Privacy Policy

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter RGPD), GUILLERMO BARRALLO FERNANDEZ (hereinafter DERBY RIBERA DEL ORBIGO) presents this Privacy Policy regarding the processing and protection of personal data.

DATA OF THE DATA CONTROLLER

Company name: GUILLERMO BARRALLO FERNANDEZ
Registered office: CALLE BENITA JAÑEZ,19 – 24393, SANTA MARINA DEL REY (LEÓN)
CIF: 09770681M
Telephone: 645 930 345
e-Mail: info@derbyriberadelorbigo.es
Domain name: derbyriberadelorbigo.es

Royal Legislative Decree 1/2007, of November 16, approving the revised text of the General Law for the Defense of Consumers and Users and other complementary laws.
Law 34/2002, of July 11, on information society services and electronic commerce.

SCOPE OF APPLICATION

This Privacy Policy will apply to:

Those who visit the DERBY RIBERA DEL ORBIGO website, derbyriberadelorbigo.es.
Those who voluntarily communicate with DERBY RIBERA DEL ORBIGO via email, chat or who complete any of the data collection forms published on the DERBY RIBERA DEL ORBIGO website.

To those who request information about the products and services of DERBY RIBERA DEL ORBIGO or who request to participate in any of the commercial actions of DERBY RIBERA DEL ORBIGO.
To those who formalize a contractual relationship with DERBY RIBERA DEL ORBIGO by contracting its products and services.
To those who use any other service present on the website that implies the communication of data to DERBY RIBERA DEL ORBIGO or the access to data by DERBY RIBERA DEL ORBIGO for the provision of its services.
To any others who, directly or indirectly, have given their express consent for their data to be processed by DERBY RIBERA DEL ORBIGO for any of the purposes set out in this Policy.
The use of the products and services of DERBY RIBERA DEL ORBIGO requires the express acceptance of this Privacy Policy.

DERBY RIBERA DEL ORBIGO warns that, unless there is a legally constituted representation, no user and/or client may use the identity of another person and communicate their personal data, so the data provided to DERBY RIBERA DEL ORBIGO must be personal data, corresponding to their own identity, adequate, pertinent, current, exact and true. In this sense, the user and/or client will be the only person responsible for any direct or indirect damage caused to third parties or to DERBY RIBERA DEL ORBIGO due to the use of another person’s data or their own data when they are false, erroneous, not current, inadequate or not pertinent. Likewise, the user and/or client who communicates the personal data of a third party will be responsible for having obtained the corresponding authorization from the interested party, as well as for the consequences of the contrary.

Likewise, the user and/or client who communicates personal data to DERBY RIBERA DEL ORBIGO declares to be of legal age, in accordance with the provisions of Spanish legislation, and otherwise refrains from providing data to DERBY RIBERA DEL ORBIGO. Any data provided about a minor will require the prior consent or authorization of his or her parents, guardians or legal representatives, who will be considered responsible for the data provided by minors under their care.

This Policy will be applied as a subsidiary to any other conditions regarding personal data protection that are established on a special basis and are communicated, without limitation, through registration forms, contracts and/or conditions of the particular services, and this Privacy Policy is therefore complementary to those mentioned in that which is not expressly provided for therein.

PURPOSES OF THE COLLECTION AND PROCESSING OF PERSONAL DATA

DERBY RIBERA DEL ORBIGO, as data controller, informs users of the existence of various processing operations and files in which the personal data communicated to DERBY RIBERA DEL ORBIGO are collected and stored.

