Privacy policy

ROVALMA S.A. gives high importance to the protection of personal data and to the compliance with all respective legislation.

The aim of this section on privacy policy is to inform you on how we process personal data that you provide to us in the context of using our website in compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016 (GDPR) and in accordance with the Spanish Law 3/2018, of 5 December 2018, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

ROVALMA S.A. (hereinafter referred to as “ROVALMA”)

C/ Collita, 1-3, Pol. Ind. Molí de la Bastida
08191-Rubí (Barcelona), Spain
Phone: (+34) 93 586 29 49
Fax: (+34) 93 588 18 60
E-mail: rovalma@rovalma.com

E-mail contact address for data protection issues: dataprotection@rovalma.com

Web address: www.rovalma.com (hereinafter referred to as “Website”)

Registered office: Terrassa
Registered at the Commercial Register of Barcelona volume 3549 page 90, Sheet 37519, Section 2.

TIN: ES A08466641

The company does not have a Data Protection Officer (DPD-DPO) as, according to the law, it is not mandatory for ROVALMA to appoint one.

1. PURPOSES OF DATA PROCESSING

Users of the Website

We process the personal data you provide to us for the following purposes:

Process your queries and requests made through customer service, contact or press channels posted on our Website
The purpose of operating, safeguarding, and optimizing the Website
Comply with legal obligations regulating our business
Protect and exercise our rights
Send newsletters concerning the goods and services provided by us

Customers and Suppliers

We process the personal data you provide to us for the following purposes:

Reply to your queries and requests made through customer service, contact or press channels posted on our Website
Process issues concerning existing contractual or pre-contractual relationships
The purpose of operating, safeguarding, and optimizing the Website
Comply with legal obligations regulating our business
Protect and exercise our rights or reply to complaints

Job candidates:

We process the personal data you provide to us for the following purposes:

To inform you about vacancies in our company, or manage job application processes, in case you send us your CV through the emails posted on our Website.
The purpose of operating, safeguarding, and optimizing the Website
Comply with legal obligations regulating our business
Protect and exercise our rights

2. LEGITIMATION OF THE PROCESSING OF PERSONAL DATA

Data is processed on the basis of Article 6(1) (f) (legitimate interest) and/or (1) (a) GDPR.

The processed personal data is used for statistical analysis and for the purpose of operating, safeguarding, and optimizing the website. Any other use of your personal data (e.g. sending of newsletters) only takes place with your consent.

Users of the Website

Personal Data processing by ROVALMA is based on

The consent of the interested party to:
Reply to your queries, questions and requests made through customer service, contact or press channels posted on our Website and to contact you in order to process them.
Send newsletters concerning the goods and services provided by us

In case you reject to provide us with personal data, we may not be able to process your data for the above-mentioned purposes.

Legitim interests of the data processor

For the purpose of operating, safeguarding, and optimizing the Website
Comply with legal obligations regulating our business
Protect and exercise our rights

Customers and suppliers

Personal Data processing by ROVALMA is based on:

The execution of a contract or the application of contractual measures
- Manage and provide services contracted through this Website by customers, or manage and receive services provided to us through this Website by suppliers
- Administrative, accounting and financial setup / management of existing business relationships
- Send newsletters concerning the goods and services provided by us
The consent of the interested party for:
- The execution of pre-contractual measures in which you take part when interested in buying or contracting our goods or services.

In case you reject to provide us with personal data, we may not be able to process your data for the above-mentioned purposes.

Legitim interests of the data processor

For the purpose of operating, safeguarding, and optimizing the Website
Comply with legal obligations regulating our business
Protect and exercise our rights

3. DURATION OF PROCESSING AND TERM OF DATA STORAGE

We will only retain your personal data for as long as it is necessary for the purposes for which there were collected and for as long as you do not revoke your consent.

If we have signed any type of contract with you, once the contractual relationship has ended, we are obliged to keep your data for the legally established periods that apply to our activity.

In all cases, your data will be kept only for these purposes, and access to them and any other treatment other than that indicated above will be blocked.

