Privacy Policy
DATA CONTROLLER INFORMATION
Controller: Identity: The Ring Private
NIF: G86883709
Address: Amparo, 78 – Local 1 Madrid 28012
Phone: 911823370
Email: theringprivate @ gmail.com
Email for Data Protection matters: theringprivate @ gmail.com
1.1. Applicable Regulations
Our Privacy Policy has been designed in accordance with the EU General Data Protection Regulation (GDPR) 2016/679 of the European Parliament and of the Council of 27 April 2016, concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data, and which repeals Directive 95/46/EC, as well as the Spanish Organic Law 3/2018 of December 5, on Personal Data Protection and Guarantee of Digital Rights.
By providing us with your data through the designated channels, you declare that you have read and understood this Privacy Policy and give your explicit and unequivocal consent to the processing of your personal data for the purposes and under the terms set forth herein.
The Ring Private may modify this Privacy Policy to adapt it to legislative, jurisprudential or interpretive developments of the Spanish Data Protection Agency. These privacy conditions may be supplemented by the Legal Notice, Cookie Policy and the General Terms and Conditions, where applicable, if such access implies any specificity regarding personal data protection.
2. PRINCIPLES ACCORDING TO THE GDPR
We commit to processing the personal data (hereinafter “data”) provided in accordance with the following principles set out in the General Data Protection Regulation (GDPR):
-
Lawfulness: We will only collect your personal data for specific, explicit, and legitimate purposes, and will not process your data in any way incompatible with those purposes.
-
Legal Basis: In accordance with Article 6 of the GDPR, your data will be processed only when you give explicit consent, or when necessary to execute a contract, comply with legal obligations, protect vital interests, fulfill a task carried out in the public interest, or where justified by legitimate interests that do not override your fundamental rights and freedoms.
-
Fairness and Transparency: In compliance with Article 5 of the GDPR, we inform you about the existence of data processing operations and their purposes.
-
Data Minimization: We limit the collection of personal data to what is strictly necessary and relevant for the purposes stated.
-
Purpose Limitation: Your data will be collected for specific, explicit, and legitimate purposes and processed accordingly.
-
Accuracy: We keep your data accurate and up to date.
-
Data Security: We implement appropriate technical and organizational measures to ensure a proper level of security, preventing unauthorized access, disclosure, loss, or alteration of personal data.
-
Storage Limitation: Data will be retained only as long as necessary for the purposes of processing, without undue delay, and always available upon request by users or clients.
You have the right to request the exercise of the following rights: access, rectification, opposition, erasure, restriction of processing, data portability, and the right not to be subject to automated decision-making. This exercise is free of charge and will be addressed within one month, extendable to two months under exceptional circumstances such as high request volume or complexity.
3. PURPOSE OF DATA PROCESSING
We process your personal data for the following purposes:
-
To provide information related to the activities of The Ring Private as detailed on this website.
-
If you register as a member of The Ring Private, we will collect the necessary data to carry out cooperation, assistance, or advisory activities, as mentioned above, requesting only the minimum required data.
-
To send you news and updates about our organization via email and/or postal mail, provided you have authorized such communications.
3.1. Data Retention Period
We will retain personal data provided through this website only as long as necessary to respond to your inquiry. If you do not wish to receive advisory services or register as a user, your data will be retained for a maximum period of one year.
If you register as a user, the data will be kept for the proper development of actions according to your requests and purposes, from the moment you give your consent, unless you revoke it or request the limitation of processing. In such cases, your data will be securely blocked and retained for the legally required periods.
4. LEGAL BASIS AND DATA COLLECTED
The legal basis for processing your data is the explicit consent granted through a positive and affirmative action (completing the relevant form and checking the acceptance box for this policy) at the time of providing your personal data.
Likewise, if you are interested in participating in our programs or using our services, the necessary data will be collected on the same legal basis of consent in accordance with Article 6 of the GDPR.
4.1. Consent to Process Your Data
By filling out the forms, checking the “I accept the Privacy Policy” box, and clicking to submit, or by sending emails to The Ring Private, the user confirms they have read and expressly accepted this Privacy Policy and consents to the processing of their personal data as described.
4.2. Categories of Data
The data collected through the contact form includes identification data such as: full name, phone number, postal address, email, and the IP address from which the form is accessed.
Only if the user registers for services provided by The Ring Private will additional data be requested, as needed in each case, always minimizing the data collected.
Sensitive data will only be collected when absolutely necessary for the provision of services, and only with prior informed and explicit consent from the user.
Currently, no such special category data is being collected.
