In accordance with the EU law 2016/679 of the Parliament and the Council of the 27 of April of 2016 dealing with the protection of individuals in that which refers to their personal data and the free circulation of it, the Management of RISBOX informs its clients, users and general public of the following:
For any aspect in relation to this matter, the client can contact the person in charge of data protection at the following postal address; c/ Doctor Serafín Bohórquez 20B, Ubrique, CP 11600, CADIZ (España).
Furthermore, you can contact the person in charge of data protection via email, to the following address: firstname.lastname@example.org
WHO IS RESPONSIBLE FOR YOUR DATA TREATMENT?
A) If you are a user of RISBOX, the company RISBOX is in charge of your data treatment:
Calle Doctor Serafín Bohórquez 20B, Ubrique, CP 11600 , CADIZ (España) .
C/ Sorgo 50 Madrid
C Juan Bautista Perales 8 bajo 2 Valencia
C/ Rodes 39 Bajo Local 3 Barcelona
B) If we have your data because you have requested information about our services or products available on our RISBOX website, RISBOX is in charge of your data. RISBOX’s address is c/ Serafín Bohórquez 20B, Ubrique, CP 11600, CADIZ (España).
¿WHAT PERSONAL DATA DO WE TREAT AND WHERE DOES IT COME FROM?
Due to your relationship with us the following categories of personal data could be treated:
- Contact data of the client (including signature, image,);
- Personal characteristics, social circumstances;
- Transaction data (payments, deposit, bank transfers, debt) The data is provided by the client.
WHY DO WE PROCESS YOU PERSONAL DATA?
The personal data can be treated by those responsible with the following purpose:
1.- Service provision: your personal data is treated with the aim of providing the service required, for example:
- Assist any communication with RISBOX;
- Manage any incident or complaint from the client;
- Create surveys with the aim of getting to know the client’s opinion about the service received. They will exclusively be used to improve and develop our services;
2.- To attend information requests, complaints, suggestions, exercises of data protection etc. In these cases, the data will be treated with the purpose of handling and processing the requests by any channels, including electronic and telephonic communications.
3.- Comply with legal obligations: it might be necessary to treat personal data with the aim of complying with the corresponding legal requirements. Specifically, to comply with the legislation in the area of data protection, tax law and labor
4.- Formalization and execution of the contract: the personal data of the client is treated with the aim of handling the contractual relationship with the client.
5.- Commercial communications delivered through any channel in case of additional consent. If you explicitly consent, your data can be handed over with the objective of informing through any channel for promotional and advertising purposes about restaurants, services, products or events related to RISBOX (your data will never be used to send you advertising content which isn’t related to RISBOX).
The data collected will be treated for the specified aims and never in an incompatible way to those aims.
Your data will always be used to ensure the quality of our customer service, no matter which channel you use to contact us whether through the web page, through the telephone, though mobile application or in person.
HOW ARE WE LEGALLY PERMITTED TO PROCESS YOUR DATA?
|Purpose||Basis for data treatment|
|Service Provision||The treatment of the data is necessary for the execution of a service in which the interested party takes part. The treatment is based on the consent of the interested party.|
|Application service||The treatment is based on the consent of the interested party and / or the legitimate interest of the person responsible of the treatment.|
|Compliance with legal obligations||The treatment of the data is necessary to comply with the legal obligation applicable to the person responsible of data treatment.|
|Formalization and execution of the contract||The treatment is necessary for the execution of the contract of which the interested party is part.|
|Delivery of commercial communications||The treatment is based on the consent of the interested party.|
HOW LONG WILL WE KEEP YOUR DATA?
In general terms the data will only be stored the necessary time to complete the purpose it was required for. The length of time for which we keep your data will depend on the purpose for which they were gathered.
The personal data provided, together with the data derived form the commercial relationship will be stored according to each case. The minimum time of storage is five years from the date in which the service was provided unless the regulations of the autonomous or specific government establishes otherwise. If they require a longer minimum time of storage, we will act accordingly.
Once this minimum period is over and having finished our commercial and contractual relationship, the person responsible will keep your data blocked and under a pseudonym for the period established by law.
The personal data provided in order to deal with any complaint, suggestion, information requirement or to exercise your right of data protection will be stored the time necessary to process the request and always according to the legal established time, as well as for the necessary time for any exercise, formulation or defense of a complaint.
The data treated to comply with legal obligations will be stored during the time stablished in the applicable legislation. The data gathered for the formalization and execution of the contract will be stored for same duration of time as the contact lasts as well as for the necessary period for any exercise, formulation or defense of a complaint, five years minimum.
The data used for sending commercial communications will be stored until the interested party revokes their consent and / or exercises their right of opposition or suppression.
WHO WE SHARE YOUR DATA WITH?
To ensure that we provide an appropriate service we need certain service providers and/ or entities of the group who treat data on behalf of the responsible and as in charged of treating your persona data. These entities can be for example, an auditing firm, IT services, legal advisory service, paperwork destruction, physical security, storage, digitalization of information, etc.
Your personal information will not be revealed to third parties unless there is a legal obligation, vital interest o previous consent of the interested person. All the information you provide will be treated confidentially and strictly complying with security obligations to prevent access to any unauthorized thirty parties.
WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE US WITH YOUR DATA?
You have the right to access, rectify incorrect data or delete your personal data when, among other reasons, they are no longer necessary for the purpose which they were collected for. In certain circumstances you will be able to limit your data treatment. In this case we will only store your data for the exercise or defense of a complaint. Finally, you are also entitled, according to your personal situation, to exercise you right of opposition and portability. Additionally, you have the right to withdraw at any time the consent for the treatment of your personal data.
Exercising your rights, as well as revoking your consent for treating your data are both free, except in the alleged cases of art 12.5 of EU Regulation 679/2016. If you are a client of RISBOX, you can exercise your right physically at customer service through postal service to the attention of “Customer Service” of RISBOX with the reference “data protection rights” providing a copy of your ID or equivalent document and indicating the right you wish to exercise. Furthermore, we inform you of the possibility of presenting a complaint to the competent supervisory authority according to the corresponding procedure depending on each case.
 States members of the European Union as well as Island, Norway and Lichtenstein