4. RECIPIENTS

Without your consent, we will not transfer your personal data collected based on our Website to third parties unless it is required to perform our duties or required by law/authorities.

We engage service providers to process personal data (e.g. within the scope of an IT support contract, or to arrange the transport of purchased goods). These processors are contractually bound to comply with applicable data protection regulations.

5. CROSS-BORDER DATA TRANSFERS

ROVALMA, as a company with international outreach, maintains business relationships with third companies that may render their services from outside the EU for the supply of ROVALMA products and services, as a result of which it is possible that your data may be transferred outside of the European Union or the European Economic Area.

Such cross-border data transfers shall be based on and may include the following safeguards:

Standard contractual clauses approved by the European supervisory authority that provide safeguards to ensure that data processing complies with the requirements established by the European Data Protection Regulation.
Where the transfer is to a country which has been assessed by the European Commission as ensuring an adequate level of protection for personal data
With your explicit consent for cross-border data transfers, or
The transfer is compliant with the GDPR and other applicable laws.

6. EXERCISE OF RIGHTS AND COMPLAINTS TO THE SPANISH DATA PROTECTING AGENCY (AEPD)

The interested parties that are subject to any treatment of personal data carried out by ROVALMA, may exercise any of these rights at any time and free of charge:

Right of access. You are entitled to find out which of your personal data are processed and the purposes for which we process them.
Right of rectification. You may at any time request that your personal data be rectified if the records we hold of them are wrong.
Right of erasure. You may at any time request that your personal data be erased from our records. However, please note that in certain circumstances compliance with the laws in force may prevent this right from actually being exercised.
Right to restriction of processing. The right to restrict the use of personal data, so that data treatment can only continue subject to restrictions.
Right to object. You may object to your personal data from being processed in relation to any of the purposes for which we process them, pursuant to the privacy policies that may apply in each case.
Right to data portability. Provided that it is technically possible to do so and reasonable, you shall be entitled to request that the personal data that you have directly submitted to us be disclosed to another data controller. If this is possible, we shall directly disclose your data to said other data controller, but if it were not possible, we shall provide them to you in a standard format.
Right to withdraw the consent
Right not to be the subject of a decision based solely on automated processing, including profiling.
Right to file a claim with the Control Authority.

Any person has the right to obtain confirmation about whether a data processor is treating personal data that concerns him or not. Interested persons have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes that these collected for.

Those interested may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims. In certain circumstances and for reasons related to the particular situation, the interested parties may object to the processing of their data. In this case, ROVALMA will stop processing the data, except for legitimate reasons, or the exercise or defense of possible claims.

If you have given your consent for a specific purpose, you have the right to withdraw the consent given at any time, without affecting the legality of the treatment based on the consent prior to such withdrawal.

For this, you can use the forms provided by ROVALMA, or write a letter to the postal address C/ Collita, 1-3, Pol. Ind. Molí de la Bastida. 08191-Rubí (Barcelona), Spain or send an email to dataprotection@rovalma.com.

We inform you that these requests must always be accompanied by a photocopy of your ID card, passport or equivalent document in order to prove your identity.

In case you feel your rights are violated in relation to the protection of your personal data, especially when you have not obtained satisfaction in the exercise of your rights, you can submit a claim to the competent Data Protection Control Authority of its Website: www.agpd.es.

In compliance with the provisions of article 21 of Law 34/2002 on services of the information society and electronic commerce, if you do not wish to receive more information about our products and services, you can unsubscribe to the email address of ROVALMA, indicating in the subject “Unsubscribe”.

7. DATA VERACITY

The interested party guarantees that the information provided to us is true, accurate, complete and up to date and undertakes to report any changes to the information provided, through the channels provided for this purpose and indicated in point 1 of this policy. He/she shall be liable for any loss or damage, whether direct or indirect, which may be causes as a result of failure to comply with this obligation.

In the event that the user provides data concerning third parties, he/she declares that he has the consent of the interested parties and undertakes to transfer the information contained in this clause, exempting the organization from any liability arising from the failure to comply with this obligation.