PRIVACY AND DATA PROTECTION POLICY
DATA CONTROLLER
RAUDA, IA, S.L. (hereinafter "RAUDA") acts as the data controller for the personal data collected through the website www.rauda.ai and all its associated pages under said domain (hereinafter, the "Website").
Data Controller Information
RAUDA AI, S.L.
Address: Calle San Buenaventura No. 10, 28005, Madrid, Spain
T.I.N/N.I.F.: B56972086
E-mail: info@rauda.ai
Website: www.rauda.ai
RAUDA is a Spanish registered company duly incorporated and registered with the Commercial Registry of Madrid under Volume 46280, Page 160, Sheet M-812908.
Scope of application and information to data subjects
The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter "GDPR"), as well as Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights Guarantee (hereinafter "LOPDGDD").
This Privacy and Data Protection Policy is a fundamental component of RAUDA’s operations and governs all matters related to the processing of personal data of users who provide their information through the forms available on the Website, as well as through any other communication channels offered on the Website, including data obtained via cookies and similar technologies. This Policy applies exclusively to personal data collected through those means.
By reading this Privacy Policy, the user is informed about the manner in which RAUDA collects, processes, and protects their personal data, as well as data derived from browsing activity. The use of the Website and completion of forms implies acceptance of this Privacy Policy, as well as of the other terms and conditions and policies of the Website; therefore, the user should carefully review the content of this Policy before deciding, freely and voluntarily, whether to provide personal data to RAUDA.
PERSONAL DATA COLLECTED
In accordance with current regulations on data protection, personal data means any information relating to an identified or identifiable natural person.
Through the different sections of the Website, we collect various data that Users provide to us, including:
Name and surname of the user. With this data we aim to offer the best possible treatment to the user that is as personalized and professional as possible so that we can identify the specific user of our services.
Email address. It will be used as a means of direct communication with users to attend to any order, inquiry, request, complaint and claim. Additionally, it may be used to send commercial information to the user, provided that their express authorization has been previously obtained for this purpose.
Phone number. Used as an alternative method of communication with the user.
Postal address. Required to be able to offer our different services. This will include information that merits knowing the physical location of the user, data such as their street, town, city, building number, postal code, etc.
IP address. Code that identifies the User's internet connection at a specific moment and which is automatically recorded together with the date and time of access when accessing our Website.
Other personal data. Other personal data may be collected according to the different forms or requests made.
PURPOSE, LEGAL BASIS, AND RETENTION PERIOD OF DATA PROCESSING
RAUDA's legal basis for processing users' personal data will depend on the purposes for which the data provided by the user will be used. In accordance with the foregoing, the legal basis of data processing by RAUDA will be carried out in accordance with Article 6 of the GDPR in the following ways:
Attending to inquiries, requests, complaints and claims
- Purpose: to provide user assistance through data provided via the different contact forms available on the Website, as well as manage orders, inquiries, requests, complaints and claims made by the user.
- Legal basis: the express consent of the User when sending an inquiry, request, complaint or claim, as a necessary requirement to be able to attend to it.
- Retention period: data will be retained for the time strictly necessary to resolve the User's order, inquiry, request, complaint or claim. Once the case in question is closed, the data may be kept blocked for a maximum of 5 years to address possible liabilities arising from the processing, unless a different period is legally required. All of this without prejudice to the User's right to request deletion of their data or to revoke their consent at any time.
- Nature of data communication: communication of this data is necessary to adequately address the request.
Sending commercial communications
- Purpose: sending commercial advertising communications by telematic or physical means related to RAUDA products and services, communication of events or relevant news, as well as conducting market studies and statistical analysis.
To carry out the above work, RAUDA may analyze the data provided to develop user profiles and send corresponding information that may be of interest to them.
- Legal basis: the express consent of the user for sending commercial communications according to the terms defined in this section.
- Retention period: data will be processed indefinitely until consent to receive such communications is revoked or data deletion is requested. In case revocation or deletion of data is requested by the User, the data will be blocked for a maximum period of 5 years to address possible liabilities arising from the processing, unless a different period is legally required.
- Revocation of consent to receive commercial communications: in case the User wishes to stop receiving commercial or promotional communications, they may request to "unsubscribe" from the service by clicking on the link enabled for such purposes in the body of said commercial communications or by sending an email to the following email address: info@rauda.ai, as well as indicating their refusal to receive them through the checkbox provided in the data collection form or by indicating it through the unsubscribe option provided in each commercial communication sent.
- Nature of data communication: communication of this data is voluntary, being necessary to provide commercial communications.
Cookies and IP address
- Purpose: to provide correct navigation through the Website, improve it and ensure an optimal User experience.
- Legal basis: RAUDA uses data storage and retrieval devices ("Cookies"). While certain categories of cookies are strictly necessary for the correct functioning of the Website, for all others the User's prior consent will be requested.
