Personal Data is the information that identifies you or may identify you. Through the website, in the boxes that are stablished for that purpose, it is collected the personal data that the user provides us: Name, surname, email, telephone number, postal code, city, etc. In addition, it is collected all the personal data that the user voluntarily provides us through any of the social networks, of which the user is registered. In this case, the privacy settings will depend on both the configuration that the user established as well as the terms and conditions of the social network itself.
When a User visits the website, this does not mean that he/she has to provide any information about his/her personal data. However, if such information is provided, the data will be processed lawfully and subject at all times to the principles and rights contained in the GDPR 2016/679 of 27 April 2016 and the LOPDGDD 3/2018 of 5 December.
With the API, we only collect and search for the ID of a particular vuser, the ID is stored in our database located in OVH cloud with in transit encryption.
The customer information for shipping the purchased products we collect is as follows:
-Name
-Address
-Phone
-Cookie preferences
Additionally we may use non-personal information such as :
- The type of browser you use
- The operating system you use
The information is stored in our OVH cloud databases, stored with an intrasit encryption. These data will be kept as long as the user does not request deregistration and for the time established by law with a minimum duration of 3 years.
In OVH Cloud we make several backups daily.
How do we use your information?
We use the information you provide to us to send you advertising and promotional communications. We may combine the information we collect from you and use it for purposes consistent with this privacy policy, subject to your additional consent in the case of advertising. Once you have consented to such combination of information, at any time, you will be given the opportunity to opt-out of receiving advertising about RON or any of its stores.
Purpose, duration and legitimation of the processing:
We will process the data provided to us by the user for the following purposes:
- To deal with the user’s application or request made using the contact form on the website. We collect and process the user’s personal data to enable us to process and manage his/her application, query or any request made using said form. We will keep these data for the time necessary to comply with the request and for the time established by law, with a minimum duration of 3 years. The basis for legitimation of the data processing will be the consent granted by the user when checking the box for acceptance of our privacy policy before sending the request. The user has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.
- To manage the experiences or opinions regarding the products and/or services through the user opinions that will be published on the website, and thereby help other users. The only personal data that will be published in relation to the user opinion will be the user’s name and town/city. We will keep the data given to us for as long as the user does not request that they be revoked, and for the time established by law, with a minimum duration of 3 years. The basis for legitimation of the data processing will be the consent granted by the user when registering using the form provided for this purpose on the website and checking the box for acceptance of our privacy policy before sending the request.
- To deal with and manage the purchase made by the user using the purchase form on the website. We collect and process the user’s personal data to enable us to process the order and subsequent payment for the products and services offered on the website. We will keep these data for the duration of the contractual relationship between the parties and for the time established by law for compliance with the tax obligations. The basis for legitimation of the data processing will be the performance of a contract of sale to which the data subject is a party. If the user does not provide his/her personal data, it will not be possible to manage his/her purchase and the requested service cannot be provided.
- To save the abandoned shopping cart and remind the user that they have left a product in the shopping cart, in case they had initiated a purchase by entering their email address. The personal data will be kept at the moment the user adds the selected product to the shopping cart until the moment he confirms it for a period not exceeding five days. The ground of lawfulness for the processing of the personal data will be the legitimate interests of the Controller for facilitating as much as possible the purchase of the product to which the user has shown interest by adding it to the cart.
- To send circulars and newsletters about RON Indsurtry products. When we have the user’s consent, we collect and process his/her personal data to send him/her information about our products and services. We will keep these data for as long as the user does not revoke his/her consent to them being processed, for the time established by law and for a minimum duration of 3 years. The basis for legitimation of the data processing will be the consent granted by the user when checking the box for acceptance of our privacy policy before subscribing to the newsletter in the form provided for this purpose on the website. The user has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.