The purposes of said collection and processing of personal data are the following:

In relation to the “cookies” that DERBY RIBERA DEL ORBIGO uses when browsing through its website derbyriberadelorbigo.es, they are stored on the user’s terminal equipment (computer or mobile device) and collect information when visiting said web pages, with the purpose of improving their usability, knowing the browsing habits or needs of users in order to adapt to them, as well as obtaining information for statistical purposes. In the case of those users who are already clients of DERBY RIBERA DEL ORBIGO, the information collected with the cookies will also be used to identify them when accessing the different tools that DERBY RIBERA DEL ORBIGO makes available to them for the management of the services. In any case, users can configure their browser so that the reception of all or some of the cookies is disabled or blocked. The fact of not wishing to receive these cookies does not constitute an impediment to being able to access the information on the DERBY RIBERA DEL ORBIGO websites, although the use of some services may be limited. If, once consent has been given to receive cookies, it is desired to withdraw it, the cookies stored on the user’s computer must be deleted through the options of the different browsers. All information about the cookies used by DERBY RIBERA DEL ORBIGO is published in its Cookies Policy, available for consultation in our cookies policy.

In the case of sending an email to DERBY RIBERA DEL ORBIGO or communicating personal data through any other means, such as a contact form, the purpose of collecting and processing said data by DERBY RIBERA DEL ORBIGO is to respond to queries and requests for information that arise regarding DERBY RIBERA DEL ORBIGO’s products and services.
In the case of sending an email to DERBY RIBERA DEL ORBIGO related to its job offers, said data will be processed to participate in the personnel selection procedures.

In the case of DERBY RIBERA DEL ORBIGO forms that interested parties fill out to participate in any of DERBY RIBERA DEL ORBIGO’s commercial actions, the purpose will be to enable said participation, as well as the sending of commercial and advertising communications about DERBY RIBERA DEL ORBIGO’s services, unless the interested party expressly states their opposition at the time of collecting their data. Notwithstanding the foregoing, the interested party may modify his/her decision at any time, as many times as he/she wishes, through the means provided by DERBY RIBERA DEL ORBIGO for this purpose.

When contracting the services offered by DERBY RIBERA DEL ORBIGO, only those personal data that are necessary to establish the contractual relationship and enable the provision of the services and remuneration thereof by the clients will be collected, said data being collected and processed for the following purposes:

  • The main purpose will be to maintain the contractual relationship established with the client, in accordance with the nature and characteristics of the contracted services or products, with DERBY RIBERA DEL ORBIGO contacting the client through the email address, telephone or other means indicated by the latter.
  • In accordance with Art. 6, section 1, paragraph 1, letter a of the GDPR, if we have previously obtained your express consent to subscribe to our newsletter, we will use the necessary data for this purpose to send commercial communications in accordance with said consent. You can unsubscribe from the newsletter at any time by sending a message to our contact address described here or by clicking on the link provided for this purpose in the email containing said commercial communication. After unsubscribing, we block your email address for this use, provided that you have not given your express consent for the data to continue to be used, or we reserve the right to continue using your data in cases permitted by law and about which we inform you in this document. Regardless of whether the client has chosen or not to receive commercial information from DERBY RIBERA DEL ORBIGO, the client may modify his decision at any time, as many times as he wishes, through the email info@derbyriberadelorbigo.es
  • For the maintenance of historical records of commercial relations during the legally established periods.
  • In those cases in which DERBY RIBERA DEL ORBIGO must access and/or process personal data for which the client has the status of data controller or data processor, DERBY RIBERA DEL ORBIGO will process said data as data processor in accordance with the provisions in article 28 of the GDPR and in accordance with the provisions of the section entitled “GUILLERMO BARRALLO FERNANDEZ AS DATA CONTROLLER”, included in this Privacy Policy.
  • In compliance with the provisions of Law 25/2007, of October 18, on the conservation of data relating to electronic communications and public communications networks, DERBY RIBERA DEL ORBIGO informs the user that certain traffic data generated during the development of communications will be retained and preserved, as well as, where appropriate, said data will be communicated to the competent bodies provided that the legal circumstances provided for in said Law occur.
  • For all other purposes, which are expressly included in the Specific Conditions that are applicable to the corresponding product or service contracted by the client and expressly accepted by the latter.

PERSONAL DATA STORAGE PERIOD

DERBY RIBERA DEL ORBIGO will retain personal data for the time strictly necessary to fulfil the purposes detailed above. DERBY RIBERA DEL ORBIGO may keep said data duly blocked during the period in which responsibilities may arise from its relationship with the client.

