Privacy Policy
1. Data Controller
The Data Controller corresponds to the owner of the website, whose full details are: HIJOS DE RIVERA S.A.U. with CIF A15002637 and registered office at Calle José María Rivera Corral 6, 15008 A Coruña.
Data Protection Officer Identification: protecciondedatos@hdriv.es
2. Data processed, purposes, and retention period
2.1 Data processed: The data processed will vary depending on the different sections or services made available to the user and used by them, as well as any additional processing allowed or authorized by the user.
a) Data provided by the user: This refers to data provided by the user when filling out the forms provided, such as registration or newsletter subscription. This includes identifying and contact data, such as full name and email address, among others. Each form will indicate which fields are mandatory and which are optional.
b) Data not provided by the user: While browsing, data may be collected such as those sent by the browser, the IP address assigned by the provider, or information about the device used. This information may be used, with the user’s consent via cookie category acceptance, to personalize content and ads shown, and to help build user profiles. If you register using your social media profile, those networks may provide us with shared data such as geolocation, personal characteristics or social circumstances, or academic and professional data, including identifying data and profile picture. You can review the settings on your social platforms to revoke the permissions granted and, therefore, the data transmitted via the social connector.
2.2 Purposes: The purposes will be as follows:
1. Registration: The user may register in a specific section to manage their preferences, interests, and subscriptions. Registration may also enable access to manage other available sections.
2. Contact: The email or phone provided for contact will be used to effectively respond to submitted queries.
3. Sending newsletters and personalized communications: Sent via the medium chosen by the user—email, messaging system, push notifications, or similar—which must be verified or previously approved by the user.
4. Profile creation: To determine user preferences and interests, we will use the provided data to personalize our products, services, and marketing actions, including those on platforms or social networks where the user is present. Profile creation will never involve automated decisions with legal effects or similarly significant impact on the user.
5. Promotions and contests: When participating in our activities or contests, we will process the data based on each promotional action's requirements. Legal terms will be published for each activity, with more detailed information on personal data processing.
6. Training: We will process the data of users who sign up for our online training platform to manage course content access.
7. Events: User registration in promotional events aimed at promoting brands, actions, or initiatives promoted or supported by Hijos de Rivera.
2.3 Retention: The retention period will be as follows:
1. Registration: The information provided during registration will be retained as long as the user maintains their account.
2. Contact: The data will be retained as long as necessary to fulfill the intended purpose.
3. Sending newsletters and personalized communications: The data will be processed from the time the user consents until the consent is withdrawn, which may be done at any time.
4. Profile creation: The data will be processed from the time the user consents until they withdraw it using the available mechanisms.
5. Promotions, clubs, and contests: The data will be retained for the duration of the activity and for the time strictly necessary to handle potential claims or as required by law.
6. Training: The information will be retained to meet contractual obligations and in case of potential customer or consumer claims.
3. Legal basis for processing
In accordance with the processing carried out on the website, we inform you below of the legal bases for each:
a) Performance of a contract: This applies to data provided during registration, redemption of access codes for training courses, or participation in promotional activities.
b) Consent: Will be duly obtained for profile creation, sending newsletters and news, and responding to questions or inquiries submitted by users.
Consent will always be revocable and may be withdrawn at any time via mechanisms such as the unsubscribe links in communications, the “My Account” section, or by sending a message to the Data Protection Committee's contact email.
c) Legitimate interest: This applies to the sending of commercial communications based on the user’s expressed interests, under the legitimate interest of the Data Controller.
4. Exercise of rights
Any person has the right to obtain confirmation as to whether or not personal data concerning them is being processed. Data subjects have the right to access their personal data, request the rectification of inaccurate data, or request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, data subjects may request the restriction of processing or object to it, in which case the data will only be retained for the exercise or defense of legal claims.
To do so, users may send a written communication to the Data Protection Committee, c/ José María Rivera Corral, 6 15008 A Coruña or to the email address protecciondedatos@hdriv.es, including a photocopy of their national identity document or equivalent supporting documentation in both cases.
As an additional management method, users may modify their privacy options from the “My Account” section, accessible from any Hijos de Rivera website with integrated login. They may also manage their privacy preferences through the links located in the footer of received commercial communications.
Users who wish to do so may file a complaint with the Spanish Data Protection Agency, accessible at https://sedeagpd.gob.es.
5. Recipients and disclosures
To fulfill the purposes indicated in this Privacy Policy, we may rely on third parties, such as technology service providers, customer service, marketing and/or advertising providers, who offer adequate guarantees and with whom a Data Processing Agreement has been signed. We may also share user information with companies in charge of logistics or partners responsible for managing and delivering prizes for promotions and contests.
Collected data may be transferred to servers located outside the European Union, with all necessary guarantees in place, supported by the signing of SCCs (Standard Contractual Clauses).
Version 1.1, updated February 19, 2024