5. SECURITY MEASURES
As part of our commitment to the security and confidentiality of your personal data, we have implemented the necessary technical and organizational measures to ensure the security of personal data and prevent its alteration, loss, or unauthorized processing or access, considering the state of the art, the nature of the data stored, and the risks involved, as provided in Article 32 of the GDPR and ISO 27002 standards.
6. DATA SHARING
If you are interested in receiving advisory services or participating in any programs of The Ring Private, you may be referred directly to a relevant company, which will become the Data Controller of your information. In such cases, The Ring Private will not store your information unless explicitly authorized by you.
In other instances, as previously explained, The Ring Private may register the user or interested party to provide a direct service or manage the activity based on their specific needs. In this case, with your express consent, The Ring Private will act as the Data Controller. The data may be shared with the appropriate partner company or organization, and the user will always be informed in advance.
No international transfers of your data are foreseen, except as permitted by tax, commercial, or telecommunications laws, or in cases required by a judicial authority.
7. USER RIGHTS
Any user has the right to obtain confirmation on whether we are processing personal data concerning them.
Users have the right to access their personal data, request correction of inaccurate data, or request deletion when the data is no longer necessary for the purposes collected.
Under certain circumstances, users may request the limitation of data processing, in which case data will only be kept for exercising or defending legal claims.
For reasons related to their personal situation, users may also object to data processing.
The controller will cease processing data unless there are compelling legitimate grounds or to exercise or defend possible claims.
You may also revoke your consent or object to receiving communications about our activities at any time by sending an email to theringprivate @ gmail .com
If you believe your request has not been properly handled or your data is not being processed appropriately, you may file a complaint with the Spanish Data Protection Agency.
Below are direct links to exercise your data protection rights through the forms provided by the Spanish Data Protection Agency:
-
A) RIGHT OF ACCESS
Article 15 of the General Data Protection Regulation recognizes the data subject’s right to know whether their personal data is being processed, the purposes of the processing, the categories of data, the recipients, the source of the data, the retention period, and the criteria for determining that period. Therefore, the data controller will provide an electronic copy of the personal data processed upon submitting the request.Data controllers may also request rectification, erasure, or restriction of data and processing.
To facilitate the exercise of this right, we provide you with the form you must complete for your request via the following link:
https://www.aepd.es/media/formularios/formulario-derecho-de-acceso.pdf
B) RIGHT TO RECTIFICATION AND ERASURE
Articles 16 and 17 of the General Data Protection Regulation establish the right to rectification and deletion of personal data. Clients or users may request rectification of their personal data because they consider it inaccurate, or that it be completed or deleted because it is no longer necessary for the purposes for which it was collected and processed.
In order to facilitate the exercise of this right, we provide the user with the form they must complete for their request via the following link:
https://www.aepd.es/media/formularios/formulario-derecho-de-rectificacion.pdf
https://www.aepd.es/media/formularios/formulario-derecho-de-supresion.pdf
C) RIGHT TO RESTRICT PROCESSING
The data subject shall have the right to obtain from the data controller restriction of processing when they contest the accuracy of their personal data. This means that the data may only be processed, except for storage, with the data subject’s consent, for the exercise or defense of legal claims, to protect the rights of another natural or legal person, or for reasons of public interest of the Union or a specific Member State. Furthermore, the data controller shall inform the data subject before such restriction is lifted.
To facilitate the exercise of this right, we provide a form that you must complete for your request via the following link:
1. D) RIGHT TO DATA PORTABILITY
Article 20 of the General Data Protection Regulation recognizes the right of data subjects to receive their personal data, that is, to have it transmitted directly from one controller to another, where technically feasible, in a structured, commonly used, and machine-readable format, without hindrance from the controller to whom the data has been provided, where consent has been expressly granted or through a contract.
To facilitate the exercise of this right, we provide you with the form you must complete for your request via the following link:https://www.aepd.es/media/formularios/formulario-derecho-de-acceso.pdfPortability Request Form (PDF)
1. CONFIDENTIALITY
Any personal data collected will be treated with absolute confidentiality. The Association undertakes to safeguard this data and prevent unauthorized alteration, loss, access or processing in accordance with applicable laws.
The Controller ensures that confidentiality agreements are signed with any persons involved in any phase of processing the collected personal data.
8. CONSENT FOR ELECTRONIC COMMUNICATIONS
In accordance with Law 34/2002 of July 11 on Information Society Services and Electronic Commerce, by completing the data collection form and checking the “I accept the sending of electronic communications” box, you are giving your express consent to receive information by email, phone, or other electronic means about services and activities of The Ring Private that may be of interest to you.
You may withdraw this consent at any time by unsubscribing from these communications.