This consent is collected through the browser pop-up window when accessing the Website. This includes cookies that collect other non-identifying data that is downloaded to your computer when browsing.
All information about the characteristics and purpose of the cookies used is detailed in the Cookie Policy, which every User must be aware of.
- Retention period: indefinitely while the user does not revoke consent to their processing by deleting cookies and for the time established by law with a maximum duration of 3 years to address possible liabilities arising from the processing, unless a different period is legally required.
IP addresses will be retained for a period of 1 month.
- Nature of data communication: communication of this data may be necessary for the use of the Website. The User can however adjust cookie settings according to their preferences.
COMMON TERMS FOR DIFFERENT PURPOSES OF PERSONAL DATA PROCESSING
When the User accesses the Website, requests information in the form or sends an inquiry, they are providing personal information, with RAUDA being the controller. This information may include personal data such as IP address, name, surnames, postal address, email address, telephone number, among other information.
By providing this information or by clicking on any button or box that indicates acceptance of this Policy, the user gives their consent for their information to be collected, used, managed and stored by RAUDA in accordance with the provisions of this Privacy Policy. Likewise, by giving consent, the user declares that the information and data they have provided are accurate and truthful, undertaking to keep them updated.
The data you provide to RAUDA will be located on AWS servers.
Other purposes for which RAUDA processes your personal data. To ensure compliance with the conditions set out in the Legal Notice and applicable law. This may include the development of tools and algorithms that help this Website ensure the confidentiality of the personal data it collects.
To manage social networks. RAUDA has a presence on social networks. If you become a follower of RAUDA's social networks, the processing of personal data will be governed by this policy, as well as by those terms of use, privacy policies and access regulations that belong to the relevant social network in each case and that you have previously accepted.
DATA PROCESSING AND SOCIAL NETWORKS AND DIFFERENT CHANNELS FOR RELATIONSHIP WITH RAUDA USERS
The purpose of the use and dissemination of content on different social networks by RAUDA (Twitter, Instagram, TikTok, Facebook, LinkedIn, among others) is to give visibility and dissemination to RAUDA's brands, services and products.
These platforms have their own privacy, processing and data protection policies, so RAUDA recommends that users access and review the different sections of each social network platform.
Likewise, RAUDA reserves the right to remove from its social networks any information published by third parties that violates legality, incites to do so or contains messages that violate the dignity of persons or institutions, as well as the right to block or report the profile author of these messages.
In no case will the Controller use follower profiles on social networks to send advertising individually.
DATA UPDATING AND ACCURACY
The user guarantees that the personal data provided to RAUDA is truthful, current and accurate, undertaking to communicate any change or modification thereof.
To be able to offer our services adequately, it is essential that the information is permanently updated. Consequently, RAUDA will not be responsible for the correctness, accuracy and truthfulness of the data provided, nor for possible errors or incidents in the service derived from the failure to communicate changes that have occurred in said data by the user.
THIRD PARTY DATA
In the event that the user provides data belonging to third parties for any purpose to RAUDA, the User guarantees that such data has been obtained lawfully, as well as having previously informed those affected and having obtained their consent to communicate their data, with said information being accurate and truthful.
In any case, RAUDA will not be responsible for data obtained unlawfully or without prior information to third parties.
PROCESSING OF MINORS' DATA
Those who provide their data on the Website or through other channels managed by RAUDA declare that they are over 14 years of age, with access to the portal being prohibited for minors under said age.
If RAUDA detects at any time that a minor under 14 years of age has provided personal data, such data will be cancelled.
The minor's guardians may contact RAUDA at any time to block or delete the minor's access data.
AUTOMATED DECISIONS AND PROFILING
RAUDA may carry out processing involving automated decisions, including profiling. In these cases, we inform you that:
- Existence of automated decisions. In some circumstances, RAUDA may use automated systems to analyze your preferences, behaviors and other factors to provide personalized content and improve your experience on our platform.
- Logic applied. These systems analyze data such as your browsing history, selected preferences and usage patterns to identify possible interests and adapt our service offering.
- Importance and expected consequences. This processing allows us to offer more relevant content and a personalized experience. No automated decisions will be made that produce legal effects or affect you significantly in a similar manner.
- Specific rights. The User has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or significantly affects you in a similar manner. In such cases, you may request human intervention, express your point of view and challenge the decision.
THIRD PARTIES AND OTHER PLATFORMS
RAUDA is only responsible for the protection and processing of data that it directly receives from the user through channels that are part of its direct control such as the Website and other information or communication channels directly managed by RAUDA (emails, among others).
RAUDA relies on different platforms to be able to provide a complete service to the user, with each platform having its own data protection policy, which we recommend be consulted by the user.
DATA SHARING AND TRANSFER
Data collected by RAUDA may be shared, with the User's prior consent, for the following purposes:
- Manage the sending of commercial communications about products, services and facilitate offers that may be of interest to them.
- Manage the sending of satisfaction surveys based on the purchase of the product or service, to improve our customers' experience day by day.
