Privacy Policy

Our privacy policy at a glance

Who are we? We are RICARDO RETUERTO CORREDURÍA DE SEGUROS, S.L. and we process your data as data controller. That means we are responsible for how your personal data is used and protected.

What do we use your data for? We use the data you have provided online or through any other channel to handle your enquiries and suggestions.

Why do we hold it? We are entitled to process your data for various reasons. When you fill in a form or send an email raising a query or suggestion, we have a legitimate interest in dealing with it.

Who do we share your data with? We only share data with partner companies to handle requests received and provide our services or products, banking institutions, and bodies required by law. We never sell your data to third parties.

What rights do you have? You have the right to access, rectify or erase your personal data. You also have the right to object to our use of data you have previously authorised us to use, to have it transferred (portability), and not to be subject to automated individual decisions.

When processing your personal data, we apply the following principles to guarantee the greatest protection for you:

• Principle of lawfulness, fairness and transparency: we will always ask for your consent to process your personal data for one or more specific purposes, which we will inform you of beforehand with complete transparency.
• Principle of data minimisation: we will only request data that is strictly necessary for the purposes for which it is required. The minimum possible.
• Principle of storage limitation: data will be kept for no longer than necessary for the purposes of the processing. In the case of subscriptions, we will periodically review our lists and remove any records that have been inactive for a considerable time.
• Principle of integrity and confidentiality: your data will be processed in a way that ensures appropriate security and confidentiality. We take every necessary precaution to prevent unauthorised access to, or misuse of, our users' data by third parties.

We like to be transparent about what we do with your personal data, so that you understand the implications of how we use it and the rights you have in relation to your data. For this reason we keep our privacy policy, legal notice and cookie policy up to date.

1. Who is responsible for processing your data?

RICARDO RETUERTO CORREDURÍA DE SEGUROS, S.L. informs users that the data you provide us when browsing our website, through the various data-collection forms, or by sending emails, will be processed by RICARDO RETUERTO CORREDURÍA DE SEGUROS, S.L., and that such processing is recorded in the Register of Processing Activities in accordance with the requirements of the GDPR.

2. What is your personal data used for?

At retuertoyasociados.com we process data both from users of our website and from third parties who have a relationship with us. To help you understand how we process your data, we have set out the purpose, the types of data and the legal basis according to the category of people whose data we process.

Website users

What data do we collect? From users who fill in any of the available forms:

• Identification data: full name, phone number, postal and email address.
• Data relating to the request.
• From users who browse our website: data provided by cookies and by Google Analytics.

For what purpose? When users accept our privacy policy, they authorise us to use the personal data provided to send them information and to provide the service requested through the various forms available on our website.

How do we obtain your data? Through the form that the website user fills in for the purpose stated in it. The form is subject to acceptance of this privacy policy via the box provided.

What is the legal basis? The user's express consent (Article 6.1.a GDPR) given by completing the various forms. Users may withdraw their consent at any time, although this withdrawal does not affect processing already carried out. Also our legitimate interest in building browsing profiles and detecting preferences by installing cookies, and the performance of a contract or the taking of pre-contractual steps when a client makes a request.

Suppliers

What data do we collect? Identification data of the supplier:

• Identification data: full name, phone number, postal and email address.
• Employment and professional data.
• Activities and business details.

How do we obtain your data? Through signing the contract that binds us, acceptance of the quote presented, receipt of invoices from the supplier, and signing of the data processing agreement, where applicable to the service provided.

For what purpose? To manage information relating to the data of our supplier companies of goods and services, as well as their representatives; to maintain the contractual relationship; and to manage payments and collections relating to the contracts that bind us.

What is the legal basis? The performance of a pre-contract or contract in order to send information and carry out the management of the service provided, which would not otherwise be possible; and our legitimate interest in managing data relating to suppliers' representatives.

Clients

What data do we collect? From clients who fill in any of the forms available on retuertoyasociados.com, as well as at our physical premises:

• Identification data: full name, phone number, postal and email address.
• Data relating to the request.

How do we obtain your data? If you are an online client, through the information request form, subject to acceptance of this privacy policy; browsing data, from the cookies you accept on first access. If you are a client in person, through the client sign-up form, acceptance of the quote presented and the signed contract.

For what purpose? To generate and manage the documentation associated with your requests and purchases, to provide you with information on offers, products and services related to your purchase, and to process your booking or online purchase through our platform.

What is the legal basis? The performance of a pre-contract or contract in order to send information and carry out the management of the service provided or the product supplied, which would not otherwise be possible. Users may withdraw their consent at any time.

3. How long do we keep your data?

Website users

Data processed on the basis of consent will be kept for as long as it remains relevant to the purpose for which it was collected and consent has not been withdrawn.

Data processed on the basis of legitimate interest will be kept for the time linked to the reason for its collection, always ensuring appropriate safeguards and respect for the rights and freedoms of data subjects.

Data processed on the basis of the performance of a contract or pre-contractual measures will be kept for as long as the contractual relationship remains in force, as well as for the subsequent period required by legal obligation.

The IP address obtained through cookies will be kept for a period of one year, in order to demonstrate the user's consent. For more information on the cookie retention period, please see the cookie policy.

Suppliers

Data processed on the basis of legitimate interest will be kept for the time linked to the reason for its collection. Data processed on the basis of a contract, or where part of the processing is based on a legal obligation, will be kept for the duration of the contractual relationship and for the legally required period, and processing may not be withdrawn except in the legally established cases of restriction.

