Purpose: Commercial communications related to our services
Hiring of our services
Legitimation: Express consent and legitimate interest
Recipients: No data is transferred to third parties, except by legal obligation
Rights: Access, rectify, and delete data, as well as other rights, as explained in the additional information
Additional information
At RCH AND SONS INVESTMENT 1977 S.L., we work to offer you the best possible experience through our products and services. In some cases, it is necessary to collect information to achieve this.
We care about your privacy and believe we should be transparent about it.
Therefore, in accordance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 (hereinafter, "GDPR") concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data, and LAW 34/2002, of 11 July, on Information Society Services and Electronic Commerce (hereinafter, "LSSI"), RCH AND SONS INVESTMENT 1977 S.L. informs the user that, as the controller, it will incorporate the personal data provided by users into an automated file.
The data provided will be incorporated into an automated file.
Our commitment starts by explaining the following:
We collect your data to improve your user experience, taking into account your interests and needs.
We are transparent regarding the data we collect about you and why we collect it.
Our intention is to offer you the best possible experience. Therefore, when we use your personal information, we will always comply with the regulations, and when necessary, we will request your consent.
We are committed to complying with the regulations and always requesting your consent when needed.
We understand that your data belongs to you. Therefore, if you decide not to authorize us to process it, you can request that we stop processing your data.
Our priority is to ensure your security and process your data in accordance with European regulations.
If you want more information about how we process your data, please consult the different sections of the privacy policy below:
Who is responsible for processing your personal data?
Identity: RCH AND SONS INVESTMENT 1977 S.L.
Registered address: Edf. Vilamar I Piso, 1 Mod. 16
C.I.F. nº: B42832824
Email: ana.deharo@consultotirarch.es
RCH AND SONS INVESTMENT 1977 S.L. has appointed a Data Protection Officer (DPO) or an internal contact person within its organization. If you have any questions regarding the processing of your personal data, you can contact them via the email ana.deharo@consultotirarch.es
What personal data do we collect?
The personal data that the user may provide:
Full name
Phone number
Address and postal code
Email address
Payment data
Location
IP address, date and time when you accessed our services, the internet browser you use, and information about the device’s operating system.
In some cases, it is mandatory to fill out the registration form to access and enjoy certain services offered on the website. Furthermore, failing to provide the requested personal data or not accepting this data protection policy means it will be impossible to subscribe, register, or participate in any promotions where personal data is required.
Why and for what purpose do we process your data?
At RCH AND SONS INVESTMENT 1977 S.L., we process the information provided by interested individuals for the following purposes:
To manage the sending of the information you request, as well as any other inquiries you may have that are not subject to the terms of the website or the service contract.
To carry out commercial actions and manage the relationship with the user, as well as to manage the services offered through the website and information-related tasks. To develop promotional activities that may be organized.
In some cases, it will be necessary to provide information to authorities or third-party companies for audit reasons, as well as to handle personal data of invoices, contracts, and documents to respond to claims from customers or public administrations.
We inform you that personal data obtained as a result of your registration as a user will be part of the Record of Activities and Processing Operations (RAT), of which RCH AND SONS INVESTMENT 1977 S.L. is the owner, and it will be periodically updated in accordance with the GDPR.
What is the legal basis for processing your data?
The processing of your data can be based on the following legal grounds:
Consent of the data subject for the contracting of services through the contact form, information requests, or subscription to e-newsletters (subscription to our Blog).
Legitimate interest in processing our clients’ data for direct marketing actions and explicit consent of the data subject for everything related to automatic evaluations and profiling.
Compliance with legal obligations for fraud prevention, communication with public authorities, and third-party claims.
The processing of data for the purposes described will be maintained for the time strictly necessary to fulfill the purpose of its collection (for example, for the duration of the business relationship), as well as to comply with the legal obligations arising from the data processing.
To whom are your data communicated?
In some cases, only when necessary, RCH AND SONS INVESTMENT 1977 S.L. will provide user data to third parties. However, user data will never be sold to third parties. External service providers (for example, payment providers or delivery companies) with whom RCH AND SONS INVESTMENT 1977 S.L. works may use the data to provide the corresponding services, but they will not use this information for their own purposes or to transfer it to third parties. RCH AND SONS INVESTMENT 1977 S.L. seeks to ensure the security of personal data when it is sent outside the company and ensures that third-party service providers respect confidentiality and have appropriate measures in place to protect personal data.
These third parties are required to ensure that the information is handled in accordance with data privacy regulations.
In some cases, the law may require the disclosure of personal data to public bodies or other parties. Only the minimum necessary data will be disclosed to comply with such legal obligations.
Personal data obtained may also be shared with other companies within the group.
Where are your data stored?
As a general rule, data are stored within the EU. For data sent to third parties outside the EU, we will ensure they offer an adequate level of protection because they have Binding Corporate Rules (BCR).
What rights do you have, and how can you exercise them?
