FLORIDO DOLCET ESTEVE (RAFTING SORT RUBBER-RIVER) hereby informs users of this website of its policy regarding the processing and protection of the personal data of users and customers.
It guarantees at all times full and complete compliance with the obligations set out in the regulations on data protection and information society services: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD) and Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSIce).
Data controller
– FLORIDO DOLCET ESTEVE (RAFTING SORT RUBBER-RIVER)
– Tax ID No.: 78069967D
– Address: Av. de la Diputació, 14, 25560 Sort, Lleida
– Telephone: +34 973 620 220
– Email: rafting@rubber-river.com
Purposes of data processing
The data provided by the User is used for various purposes, which are listed below:
| Purpose of processing | Legal basis for processing |
| To manage enquiries or any type of request made via the contact forms made available on the website. | The Company’s legitimate interest in responding to requests for information via the website. Consent expressly given at the time of data collection via the web forms. |
| Sending newsletters, commercial communications and promotions. | Consent given expressly at the time of data collection via the web forms. |
| Managing website incidents and maintenance. | Legitimate interest of the Company. |
Data retention period
| Purpose of processing | Retention period |
| To manage enquiries or any type of request made via the contact forms provided on the website. | We will process your data for as long as necessary to deal with your enquiry or request. |
| Sending newsletters, commercial communications and promotions. | We will process your data until you unsubscribe. |
| Managing website incidents and maintenance. | We will process your data for as long as necessary to comply with the applicable statutory limitation periods. |
Recipients of the data
In order to fulfil the purposes set out in this Privacy Policy, we need to grant access to your personal data to third parties who assist us in providing the services we offer you (Data Processors).
These data processors act on behalf of the Data Controller to fulfil a contract or provide a service, following the Data Controller’s instructions at all times and ensuring the same levels of security.
Users’ rights
You have the right to:
- Request access to your personal data that is being processed and receive this information in writing via the requested method.
- Request the rectification of inaccurate personal data or, where appropriate, request its erasure when, amongst other reasons, the data is no longer necessary for the purpose for which it was collected.
- Request the restriction of the processing of their data.
- Object to the processing of their personal data where applicable, in which case their data will no longer be processed except for legitimate reasons.
- The right to data portability where the processing is based on consent and is carried out by automated means. The data will be provided in a structured, commonly used and machine-readable format.
- Right to withdraw consent given.
- Right to lodge a complaint with the Spanish Data Protection Agency.
The User may exercise the aforementioned rights by writing to the postal or email address of the Data Controller, providing proof of identity by means of a scanned copy of their National Identity Card or equivalent document, and specifying the right they wish to exercise.
Source of data
Personal data will be provided by the data subject themselves on a strictly voluntary basis. Failure to provide certain data or to answer questions that may be asked during the registration process or in the various electronic forms presented to the User may result in the inability to access certain services for which personal data is essential; in such cases, the Data Controller will inform the User of the mandatory and/or necessary nature of providing personal data for the service to function.
The Data Controller assures you of the confidentiality of your personal data and guarantees its security, taking the necessary measures to prevent its alteration, loss, unauthorised processing or access.
Information provided by the user
Minors under the age of 18 may not provide their personal data without the prior consent of their parent and/or legal guardian.
By entering their data in the contact forms or on download forms, Users expressly, freely and unequivocally accept that their data is necessary for the Data Controller to respond to their request, whilst the inclusion of data in the remaining fields is voluntary.
The User guarantees that the personal data provided is accurate and undertakes to notify the Data Controller of any changes thereto.
All data requested via the website is necessary to provide an optimal service to the User. Should not all data be provided, there is no guarantee that the information and services provided by the Data Controller will be fully tailored to your needs.
Security measures
In accordance with the provisions of current regulations on the protection of personal data, the Data Controller is complying with all the provisions of the GDPR and LOPDGDD regulations regarding the processing of personal data under its responsibility, which is processed lawfully, fairly and transparently in relation to the data subject and is adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.
The Data Controller guarantees that it has implemented appropriate technical and organisational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of Users and has provided them with the necessary information to enable them to exercise those rights.
Data breaches
The Data Controller shall notify any data breach affecting the database used by this website, or affecting any of our third-party services, to each and every individual whose data may have been affected, and to the relevant authorities, within 72 hours of the breach being detected.
Applicable law and jurisdiction
The Data Controller reserves the right to bring any civil or criminal proceedings it deems necessary in respect of the misuse of the Website and its Content.
The relationship between the User and the Data Controller shall be governed by the legislation in force and applicable in Spain. Should any dispute arise in relation to the interpretation and/or application of this agreement, the parties shall submit their disputes to the ordinary courts, submitting to the judges and courts that have jurisdiction in accordance with the law.