Privacy Policy
1. Identity of the Data Controller
Through this Legal Notice and Privacy Policy, the provider informs users who visit its website of its Privacy Policy and describes what data it collects, how it uses it, and the options available to users in relation to such data, including how to access and update it.
Pursuant to Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (hereinafter, “LOPD-GDD”) and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter, “GDPR”), we provide users of our website with the following information:
Data Controller: RIDO MANIPULADOS MOLDEADOS, S.L. (hereinafter, “RIDO”)
Tax Identification Number (NIF): B60717170
Postal address: Vl de les Pedreres, 11 – 08390 Montgat (Barcelona) – Spain.
Email address: info@ridoenvase.com
2. Data Collection and Consent
In compliance with Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (hereinafter, “LOPD-GDD”) and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter, “GDPR”), users are hereby informed that the personal data requested through our forms or that may be provided to us through our email addresses will be included in our Records of Processing Activities, for which RIDO is responsible and the owner, hereinafter referred to as the provider.
Likewise, when a user completes any of the forms with the requested personal data, pursuant to the aforementioned legislation, they must provide unequivocal and explicit consent, which may be withdrawn and shall not have retroactive effects.
We inform you that all personal data will be processed with the utmost confidentiality and in accordance with the applicable regulations on the protection of personal data.
The Provider shall not be responsible for the processing of personal data carried out by the websites that users may access through the various links contained on our website.
This website is governed exclusively by the regulations applicable in Spain, to which both Spanish and foreign users who access and use this website are subject.
The use of the Provider’s website and any of the services incorporated therein implies full acceptance of the terms and conditions set out in this Privacy Policy.
3. Legal Basis for the Processing of Personal Data
We inform you that all personal data will be processed with the utmost confidentiality, in accordance with the purpose of the processing and pursuant to European regulations on the protection of personal data. The applicable legislation governing the collection and processing of personal data is as follows:
- Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
Our databases comply with the requirements established by the aforementioned legislation, as set out in the Records of Processing Activities, and with the corresponding security measures. If users believe that their personal rights have not been adequately protected, they may lodge a complaint with the Spanish Data Protection Agency.
4. Purposes of the Processing
The data we request is adequate and necessary for the purpose for which it is collected. It will not be used for any purpose other than that for which it was provided and, under no circumstances, will it be disclosed to third parties without the consent of the data subject, except where required by law.
Users are not obliged to provide us with their personal data; however, such data is absolutely necessary for us to provide the services we offer.
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, the purpose for which personal data is collected is: the processing of personal data for the online sale of the products offered through this portal.
Unless expressly stated otherwise, users will be required to complete all fields in each form available on this portal and must provide us with true, accurate, complete and up-to-date information.
The user shall be solely responsible for any direct or indirect damage or harm caused to the Provider or any third party as a result of completing the forms with false, inaccurate, incomplete or outdated information, or with data belonging to third parties.
5. Lawfulness of the Processing of Personal Data
In accordance with the GDPR and the LOPD-GDD, personal data must be processed lawfully, fairly and transparently. Accordingly, the legal basis for processing personal data through this portal is the user’s consent, given by accepting the terms of use and agreeing to the provisions set out therein.
The legal basis for the processing of users’ personal data is indicated in Section Three of this document.
The purposes for which the user’s consent is obtained are set out in Section Four of this document, in accordance with the provisions of Articles 6 and 7 of the GDPR. Such consent may be withdrawn at any time after it has been given, without retroactive effect.
6. Right of Access, Rectification, Erasure (Right to be Forgotten), Data Portability, Restriction and Objection to the Processing of Users’ Personal Data
In accordance with the data subject’s rights regulated by Articles 12–18 of Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD), and Articles 15–22 of the European Regulation (GDPR), users have the right to access the information concerning them that has been collected in the records of the website owner, to rectify it if it is inaccurate, to request its erasure or to object to its processing, under the terms established by the aforementioned regulations, by contacting:
RIDO:
- By email: info@ridoenvase.com
- Or by post addressed to: Vl de les Pedreres, 11 – 08390 Montgat (Barcelona) – Spain.
- Telephone: +34 93 387 71 08 (from 9:00 a.m. to 3:00 p.m.).
IMPORTANT: A photocopy of your National Identity Card (DNI), or another document proving your identity, must be attached, indicating which right you wish to exercise, pursuant to Articles 15–22 of the LOPD-GDD and Article 11 of the GDPR, in relation to the identification of the user and the processing of their personal data.
It is essential to keep users’ personal data up to date. The website owner must therefore be informed whenever any of the user’s personal data is modified. Otherwise, the Provider shall not be responsible for the accuracy of such data.
If the user does not expressly request the erasure of their personal data from the Provider’s files, it shall be understood that they continue to be interested in having their data retained, for as long as it remains appropriate for the purpose for which it was obtained and the data controller considers it appropriate.