In the case of data subject to storage pursuant to Law 25/2007, of 18 October, on the storage of data relating to electronic communications and public communications networks, the storage period for said data will be that detailed in said regulations.

RECIPIENTS OF PERSONAL DATA

The recipients of the personal data collected by DERBY RIBERA DEL ORBIGO will be the following:

  • DERBY RIBERA DEL ORBIGO’s own employees in the performance of their duties.
  • DERBY RIBERA DEL ORBIGO’s suppliers who intervene in the provision of services, in the event that this is necessary for the provision of the same.
  • Third parties who help with statistics and data collection: (Google Analytics).
  • Judicial or administrative bodies, as well as the State Security Forces and Corps, in the event that DERBY RIBERA DEL ORBIGO is required in accordance with current legislation to provide information related to its clients and their services.
  • Any others who, due to the nature of the service, must access the data provided with the same, as detailed in the Specific Conditions that apply to the corresponding product or service contracted by the client and expressly accepted by the latter.

RIGHTS OF USERS AND EXERCISE THEREOF

Users may exercise the following rights recognized by the GDPR at any time:

  • Right of access: Users have the right to obtain from DERBY RIBERA DEL ORBIGO information about whether personal data concerning them is being processed, to access it and to obtain information about the processing carried out.
  • Right to obtain a copy of their personal data.
  • Right to rectification.
  • Users have the right to have DERBY RIBERA DEL ORBIGO rectify their personal data in the event that it is inaccurate or incomplete.
  • Right to deletion.
  • Users have the right to have their data deleted when they are no longer necessary for the purpose for which they were provided or when the other legally established circumstances occur.
  • Right to limitation of processing.
  • Users have the right to request a limitation on the processing of their personal data, so that the processing operations that must be carried out in each case are not applied to them, in those cases provided for in art. 18 of the GDPR.
  • Right to portability.
  • Users have the right to receive personal data that concerns them in a structured format, provided that said data concerns exclusively the user and has been provided by the user.

Users may exercise these rights in the following ways:

  • If they are registered customers on the DERBY RIBERA DEL ORBIGO website, users may check their personal data at any time through “My account”, which is accessed authenticated from derbyriberadelorbigo.es
  • Whether they are customers of DERBY RIBERA DEL ORBIGO or not, users may exercise their rights by sending a communication by e-mail to the address info@derbyriberadelorbigo.es or by sending a request accompanied by your ID or a legally valid document proving your identity, addressed to DERBY RIBERA DEL ORBIGO, for the attention of the Customer Service Department, specifying the right you wish to exercise.

In the case of requests that are manifestly unfounded or excessive due to their repetitive nature, DERBY RIBERA DEL ORBIGO reserves the right to charge a fee for the resulting administrative costs or the right to refuse to act on them, in accordance with the provisions of art. 12.5 GDPR.

CONTROL AUTHORITY

Users and/or customers may contact the corresponding local control authority if they consider that the processing of their personal data has not been carried out in accordance with current legislation.

The data protection control authority in Spain is the Spanish Data Protection Agency, whose contact details are available on its website.

INTERNATIONAL DATA TRANSFERS

In those products and services of DERBY RIBERA DEL ORBIGO in which international transfers are required to enable the provision of the same, this circumstance will be included in the Specific Conditions that apply to the corresponding product or service contracted by the client and expressly accepted by the latter prior to the same.

GUILLERMO BARRALLO FERNANDEZ AS DATA CONTROLLER

In accordance with article 28 of the GDPR and related provisions, DERBY RIBERA DEL ORBIGO will process the personal data for which the client will be the data controller or data processor, when this is necessary for the proper provision of the contracted services. In such case, the controller will act as the data processor, in accordance with the terms indicated below:

  • DERBY RIBERA DEL ORBIGO will only process the data in accordance with the instructions of the client responsible for or in charge of the processing, not using them for any purpose other than that stated in this Data Protection Policy and/or in the contractual conditions that may apply.
  • Once the services that motivate the processing of personal data have been provided, these will be destroyed, as well as any support or documents containing any personal data or any type of information that has been generated during, for and/or by the provision of the services subject to the corresponding Conditions. Notwithstanding the foregoing, DERBY RIBERA DEL ORBIGO may keep the aforementioned data duly blocked during the period in which responsibilities may arise from its relationship with the client.
  • In the event that DERBY RIBERA DEL ORBIGO uses the data for another purpose or communicates or uses it in breach of this Data Protection Policy and/or the corresponding Terms of Service, it will also be considered responsible for the processing.
  • DERBY RIBERA DEL ORBIGO is obliged, in accordance with article 28 of the GDPR, to maintain due professional secrecy regarding the personal data that it must access and/or process in order to comply in each case with the purpose of the Terms of Service that apply to it, both during and after the termination of the same, committing to use said information only for the purpose intended in each case and to require the same level of commitment from any person within its organization who participates in any phase of the processing of personal data for which it is responsible.
  • In accordance with the provisions of the GDPR, the following rules will apply in relation to the form and methods of access to the data for the provision of services:
  • In the event that DERBY RIBERA DEL ORBIGO must access the processing resources located at the client’s facilities, the latter will be responsible for establishing and implementing the security policy and measures, as well as communicating them to DERBY RIBERA DEL ORBIGO, who undertakes to respect them and to require compliance from the people in its organisation who participate in the provision of the services.
  • When the service is provided by DERBY RIBERA DEL ORBIGO at its own premises, DERBY RIBERA DEL ORBIGO will record in its Activity Register the circumstances relating to the processing of data in the terms required by the GDPR, including the security measures corresponding to said processing.
  • Access and/or processing of data by DERBY RIBERA DEL ORBIGO, Without prejudice to the specific legal or regulatory provisions in force that may be applicable in each case or those adopted by DERBY RIBERA DEL ORBIGO on its own initiative, it will be subject to the necessary security measures for:
    • Ensure the permanent confidentiality, integrity, availability and resilience of the treatment systems and services.
    • Restore the availability and access to personal data quickly, in the event of a physical or technical incident.
    • Regularly verify, evaluate and assess the effectiveness of the technical and organisational measures implemented to ensure the security of the treatment.
    • Pseudonymise and encrypt personal data, where appropriate.
    • The client authorises DERBY RIBERA DEL ORBIGO, in its capacity as data processor, to subcontract with third parties, on behalf of and for the account of the client, the services of storage, custody of backup copies of data and security, and those that are necessary to enable the provision of the contracted services, respecting in all cases the obligations imposed by the GDPR and its implementing regulations. At any time, the client may contact DERBY RIBERA DEL ORBIGO to find out the identity of the entities subcontracted to provide the indicated services, which will act in accordance with the terms set forth in this document and after formalizing a data processing contract with DERBY RIBERA DEL ORBIGO in accordance with art. 28.4 of the GDPR.
    • The client authorizes DERBY RIBERA DEL ORBIGO to carry out the actions indicated below, provided that they are necessary for the execution of the provision of the services. This authorization is limited to the action/s necessary for the provision of each service and with a maximum duration linked to the validity of the applicable Contractual Conditions:
      • To carry out the processing of personal data on portable devices only by the users or user profiles assigned to the provision of the services.
      • To carry out the processing outside the premises of the client or of DERBY RIBERA DEL ORBIGO only by the users or user profiles assigned to the provision of the services.
      • The entry and exit of the media and documents containing personal data, including those included and/or attached to an email, outside the premises under the control of the client responsible for the processing.
      • The execution of the data recovery procedures that DERBY RIBERA DEL ORBIGO is obliged to carry out.
      • DERBY RIBERA DEL ORBIGO is not responsible for the breach of the obligations derived from the RGPD or from the corresponding regulations regarding data protection by the user and/or client in relation to their activity and which is related to the execution of the contract or commercial relations that link them to DERBY RIBERA DEL ORBIGO. Each party must assume the liability arising from its own breach of contractual obligations and the regulations themselves.