- Analyze user data, using own and third-party sources, in order to develop profiles that allow us to define in greater detail the products that may be of interest to them.
Data may also be shared with Public Administrations and competent national and/or European authorities, in cases provided for by Law.
Data may be accessible, under the terms provided by Law, by RAUDA's service providers, always having to guarantee the protection and security of the data.
RAUDA treats data provided by users confidentially, not transferring it to third parties except by legal obligation or some of the specific cases set out in this Privacy and Data Protection Policy, in relation to the platforms on which RAUDA relies to offer its services.
The transfer of data to the collaborating recipients indicated in this section may involve the transfer of these to third countries outside the European Economic Area, in which case, it is carried out in accordance with the adequate guarantees required by the GDPR, for which RAUDA undertakes to collaborate only with providers who demonstrate sufficient security guarantee and adequate protection in data processing.
RIGHTS OF DATA SUBJECTS
In compliance with Data Protection Regulation 2016/679 of the Council of the European Union and Organic Law 3/2018 on Personal Data Protection and Digital Rights Guarantee, all users have the following rights:
- Right of access to a copy of their personal data, know their processing, recipients, retention period and their rights over them.
- Right to update and rectify their personal data that has changed or is inaccurate. For such purposes, they must indicate in their request which data they refer to and the correction to be made.
- Right to erasure of data that is no longer necessary for the purposes for which it was collected, for which consent is revoked or opposed to being processed, or data that must be deleted for compliance with a legal obligation.
Exceptions to the right to erasure. The User is informed that they may not exercise this right in the following cases:- Exercise of the right to freedom of expression and information.
- Compliance with a legal obligation that requires data processing.
- For reasons of public interest in the field of public health.
- Processing of data for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.
- For the formulation, exercise or defense of claims.
- Right to restriction of data processing. The User may request restriction of processing of their personal data in the following cases:
- When they question the accuracy of the data, during the period necessary to verify its accuracy.
- For the formulation, exercise or defense of legal claims.
- When the User has exercised their right to object to processing, while verifying whether the controller's legitimate grounds override those of the User.
- Right to withdraw consent previously given for data processing at any time through express request to RAUDA.
- Right to object to the processing of their data at any time, including profiling based on said provisions.
The data controller will stop processing personal data, unless they prove compelling legitimate grounds for processing that override the interests, rights and freedoms of the data subject, or for the formulation, exercise or defense of claims.
- Right to data portability. Request the data controller to send the personal data concerning them that they have provided to RAUDA, in a structured, commonly used and machine-readable format when these have been collected with their consent through automated means, or when technically possible, direct transfer to another controller in compliance with the same requirements.
- Right not to be subject to decisions based solely on automated data processing. Not to be subject to automated decisions that only consider user data. In case any automated decision is made, including profiling, they have the right to obtain information about the logic applied, the importance and expected consequences of such processing.
CONTACT CHANNELS
Users may exercise their rights of access, rectification, erasure, opposition, limitation, portability or withdraw their consent, as well as make other requests, inquiries, claims or complaints, at the email address: info@rauda.ai
If you consider that your rights have not been properly addressed, you have the right to effective judicial protection and to file a complaint with the supervisory authority, in this case, the Spanish Data Protection Agency, if you consider that the processing of personal data concerning you infringes the Regulation. You may file a complaint with the supervisory authority at www.aepd.es.
Response deadlines. RAUDA will respond to your requests without undue delay and no later than one month from receipt of the request. This period may be extended by a further two months if necessary, taking into account the complexity and number of requests. RAUDA will inform the data subject of any extension within one month of receiving the request, indicating the reasons for the delay.
CONFIDENTIALITY AND SECURITY IN DATA PROCESSING
RAUDA takes all reasonable precautions commercially available to it, following industry best practices, adopting appropriate technical and organizational measures to protect the security and confidentiality of your personal data, in compliance with current regulations (GDPR and LOPDGDD). Our objective is to prevent alteration, loss, unauthorized access or misuse of your information.
For the above, we rely on service providers, such as our hosting provider (Webflow), which have been selected for applying rigorous security standards. You can consult their policies for more information.
However, it is important to remember that no Internet transmission or electronic storage system is completely infallible. Therefore, although we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.
CONTENT FROM OTHER WEBSITES
Our Website may include third-party content, such as videos, images, maps, articles, etc. This embedded content behaves in the same way as if the visitor were directly accessing said third party's website.
Consequently, these websites may collect your data, use their own cookies, embed additional tracking code and monitor your interaction with the content. RAUDA has no control over these practices, so we recommend reviewing these third parties' privacy policies to understand how they manage your information.
CHANGES TO THE PRIVACY POLICY
RAUDA reserves the right to modify this policy to adapt it to legislative or jurisprudential developments, as well as industry practices. In such cases, RAUDA will announce on this page the changes introduced with reasonable advance notice before their implementation.