Privacy Policy

Our commitment to your privacy

Our aim is to be as transparent as possible with our users and customers regarding the personal data we collect. Your privacy is important to us.

By reading this Privacy Policy, users are informed about how RENTING-RIBS, SL collects, processes and protects the personal data provided through the website https://proasail.com/ (hereinafter, the Website), as well as any other data they may provide in the future through other means.

We recommend that you read this Policy carefully. It has been written clearly and simply to make it easier to understand and to allow you to decide freely and voluntarily whether you wish to provide us with your personal data.

By completing any form on the Website and ticking the box marked “I have read the Privacy Policy” or similar, you expressly confirm that you have read this Policy, which explains the data processing activities we carry out and their purposes. Where your consent is requested for a specific purpose through an “I agree” box or selection field, you provide us with your unequivocal and explicit consent for that processing.

Who is responsible for processing your data?

Data collected through the website

We process the information provided by interested parties in order to respond to their requests and, where applicable, send them information about our products, services and newsletters. No automated decisions are made based on the data provided.

Retention: until the interested party requests its deletion or for the duration of the business relationship, always respecting the applicable limitation periods for liabilities.

Legal basis: the consent of the interested party, given by ticking the corresponding selection box, in order to respond to their request and, where applicable, send them commercial communications and newsletters.

Recipients: data is not disclosed to third parties unless required by law. No international transfers of data are planned.

Source: the personal data we process is provided directly by the interested party.

Recruitment data

We process the information provided by interested parties in order to manage our recruitment processes. No automated decisions are made based on the data provided.

Retention: for a maximum of two years, unless the interested party withdraws their consent beforehand.

Legal basis: the interested party’s consent to participate in recruitment processes.

Recipients: data is not disclosed to third parties unless required by law. No international transfers of data are planned.

Source: the interested party or their legal representative. Categories of data processed:

• Identification data
• Postal and email addresses
• Professional and academic information

Use of images

We process the data obtained, including images and, where applicable, voices, in order to publish it on the website, social media or other communication channels as part of our advertising activities or the promotion of our services and activities.

Retention: from the moment consent is given until it is withdrawn.

Legal basis: the interested party’s express consent to the use of photographs and, where applicable, videos in which their image appears, which may be published on the website, social media and any other channels the company considers appropriate.

Recipients: the company’s website, social media and other communication channels.

International transfers: the use of images on social media may involve international transfers of data.

Customer data

We process the information provided primarily to deliver the requested services, carry out the related administrative, accounting and tax management associated with those services or the sale of products and, where applicable, send commercial communications.

Retention: until the interested party requests its deletion and, where applicable, for the number of years required to comply with legal obligations.

Legal basis: performance of a contract for the provision of services, compliance with legal obligations for administrative, accounting and tax management, and the controller’s legitimate interest in sending commercial communications.

Recipients: the Spanish Tax Agency, in order to comply with legal obligations, and financial institutions, for payment management where applicable. No international transfers of data are planned.

Source: the interested party or their legal representative. Categories of data processed:

• Identification data
• Postal and email addresses
• Commercial information
• Banking information, where applicable

Advertising data

We process the information provided in order to manage the sending of commercial communications about our products and/or services through electronic channels such as email, WhatsApp, SMS and similar services.

Retention: from the moment consent is given until it is withdrawn.

Legal basis: the interested party’s consent, obtained through a signature, selection box or any other valid means.

Recipients: electronic advertising delivery platforms, in order to ensure delivery and obtain statistical data. No international transfers of data are planned.

Source: the interested party. Categories of data processed: identification data, postal and email addresses, and commercial information.

Rights of the interested party

Everyone has the right to obtain confirmation as to whether RENTING-RIBS, SL processes personal data concerning them.

Interested parties have the right to access their personal data under Article 15 of the GDPR, request its rectification under Article 16 of the GDPR when it is inaccurate, or request its deletion under Article 17 of the GDPR when it is no longer necessary for the purposes for which it was collected.

Under certain circumstances, they may request the restriction of processing under Article 18 of the GDPR, in which case we will retain the data solely for the establishment, exercise or defence of legal claims. They may also object to processing under Article 21 of the GDPR, in which case we will stop processing the data unless there are compelling legitimate grounds to continue.

They also have the right to data portability under Article 20 of the GDPR, receiving their data in a structured, commonly used format so that it may be transferred to another organisation, where technically feasible. Where consent has been given for a particular purpose, it may be withdrawn at any time under Article 7 of the GDPR, without affecting the lawfulness of processing carried out before its withdrawal.

You can exercise your rights by contacting the data controller in person, by post or by email at info@proasail.com. Forms for exercising these rights are available on the website of the Spanish Data Protection Agency: aepd.es/reglamento/derechos.

If you believe that your data protection rights have been infringed, you may lodge a complaint with the competent supervisory authority through the electronic office of the Spanish Data Protection Agency: sedeagpd.gob.es.

Requirement to provide data

The data requested through the Website’s forms and, in general, any data requested for the provision of a service or sale of a product, is generally mandatory unless otherwise indicated, as it is required to fulfil the stated purposes. If the data is not provided, or is not provided accurately, we may be unable to respond to your request correctly.

Where the interested party provides personal data relating to third parties, they confirm that they have obtained those parties’ consent and undertake to provide them with the information contained in this Policy, releasing RENTING-RIBS, SL from any liability in this regard.

Security measures

Personal data is processed lawfully, fairly and transparently. It is collected for specified, explicit and legitimate purposes and is not processed in a manner incompatible with those purposes. The data is adequate, relevant and limited to what is necessary, and is retained in a form that allows interested parties to be identified for no longer than necessary, while respecting the applicable limitation periods for liabilities.

We apply appropriate technical and organisational measures to guarantee data security, including protection against unauthorised or unlawful processing and accidental loss, destruction or damage.

We follow strict criteria when selecting service providers with access to personal data and enter into the corresponding data processing agreement with them under Article 28 of the GDPR. This requires them, among other obligations, to implement appropriate technical and organisational measures, process data in accordance with our instructions, and delete or return the data to us once the service has ended.