Privacy and data protection

  • Privacy and data protection

0. Introduction.

This Privacy Policy has been prepared in accordance with the standards of transparency, comprehensiveness and legal rigor typical of internationally renowned legal services firms, and its purpose is to provide clear, complete and understandable information about the processing of personal data carried out by RELACIONATEYPUNTO SL within the framework of the use of the website https://rrypglobal.com and the services offered through it.

1. IDENTIFICATION OF THE DATA CONTROLLER

The entity responsible for processing personal data is:

RELACIONATEYPUNTO SL

Trade name: RRYP Global

NIF: B42713768

Registered office: Avenida Santa María de Trassierra, nº 98, CP 14011, Córdoba, Spain.

Contact Email: [email protected]

The user may direct any query related to the protection of their personal data through the email address indicated.

2. APPLICABLE REGULATORY FRAMEWORK

The processing of personal data is governed by the provisions of Regulation (EU) 2016/679 of 27 April 2016 (General Data Protection Regulation – GDPR), as well as by Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), and other applicable regulations.

3. SCOPE OF APPLICATION

This Policy applies to personal data collected through the RRYP Global website, as well as data obtained through the various interaction channels enabled, including web forms, meeting booking systems, contact chat, newsletter subscription, electronic and telephone communications, and technological tools integrated into the website.

4. PRINCIPLES APPLICABLE TO DATA PROCESSING

RRYP Global processes personal data in accordance with the principles of lawfulness, fairness and transparency; purpose limitation; data minimization; accuracy; storage limitation; integrity and confidentiality; and accountability.

5. CATEGORIES OF PERSONAL DATA PROCESSED

Depending on the user's relationship with RRYP Global, the following categories of personal data may be processed:

  • Identifying and contact information, such as name, surname, email address, telephone number and country of residence.
  • Professional data provided in the context of inquiries, meeting bookings or requests for information.
  • Data necessary for the administrative, contractual and billing management derived from the contracting of professional legal services.
  • Website browsing and usage data, including technical identifiers, IP address and analytical data, in accordance with the Cookie Policy.

Generally, RRYP Global does not request the processing of special categories of personal data. If the user voluntarily provides this type of data, they do so under their sole responsibility and with the legally required safeguards.

6. PURPOSES OF THE PROCESSING AND LEGAL BASIS

Personal data will be processed for the following purposes and on the corresponding legal bases:

(i) Manage access, browsing and use of the website, based on the legitimate interest of the controller.

(ii) To handle general inquiries and requests for information made through contact channels, based on legitimate interest or the application of pre-contractual measures.

(iii) Manage the booking, contracting and provision of professional legal services, based on the execution of a contract or pre-contractual measures requested by the interested party.

(iv) Manage invoicing, compliance with tax and accounting obligations and other legal obligations, based on compliance with a legal obligation.

(v) Sending informative communications, newsletters or legal content when the user has given their consent or there is a legal basis that legitimizes it.

7. RECIPIENTS OF THE DATA

Personal data may be disclosed or made available to third parties only when necessary for the purposes indicated. In particular, the following may have access to the data:

Technology service providers acting as data processors (appointment booking platforms, payment services, web hosting, communication tools, analytics and automation).

Financial institutions and payment service providers, exclusively for the management of collections and payments.

Public administrations and competent authorities, when there is a legal obligation.

Under no circumstances will personal data be transferred to third parties for commercial purposes unrelated to RRYP Global.

8. INTERNATIONAL DATA TRANSFERS

Some of the technology providers used by RRYP Global may be located outside the European Economic Area. In such cases, international data transfers will be carried out with the appropriate safeguards required by the GDPR, such as the signing of standard contractual clauses approved by the European Commission or other legally established mechanisms.

9 CONSERVATION PERIODS

Personal data will be kept for the time necessary to fulfill the purpose for which it was collected and, subsequently, for the legally required periods to address possible legal, contractual or tax liabilities.

Data processed for informational purposes or sending communications will be kept until the user revokes their consent or objects to the processing.

10. RIGHTS OF INTERESTED PARTIES

The user may exercise at any time the rights of access, rectification, erasure, objection, restriction of processing and portability, as well as withdraw the consent given, by sending a request to [email protected].

The content of the rights is as follows:

Right of rectification

The user has the right to obtain the rectification of inaccurate personal data concerning him or her, as well as to have incomplete data completed, including by means of an additional statement. This right allows for the correction of errors in the data provided when they no longer reflect the actual situation of the interested party.

Right to erasure (right to be forgotten)

The user has the right to request the deletion of their personal data when, among other reasons:

  • the data are no longer needed for the purposes for which they were collected,
  • withdraw the consent on which the processing is based and this processing is not based on another legal basis,
  • the data have been processed unlawfully,
  • or must be removed to comply with a legal obligation.

This right it is not absolute and may be limited when the processing is necessary for compliance with legal obligations or for the establishment, exercise or defense of legal claims.

Right of opposition

The user has the right to object at any time to the processing of their personal data when such processing is based on the legitimate interest of the controller or is for direct marketing purposes. In the event of objection to processing for commercial purposes, the data will cease to be processed for such purposes immediately.

Right to limitation of treatment

The user may request the limitation of the processing of their personal data when:

  • contest the accuracy of the data, within the period that allows the responsible party to verify such accuracy,
  • the processing is unlawful and the user objects to the deletion of the data,
  • The data controller no longer needs the data, but the user needs it for the establishment, exercise or defense of legal claims,
  • or the user has objected to the processing, while it is being verified whether the legitimate grounds of the controller prevail over those of the data subject.

In these cases, the data will only be kept for the exercise or defense of claims or for compliance with legal obligations.

Right to data portability

The user has the right to receive the personal data concerning him or her, which he or she has provided to the controller, in a structured, commonly used and machine-readable format, and to transmit it to another controller, provided that the processing is based on consent or a contract and is carried out by automated means. This right does not adversely affect the rights and freedoms of third parties.

Likewise, the user has the right to file a complaint with the Spanish Data Protection Agency if they believe that the processing of their personal data does not comply with applicable regulations.

11. SECURITY MEASURES

RRYP Global adopts appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in order to protect personal data against alteration, loss, unauthorized processing or access, taking into account the state of the art, the costs of implementation and the nature of the data processed.

12. USE OF THIRD-PARTY PLATFORMS AND TOOLS

The website may integrate technological tools provided by third parties, such as chat systems, meeting booking platforms, payment services, or artificial intelligence-based tools. The user acknowledges that the use of such tools may involve the processing of personal data by these providers in accordance with their own privacy policies.

It is expressly recommended not to provide sensitive personal data or confidential information protected by professional secrecy through these tools.

13. THIRD-PARTY DATA

If the user provides personal data of third parties, they guarantee that they have previously informed said third parties of the points contained in this Privacy Policy and that they have sufficient legitimacy to communicate said data, assuming any responsibility that may arise from their non-compliance.

14. MINORS

The services offered through this website are not intended for minors. If a minor provides personal data without the authorization of their parents or legal guardians, RRYP Global will delete it as soon as it becomes aware of the situation.

15. MODIFICATION OF THE PRIVACY POLICY

RRYP Global reserves the right to modify this Privacy Policy to adapt it to new legislation, interpretive criteria from supervisory authorities, or changes in the operation of the website. Modifications will be published on the website and will be applicable from the date of publication.

16. CONTACT

For any questions related to this Privacy Policy or the processing of personal data, the user can contact RRYP Global via the email address [email protected]