The exercise of the personal rights of users referred to above includes the following:
Exercise of Rights: Articles 12–18 (Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, LOPD-GDD).
Right of Access (Article 13 LOPD-GDD)
Users have the right to access the information concerning them that has been collected in the Provider’s records, under the terms established by law, by exercising their personal rights as regulated in the legislation referred to in this section.
To exercise the Right of Access, any user has the right to request confirmation from the website owner as to whether their personal data is being processed. Users have the right to obtain a copy of the personal data undergoing processing and may also be provided with remote access to such data.
Right of Rectification (Article 14 LOPD-GDD)
With regard to the right of rectification, users are entitled to have any inaccurate personal data concerning them rectified. Data subjects also have the right to complete incomplete personal data, provided that the incompleteness is not attributable to the website owner.
Right to Erasure (Article 15 LOPD-GDD)
Under the right to erasure, users may request that their personal data be deleted from the database of the data controller. The Right to be Forgotten is not considered an autonomous or separate right from the traditional rights, but rather a consequence of applying the right to erasure of personal data. As such, it constitutes an expression of the right to cancellation in the online environment. Therefore, users may request the deletion of their personal data in a technological environment through the so-called Right to be Forgotten.
Right to Restriction of Processing (Article 16 LOPD-GDD)
In accordance with Article 16 of Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, data subjects have the right to exercise this right before the data controller in the following cases:
- The data subject contests the accuracy of the personal data, for a period enabling the data controller to verify its accuracy.
- The processing is unlawful and the data subject objects to the erasure of the personal data and, instead of erasure, requests restriction of its use.
- The data controller no longer needs the personal data for the purposes of the processing, but the data subject requires it for the establishment, exercise or defence of legal claims.
- The data subject has objected to the processing of their personal data, pending verification of whether the legitimate grounds of the data controller override those of the data subject.
While processing is restricted, the data controller may only retain the data and may not process it in any other way, except in the following cases:
With the consent of the data subject:
- For the establishment, exercise or defence of legal claims.
- For the protection of the rights of another natural or legal person.
- For important reasons of public interest of the European Union or of the relevant Member State.
The data controller shall inform each recipient to whom the personal data has been disclosed of the restriction, unless this proves impossible or involves disproportionate effort. If the data subject requests it, the data controller shall inform them of the recipients concerned.
Right to Data Portability (Article 17 LOPD-GDD)
In accordance with Article 17 of Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD), data subjects have the right to exercise this right before the data controller in the following cases:
- The processing is based on consent or a contract.
- The processing is carried out by automated means.
The data subject may exercise this right in relation to the data they have provided to the data controller and which concerns them, including data derived from the data subject’s own activity. The data subject may request that the data be transmitted directly to another data controller where technically feasible.
Limitations: This right may not be exercised where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.
The data must be transmitted within one month in a commonly used, machine-readable and structured format. If this period needs to be extended, the user must be informed of the time required to deliver the personal data.
If this request to exercise the right of objection is not addressed, the user has the right to lodge the appropriate complaint with the Spanish Data Protection Agency.
Right to Object (Article 18 LOPD-GDD)
Under the right to object, data subjects have the right, at any time, to request that their personal data no longer be processed in the context of information society services. They may exercise their rights by automated means.
7. Security of Personal Data
The security measures required by Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD), and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), establish that data controllers and data processors must implement appropriate technical and organisational measures in order to ensure a level of security appropriate to the risks involved in the processing of personal data.
This means that, on this website, data protection by design and by default has been duly taken into account through the use of forms for the collection of personal data, requesting the user’s consent and acceptance of this Privacy Policy.
Through these technical and organisational measures, the Provider seeks to ensure full compliance with the aforementioned regulations and to guarantee the processing of personal data for each of the specified purposes. Accordingly, the security measures applied to the processing of personal data carried out under the applicable regulations are established.
The website owner informs users that it has adopted all the necessary technical and organisational measures to safeguard the security of files containing personal data, as required by applicable legislation.
8. Commercial Communications by Email
In compliance with the applicable regulations, which prohibit the sending of commercial communications by email that have not been expressly authorised in advance by their recipients, and in accordance with Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), if the user wishes to receive commercial or informational communications concerning the services and products published on the platform, they must provide their explicit and unequivocal consent through our website or by email.
9. Amendments to this Privacy Policy
The Provider reserves the right to modify its data protection policy in the future at its discretion, or as a result of legislative, case-law or business practice changes. If any amendments are introduced, the new text will be published on this same page, where users will be able to consult the data protection policy. In any event, the relationship with the user shall be governed by the rules in force at the precise time when the website is accessed and, consequently, users are required to read them each time they provide us with their data through our website.
Use of the Website confers user status upon anyone who accesses and uses it, and such user accepts these Terms and Conditions, having had the opportunity to become acquainted with them.