Privacy Policy

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), you are informed that the controller of your personal data is:

• Identity: Rubio Hernán S.L.
• Tax ID (NIF / CIF): B40139545
• Address: José Zorrilla 101, 1°, 40006 Segovia, Segovia
• Email: corderoycochinillodesegovia@gmail.com
• Data Protection Officer (DPO): Not applicable

Depending on the services you use, we may process the following categories of data:

• Identification data: first name and surname.
• Contact data: email address and phone number.
• Browsing data: IP address, browser type and version, pages visited and time spent (through cookies, if you consent to them; see our Cookie Policy).
• Content of communications: the message included in the contact form.

We do not collect special categories of data (health, racial origin, beliefs, etc.) through the Website.

Your personal data is processed for the following purposes:

• Handling the enquiries you send us through the contact form or by email.
• Managing the commercial relationship and responding to requests for quotes or information about our products.
• Statistical analysis and improvement of the Website through web analytics tools, provided that you have given your consent.

The legal basis for processing your data is:

• Performance of a contract or pre-contractual measures (Art. 6.1.b GDPR): when you request information about our products or services.
• Legitimate interest (Art. 6.1.f GDPR): to manage and respond to the enquiries received.
• Explicit consent (Art. 6.1.a GDPR): for the use of non-essential cookies and, where applicable, for sending commercial communications. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out beforehand.

Data will be kept for the time necessary to fulfil the purpose for which it was collected and, in any case:

• Data from contact forms will be kept for 12 months from the last communication, unless a longer period is necessary for the exercise or defence of legal claims.
• Web analytics data will be kept in accordance with the service provider's policy (see the Cookie Policy).

Once the period has elapsed, the data will be deleted or anonymised.

Your data will not be disclosed to third parties except where legally required or where strictly necessary to provide the service you requested. The data processors we work with include, among others:

• Hosting / infrastructure provider: Vercel Inc., with servers in the United States (transfer with appropriate safeguards, standard contractual clauses).
• Email sending service: Resend Inc.

In the event of international transfers of data outside the European Economic Area, these will be carried out with the appropriate safeguards provided for in the GDPR (adequacy decision, standard contractual clauses or another valid mechanism).

You may exercise the following rights at any time, as recognised in Articles 15 to 22 of the GDPR and in the LOPDGDD:

• Access: to know what data we process about you.
• Rectification: to correct inaccurate or incomplete data.
• Erasure (“right to be forgotten”): to request the deletion of your data when it is no longer necessary.
• Restriction of processing: to request that we suspend the processing in certain circumstances.
• Objection: to object to processing based on legitimate interest.
• Portability: to receive your data in a structured and commonly used format.
• Withdrawal of consent: at any time, without retroactive effect.

To exercise these rights, send a written request to corderoycochinillodesegovia@gmail.com, stating your first name and surname, a copy of your identity document and the right you wish to exercise. We will reply within a maximum of one month (extendable by a further two months in complex cases).

If you consider that the processing of your data infringes the applicable regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es).

This Website uses first-party and third-party cookies. For more information about the cookies we use, their purposes and how to manage them, see our Cookie Policy.

We may update this Privacy Policy to adapt it to legislative or case-law changes or to changes in our internal practices. The current version will always be available on this page, stating the date of the last update. We recommend that you review it periodically.

For any query regarding the processing of your personal data you may contact: corderoycochinillodesegovia@gmail.com or by post at José Zorrilla 101, 1°, 40006 Segovia.