Privacy Policy
1. Data controller
In accordance with Regulation (EU) 2016/679, General Data Protection Regulation, and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights, users are informed of the following details relating to the controller of the personal data collected through this website.
Controller: Mariano del Río García
Tax ID (NIF): 12390550J
Professional address: C/ Fermín Caballero, 56, 28034 Madrid
Trading name: RIOVEGAS
Email: correoriovegas.es
2. Purposes of processing
Personal data provided by users through this website will be processed for the purpose of responding to enquiries, requests for information or communications addressed to RIOVEGAS.
Where a professional or contractual relationship exists, the data may also be processed in order to manage that relationship, provide the requested services, maintain the necessary communications and comply with the applicable legal, tax, accounting and administrative obligations.
The data will not be used for purposes incompatible with those for which it was collected.
3. Legal basis for processing
The legal basis for responding to enquiries, requests for information or communications addressed to RIOVEGAS is the consent of the data subject, expressed by voluntarily providing their data and contacting the firm.
Where a professional or contractual relationship exists, processing may be based on the performance of a contract or on the implementation of pre-contractual measures requested by the data subject.
Certain processing activities may also be necessary in order to comply with legal obligations applicable to the data controller.
4. Data retention
Personal data will be retained for as long as necessary to deal with the enquiry or request submitted and, where applicable, for as long as the professional or contractual relationship with RIOVEGAS remains in force.
Once that relationship has ended, the data will be retained for the periods required by law in order to address any potential liabilities arising from the processing, in accordance with applicable legislation.
When retention is no longer necessary, the data will be deleted or, where legally required, blocked for the corresponding periods.
5. Recipients of the data
As a general rule, personal data will not be disclosed to third parties, except where there is a legal obligation to do so or where disclosure is necessary for the provision of the requested services.
Certain service providers acting as data processors may have access to the data, such as web hosting providers, email providers, IT maintenance providers, management software providers or technology service providers, always subject to the safeguards required by data protection legislation. The Spanish Data Protection Agency (AEPD) notes that data processors act on behalf of the controller and must provide sufficient guarantees to implement appropriate technical and organisational measures.
Data may also be disclosed to Public Administrations, judicial bodies or other authorities where there is a legal obligation to do so or where necessary for the controller to comply with its obligations.
6. International data transfers
As a general rule, RIOVEGAS will seek to ensure that personal data is processed within the European Economic Area. However, certain technology providers used for the operation of the website or the provision of services may process data from third countries or allow access from outside the European Economic Area.
Where international transfers of personal data take place, they will be carried out in accordance with the General Data Protection Regulation, either on the basis of an adequacy decision by the European Commission or, where no such decision exists, through appropriate safeguards such as standard contractual clauses or other legally recognised mechanisms.
7. Rights of data subjects
Data subjects may exercise, under the terms provided for by applicable legislation, their rights of access, rectification, erasure, objection, restriction of processing and portability of their personal data.
Where processing is based on consent, data subjects may withdraw that consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
To exercise these rights, the data subject may contact RIOVEGAS using the email address indicated in this Privacy Policy, providing the information necessary to verify their identity and specify the request.
If the data subject considers that the processing of their personal data does not comply with applicable legislation, they may lodge a complaint with the Spanish Data Protection Agency (AEPD).
8. Data security
RIOVEGAS will adopt appropriate technical and organisational measures to ensure a level of security appropriate to the risk, taking into account the nature of the data processed, the state of the art, implementation costs and the risks to the rights and freedoms of individuals.
These measures will be aimed at preserving the confidentiality, integrity, availability and resilience of processing systems and services, as well as preventing unauthorised access, loss, alteration, disclosure or accidental or unlawful destruction of personal data.
9. Children’s data
This website and the professional services provided by RIOVEGAS are not specifically directed at minors, and therefore there is no intention to knowingly collect personal data from minors through the website.
If RIOVEGAS becomes aware that personal data relating to a minor has been provided without the legally required involvement or authorisation, it will take the appropriate measures to delete such data, unless there is a legal basis that justifies its retention.
10. Amendments to the Privacy Policy
RIOVEGAS may amend this Privacy Policy whenever necessary to adapt it to changes in legislation, criteria issued by supervisory authorities, changes in the processing activities carried out or changes to the services and functionalities of the website.
The version in force at any given time will be the version published on this website. Where changes are significant, reasonable efforts will be made to inform users appropriately.
Last updated: September 2026.