

Purposes of the processing

In general terms, personal data is processed for the following purposes:

  • Contact: Responding to information requests received about the products and services offered, as well as answering any other type of questions sent by users.
  • Candidates: Conducting internal personnel selection processes, both current and future.

No profiles will be created or automated decisions made based on the collected personal data.

However, all explicit purposes for which each treatment is carried out are outlined in the informative clauses included in each data collection method (web forms, paper forms, announcements or posters, informational notes, invoices, contracts, and other documents containing personal data).


Legitimacy for data processing

As a general rule, before processing personal data, RIC SUN ESPAÑA, S.L. obtains express and unequivocal consent from the data subject, incorporating informed consent clauses into different information collection systems.

However, if the consent of the data subject is not required, the legitimizing basis for the processing, as supported by RIC SUN ESPAÑA, S.L., is the existence of a specific law or regulation authorizing or requiring the processing of the data subject’s data.



As a general rule, RIC SUN ESPAÑA, S.L. does not transfer or communicate data to third parties, except as legally required. However, if necessary, such transfers or communications of data are communicated to the data subject through the informed consent clauses contained in the different data collection methods.



As a general rule, personal data is always collected directly from the data subject. However, in certain exceptions, data may be collected through third parties, entities, or services other than the data subject. In this regard, this information will be conveyed to the data subject through the informed consent clauses contained in the different data collection methods and within a reasonable period, once the data is obtained, and at the latest within one month.


Navigation Data

Regarding navigation data that may be processed through the website, if data subject to regulations is collected, it is recommended to consult the Cookie Policy published on our website.

Plazos de conservación de los datos

The information collected from the data subject will be retained for as long as necessary to fulfill the purpose for which the personal data was collected. Once the purpose is fulfilled, the data will be deleted. This deletion will result in the blocking of the data, retaining it solely at the disposal of public authorities, judges, and courts, to address possible responsibilities arising from the processing, during the statutory limitation period for such responsibilities. Once this period is completed, the information will be destroyed.

For informational purposes, the legal retention periods for information related to different matters are outlined below:

    • Employment or social security-related documentation: 4 years
    • Accounting and tax documentation for business purposes: 6 years
    • Accounting and tax documentation for tax purposes: 4 years
    • Access control to buildings: 1 month
    • Video surveillance: 1 month

Rights of Data Subjects

According to European regulations, the rights of data subjects are as follows:

  • Right of Access: The right to request information from the data controller about whether their personal data is being processed.
  • Right of Rectification: The right to request the modification of inaccurate or incomplete data.
  • Right of Opposition: The right of an individual to object to the processing of their personal data or its cessation.
  • Right to Automated Individual Decision-Making: The right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning them or significantly affects them.
  • Right of Limitation: The right to suspend the processing of the user’s personal data in certain cases.
  • Right to Erasure or Forgetfulness: The right to have the personal data deleted.
  • Right to Data Portability: The right to request the data controller to provide personal data in a structured and clear format to another controller.
  • Right to File a Complaint with the competent supervisory authority if they believe the processing does not comply with current regulations.

The requester can exercise these rights through the following means:

  • Email to, providing documentation verifying the identity of the requester (copy of the front of the National ID Card or equivalent).
  • Postal mail to C/ ORENSE, 34 TORRE NORTE PISO 10, 28020, MADRID, MADRID, providing documentation verifying the identity of the requester (copy of the front of the National ID Card or equivalent).

In any case, the requester can seek the protection of the Spanish Data Protection Agency through its website.

In this regard, RIC SUN ESPAÑA SLU will respond to the request as soon as possible, taking into account the deadlines established in data protection regulations.


Possible Consequences of Not Providing Information

The data requested in the designated fields marked with an asterisk (*) or provided in the documents or media where information is provided are strictly necessary for the purpose for which they are collected or for the provision of optimal service to the data subject or through a legal obligation imposed on the data controller or a necessary requirement for entering into a contract. The inclusion of data in the remaining fields is voluntary.

If all the required data is not provided, it is not guaranteed that the information and services provided will fully meet the data subject’s needs. Therefore, if the requested data is not provided or is provided incorrectly or incompletely, the request cannot be processed, making it impossible to provide the requested information or carry out the services.

Similarly, the user guarantees that the information transmitted in any of the forms is truthful, accurate, and corresponds to their own data.

Our platform services are not intended for minors. Therefore, only individuals over 18 years old are allowed to register. In case of non-compliance, it is warned that any responsibilities that may arise as a result of the use of our platforms will be the responsibility of the parents or guardians of the minor.

To prevent the use of our services by minors, we attempt to verify the age of our users when they register by requesting their date of birth.



The security measures adopted by RIC SUN ESPAÑA SLU comply with the requirements established in Article 32 of the GDPR.

In this regard, considering the state of the art, the implementation costs, the nature, scope, context, and purposes of the processing, as well as the varying probability and severity risks to the rights and freedoms of individuals, RIC SUN ESPAÑA SLU has established appropriate technical and organizational measures to ensure the appropriate level of security for the existing risk.

In any case, RIC SUN ESPAÑA SLU has implemented sufficient mechanisms to:

  • Ensure the permanent confidentiality, integrity, availability, and resilience of the processing systems and services.
  • Restore the availability and access to personal data quickly in the event of a physical or technical incident.
  • Regularly verify, assess, and evaluate the effectiveness of the technical and organizational measures implemented to ensure the security of processing.

Changes to this Privacy Policy

Periodically, this Privacy Policy may be revised to update changes in current legislation, update procedures for the collection and use of personal information, the introduction of new services, or the exclusion of others. These changes will be effective upon publication on the website, so it is important to regularly review this Privacy Policy to stay informed about any changes.