- To manage the CV/résumé sent by the data subject using the form provided for this purpose, and include it in the database of company candidates. These data will be kept for a maximum of one year, after which time the data will be blocked for the time established by law, with a guarantee that confidentiality will be fully respected both in their processing and subsequent destruction. The legitimate basis for managing and processing the data subject’s CV/résumé is his/her consent; this is given by carrying out the affirmative action of sending it and checking the box for acceptance of our privacy policy prior to it being sent. The user has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.
- To register as a “registered user” on the registration form on the website, which will allow the user to access his/her private services area and be informed of our activities; this will enable us to send him/her by any electronic medium commercial communications about the new features of our services. We will keep these data for as long as the user does not request cancellation of his/her registration, and for the time established by law, with a minimum duration of 3 years. The basis for legitimation of the data processing will be the consent granted by the user when registering with the registration form and checking the box for acceptance of our privacy policy before sending the request. The user has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.
- To improve the user experience when browsing the website. We will keep these data for as long as the user does not revoke his/her consent to them being processed by deleting the cookies, for the time established by law and for a minimum duration of 3 years. The legitimate basis for improving website browsing is the consent given by the user when accepting the cookies. The user has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.
- To manage our social networks and send users information about our activities and products. We will keep these data for as long as the user does not revoke his/her consent to them being processed, for the time established by law and for a minimum duration of 3 years. The legitimate basis for managing our social networks and sending users our activities and new features is the consent we are given to do so. The user has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.
- To manage the ´Customer Service´ chat service offered on our website for any questions concerning our services/products. With the aim of constantly improve the quality of our customer service, we record the history of the chat under the analysis and improvement purposes. These records are deleted once evaluated and having met the time established by law with a minimum duration of 3 years. The lawful ground for the processing is the consent of the data subject granted to us for the use of the service. The user has the right to revoke their consent at any time without affecting the lawfulness of the processing based on the consent prior to its withdrawal.
- Manage the sending of satisfaction surveys based on the purchase of the product or service requested to improve on a daily basis the experience of our customers. The personal data will be deleted once the survey has been concluded as well as the reasonable time to make improvements, activate new services and meet the requirements established by the current applicable law. The processing of your personal data will be based on the legitimate interest to improve the quality of the service when the user has purchased products and/or services. In the absence of such a contractual activity, the processing of personal data will be based on the user’s consent set forth in the current regulations in force. Additionally, if you withdraw your consent to any of the processing, this will not affect the lawfulness of the processing conducted previously.
- To manage communication via Messenger that RON Industry makes available to users in order to meet their needs and concerns. The fact of using the WhatsApp application as a means of communication implies an international transfer of data, although the servers of the Messenger application for EU users are located in Ireland, communications with US servers could be given. The RESPONSIBLE is the sole recipient of the data and will only have access to the name, phone number and conversations contributed to the chat. The use of the information contained in the chat for other purposes is strictly prohibited. With regard to data retention, the history of communications that are necessary for the purpose described above will be kept for the duration of the communication. In addition, when the other party decides to revoke consent for communication through the application, all conversations must be deleted immediately, except if their conservation is required by a legal obligation or for the legitimate defense of the user, in which case, all information must be blocked and its treatment must be limited as long as liabilities may arise from it. The basis of legitimacy is the consent you give us for use of the service. The user has the right to revoke his consent at any time without affecting the lawfulness of the processing based on the consent prior to its withdrawal.
Assignment or communication of personal data and international transfers:
At RON Industry we process your data within the European Economic Area and generally we have service providers located within the European Economic Area or in countries determined to have an adequate level of data protection.
If we need to use service providers which carry out processing outside the European Economic Area or in countries not determined to have an adequate level of data protection, we will ensure that your data is processed in a secure and legitimate manner on the basis of adequacy decisions, standard data protection clauses, binding corporate rules, exceptions or any other instrument approved by the supervisory authority that offers adequate guarantees for the international transfer of data.