You can send your communications and exercise your rights by submitting a request to the following email address: ana.deharo@consultotirarch.es.
Under the provisions of the GDPR, you may request:
The user has the right to obtain the deletion of personal data concerning them when the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed. If you have given your consent for the processing of personal data, you will always have the possibility to withdraw that consent for any future processing that depends on it.
Right to restrict processing: The user has the right to request the restriction of the processing of their personal data, in which case RCH AND SONS INVESTMENT 1977 S.L. would only retain them for the exercise or defense of legal claims.
Right to object (Art.21 and 22 GDPR and 18 LOPDGDD): The user has the right to object to the processing of their data under the terms provided for in Articles 21 and 22 of the GDPR. RCH AND SONS INVESTMENT 1977 S.L. informs the user that even if they object to certain processing, RCH AND SONS INVESTMENT 1977 S.L. may continue such processing if it is based on another legitimate basis, such as providing services or complying with legal obligations.
Right to data portability (Art.20 GDPR and 17 LOPDGDD): In some cases, you may request a copy of your personal data in a structured, commonly used, and machine-readable format for transmission to another controller.
Right not to be subject to individualized decisions: You can request that decisions based solely on automated processing, including profiling, that produce legal effects or significantly affect the data subject, are not made.
In some cases, the request may be denied if you request the deletion of data necessary for compliance with legal obligations.
Likewise, if you have a complaint about the processing of your data, you can file a complaint with the data protection authority.
Who is responsible for the accuracy and truthfulness of the data provided?
The user is solely responsible for the truthfulness and accuracy of the data provided, exonerating RCH AND SONS INVESTMENT 1977 S.L. from any responsibility in this regard. Users guarantee and are responsible, in any case, for the accuracy, validity, and authenticity of the personal data provided, and undertake to keep them properly updated. The user agrees to provide complete and correct information in the registration or subscription form. RCH AND SONS INVESTMENT 1977 S.L. reserves the right to terminate any contracted services with the users if the data provided is false, incomplete, inaccurate, or not updated.
RCH AND SONS INVESTMENT 1977 S.L. is not responsible for the truthfulness of information that is not self-generated or that comes from other sources, and therefore assumes no responsibility for any hypothetical damages that may arise from the use of such information.
RCH AND SONS INVESTMENT 1977 S.L. reserves the right to update, modify, or delete the information contained on its web pages, and may even limit or deny access to such information. RCH AND SONS INVESTMENT 1977 S.L. is exonerated from responsibility for any damage or harm that the user may suffer as a result of errors, defects, or omissions in the information provided by RCH AND SONS INVESTMENT 1977 S.L. when it comes from sources outside the company.
The user certifies that they are over 14 years old and that they have the legal capacity necessary to give consent for the processing of their personal data.
How do we handle minors' personal data?
In principle, our services are not specifically aimed at minors.
However, if any of the services are aimed at children under fourteen years old, in accordance with Article 8 of the GDPR and Article 7 of the LO3/2018, of December 5 (LOPDGDD), RCH AND SONS INVESTMENT 1977 S.L. will require the valid, free, unequivocal, specific, and informed consent of their legal guardians to process the minors' personal data. In this case, the DNI or another form of identification of the person giving the consent will be required.
For those over fourteen years old, data processing may proceed with the user's consent, except in cases where the law requires the involvement of the holders of parental authority or guardianship.
What security measures do we apply to protect your personal data?
RCH AND SONS INVESTMENT 1977 S.L. has adopted the legally required levels of security for the protection of personal data and strives to install additional technical means and measures within its reach to prevent the loss, misuse, alteration, unauthorized access, and theft of the personal data provided to RCH AND SONS INVESTMENT 1977 S.L.
RCH AND SONS INVESTMENT 1977 S.L. is not responsible for hypothetical damages or harm that could arise from interference, omissions, interruptions, computer viruses, telephone malfunctions, or disconnections in the operational functioning of this electronic system caused by reasons beyond the control of RCH AND SONS INVESTMENT 1977 S.L.; for delays or blockages in the use of this electronic system caused by deficiencies or overloads in telephone lines or overloads in the Data Processing Center, on the Internet, or other electronic systems, as well as for damages that may be caused by third parties through illegal intrusions outside the control of RCH AND SONS INVESTMENT 1977 S.L.
RCH AND SONS INVESTMENT 1977 S.L. is not responsible for any damages caused by third parties due to illegal intrusions or any technical failures outside its control.
Nevertheless, the user must be aware that Internet security measures are not impregnable.
Links to other websites: On the website https://rchandsons.com, there may be links to other websites. By clicking on one of these links and accessing an external website, the visit will be subject to the privacy policy of that website, and RCH AND SONS INVESTMENT 1977 S.L. will be disassociated from any responsibility regarding its privacy policy.
How do we use cookies?
However, if the user does not want cookies to be installed on their hard drive, they can configure the browser to prevent the installation of these files. For more information, please refer to our Cookies Policy.