Clients

Data processed on the basis of consent will be kept for as long as it remains relevant to the purpose for which it was collected and consent has not been withdrawn. Data processed on the basis of legitimate interest, for the time linked to the reason for its collection. Data processed on the basis of a contract or legal obligation, for the duration of the contractual relationship and the legally required period.

4. Additional information on data processing

Only persons over 14 years of age may provide data through our website and email. If you are under this age, you must have the consent of your parents or legal guardians.

Users guarantee the authenticity and accuracy of all data they provide to RICARDO RETUERTO CORREDURÍA DE SEGUROS, S.L. and declare that they are over 14 years of age, being solely responsible for any false or inaccurate statements made.

Personal data may be mandatory or voluntary. Special category data will not be requested through the web forms, in order to safeguard your privacy. If it is necessary to collect special category data in order to provide a service, it will be requested through another channel.

Voluntary information is that which users are not obliged to provide in order to contact us. Fields marked with an asterisk (*) or the word "required" on our forms must be completed; refusal to provide them will mean it is not possible to provide the service or handle the request.

If you provide us with third-party data, you confirm that you have the consent of those third parties and undertake to pass on to them the information provided in this clause, releasing RICARDO RETUERTO CORREDURÍA DE SEGUROS, S.L. from any obligation in this regard. Nevertheless, RICARDO RETUERTO CORREDURÍA DE SEGUROS, S.L. may carry out checks to confirm that the third party has been informed, adopting the due diligence measures established under data protection law.

5. Who will your data be shared with?

Data will not be transferred to third parties except where required by law or where necessary to handle your request. Recipients to whom your data may be communicated include:

• Public administrations and bodies, where required by tax, employment, Social Security or other applicable regulations.
• Data processing companies: fraud detection and prevention providers, technology services, customer service providers, advertising and marketing services and, in general, third-party providers necessary for the provision of the services offered, such as courier and transport services.

6. Are there any international data transfers?

retuertoyasociados.com is hosted in the Netherlands, a country within the European Union and the European Economic Area, which complies with the guidelines set out in Articles 46 and 47 of the GDPR. For this reason, no international transfers take place of the data provided by users on the website.

Our website only accesses user data through the contact forms available to users on the site.

International data transfers may also occur in connection with the above disclosures or communications, for which RICARDO RETUERTO CORREDURÍA DE SEGUROS, S.L. will use the tools provided under Articles 46 and 49 of the GDPR as a safeguard for transfers made to countries that do not have an adequacy decision from the European Commission.

In all cases, any third parties with whom certain personal data is shared will have previously demonstrated the adoption of appropriate technical and organisational measures for its proper protection. By accepting this privacy policy, you accept that an international data transfer may take place in accordance with the safeguards indicated.

RICARDO RETUERTO CORREDURÍA DE SEGUROS, S.L. never sells user data to third parties.

7. What rights do you have and how can you exercise them?

Users may exercise the following rights against RICARDO RETUERTO CORREDURÍA DE SEGUROS, S.L.:

• Access their personal data.
• Rectify it when it is inaccurate or incomplete.
• Request erasure or cancellation of the data when, among other reasons, it is no longer needed for the purposes for which it was collected.
• Object to its processing.
• Request restriction of the processing of their data where any of the conditions set out in the regulations apply.
• Request the portability of their data in the cases provided for in the regulations.
• Prevent being subject to automated decisions.
• Withdraw consent previously given.

To exercise your rights, you must send a written request stating which right you wish to exercise, together with a document proving your identity and a postal or email address for notification purposes. You can do this by post to RICARDO RETUERTO CORREDURÍA DE SEGUROS, S.L., Calderón de la Barca, 2 - Oficina 3, 38005 Santa Cruz de Tenerife, or by email to gerencia@retuertoyasociados.com.

RICARDO RETUERTO CORREDURÍA DE SEGUROS, S.L. must respond to the request within one month of receipt. This period may be extended by a further two months where necessary, taking into account the complexity and number of requests; we will inform you of any extension within one month, stating the reasons for the delay.

Data subjects also have the right to lodge a complaint with the relevant supervisory authority (Agencia Española de Protección de Datos, the Spanish Data Protection Agency, www.aepd.es) if they believe RICARDO RETUERTO CORREDURÍA DE SEGUROS, S.L. has infringed the rights recognised under data protection law.

8. Is my data secure?

RICARDO RETUERTO CORREDURÍA DE SEGUROS, S.L. has a contract in place with the hosting company Google LLC for hosting its website, which has the latest security measures in place.

In any event, RICARDO RETUERTO CORREDURÍA DE SEGUROS, S.L. guarantees the adoption of appropriate measures to ensure the confidential handling of your data, given its sensitive nature, and undertakes to keep such data secret, treating it with the utmost discretion. It declares that it has implemented information security policies appropriate to the type of data handled, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

All data provided through our platform is collected using a secure protocol. Our website has an SSL certificate that ensures an encrypted connection is established whenever a user visits the site and exchanges information with us.

9. Links to other websites

If you choose to leave our website via links to other websites not belonging to our organisation, RICARDO RETUERTO CORREDURÍA DE SEGUROS, S.L. will not be responsible for the privacy policies of those websites or for any cookies they may store on the user's computer.