In this regard, we inform you that in order to carry out the purposes of the processing, RON Industry will subcontract the HOSTING services to OVH CLOUD PLATFORM whose servers are located in the USA. However, this provider has standard contractual clauses, in accordance with article 46 of the RGPD, which legitimise the international transfer of personal data.
Updating of data
In order for us to keep the personal data up to date, the user must always inform us of any change in said data; if this is not done, we cannot be liable for the veracity of the data.
The user guarantees that the personal data provided are true, and guarantees that all the information provided corresponds to reality, is up to date and is accurate. He/she is obliged to communicate any modification thereto.
Third Party Data
If the user provides third party data for any purpose to RON Industry, he/she guarantees that he/she has obtained these data lawfully, has informed the affected parties in advance, has obtained his/her consent to communicate them, and that the information provided is accurate and true.
Compulsory nature of the information requested
All our forms have an asterisk (*) to indicate which details are compulsory. If the user does not complete these fields, or does not check the privacy policy box, the information will not be sent.
Use of passwords
In order to access your account, the user must ´Log in´ and include the email address and password generated in the registration form according to the complexity rules established at each moment on the web.
The users are responsible for the adequate custody and confidentiality of any identifiers and/or passwords that they have selected in the registration from, and they undertake not to assign their use to third parties, nor to allow their access to outsiders.
Likewise, it will be the obligation of the user to notify immediately to the Controller any fact that allows the misuse of the identifiers and/or passwords, such as theft, loss, or unauthorized access to them, in order to proceed to its immediate cancellation.
Rights of data subjects
You have the right to access your data and obtain confirmation regarding the processing thereof, as well as a copy of the personal data being processed. You have the right to update them and request that any inaccurate data be corrected, or request removal of the data when they are not necessary for the purposes for which they were collected. You may request a restriction in the processing of your data and object to them being processed by revoking your consent, and also exercise your right to data portability. Similarly, you have the right not to be the subject of decisions based solely on the automated processing of your personal data. You may exercise your rights by contacting us . E-mail: sales@ronwheels.com
Processing of the data of Minors
Anyone providing data through the forms on this website and accepting the processing of such states that he/she is at least 14 years old. Access to, and use of the website is prohibited for anyone younger than 14. If, at any time, the Data Controller detects that a person younger than 14 years of age has provided personal data, we will cancel said data. In addition, parents or tutors may in any event write to RON Industry to block any access account created by minors in their charge who have registered by falsifying their identity.
Social Networks
The object of social tools such as Facebook, Twitter, Instagram, etc. or other social networks is to give visibility and dissemination of the activities that take place in our organization. These social tools store personal data in the servers of the corresponding services and are governed by their own privacy policy. It is recommended to review and read the conditions of use and the privacy policy of the social network at the time of registration, taking into account the different configuration´s possibilities regarding the privacy of the user’s profile in the social network. In addition, the Controller reserves the right to erase from its social networks any published information by third-parties that trespasses the legality, encourages to infringe it or contains messages that infringe upon human dignity or institutions. Likewise, the Controller reserves the right to block or report the author´s profile of such content.
Cookies
A cookie is a small file that is downloaded and stored on the user’s computer when he/she access a website. Cookies allow the website, amongst other things, to store and recover information on the browsing habits of the user or of his/her computer and, depending on the information they contain and the way in which you use your computer, they may be used for user recognition.
The user has the option to prevent the generation of cookies, by selecting the corresponding option in his/her browser program. You can obtain more information by reading our cookies policy.
Information you provide indirectly
This policy informs the user that RON makes exclusive use of the YouTube API internally, as an online resource to which our website can link or refer to otherwise (Third-party services), in this case to share videos on the website that contain solely and exclusively product information. Therefore you agree to be bound by the terms and conditions of Youtube: Terms and conditions Youtube . Google privacy policy: Privacy policy and services of Youtube API: Terms and YouTube API conditions
RON don´t assumes responsibility for the content of third party service practices, therefore we recommend that you carefully review the privacy policies of any third party service that you may access.