We provide this Privacy Policy to inform you in detail about how we process your personal data and protect your privacy and the information you provide to us.
If we make any changes to this Privacy Policy in the future, we will inform you via this website or through other means so that you are aware of the new privacy conditions adopted.
Below, we inform you—using a question-and-answer format—of the conditions under which our organization processes your personal data:
Who is responsible for processing your data?
Identity: Dripalia, S.L.
Tax ID (CIF): B-73743999
Postal Address: C/ Isaac Newton, 71 – 46520 SAGUNTO (Valencia), Spain
Phone: +34 960 591 830
Email: sac@dripalia.com
For what purpose do we process your personal data?
We process the personal data you provide us for the following purposes:
a) Managing relationships with customers and suppliers, invoicing, and payment collection. Specifically, processing online orders, including sending electronic communications to inform you of the order status, handling returns, or contacting you in the event of an issue. Providing this data is mandatory; otherwise, we cannot fulfill the contract.
b) Handling information requests, suggestions, and complaints; contacting the sender; responding to their inquiry or request; and providing follow-up. Providing data for this purpose is voluntary, but without it, we cannot respond. Therefore, it is a necessary condition to fulfill your request.
c) Sending commercial communications about our products or services. If you are a customer, we will send these communications unless you opt out by checking the appropriate box when providing your data or later by contacting us.
If you are not a customer, we will only send commercial communications if you explicitly authorize us to do so. This authorization is voluntary and refusing it will simply mean that you will not receive promotional offers.
In this context, based on the information provided, we may create commercial profiles to offer you products and services tailored to your interests.
d) If you become a friend or follower on social media, we will process your data to keep you informed about our activities and promotions. Providing data for this purpose is voluntary, but without it, you cannot follow us on that platform. The data categories processed are identification data.
How long will we process your data?
We will only retain your data for the time necessary to fulfill the purpose for which it was collected, to comply with legal obligations, and to address potential responsibilities.
- Customer/supplier data related to invoicing and services will be retained while the contract is active and for the legally required period afterward.
- Commercial communication data will be retained until you request deletion or opt out of communications.
- Prospective customer data will be deleted if no contract is concluded, unless potential liabilities require preservation.
- Inquiry/complaint/request data will be retained until the issue is resolved, and then for one year as communication history unless you request deletion.
- Social media data will be retained as long as you remain a friend/follower on the relevant platform.
What is the legal basis for processing your data?
- For customers/suppliers: The legal basis is the execution of the contract.
- For inquiries/requests/complaints: The basis is your consent, which can be withdrawn at any time without affecting prior processing.
- For marketing to existing customers: The basis is our legitimate business interest in offering additional products/services, as recognized by applicable law (GDPR).
- For marketing to non-customers: The basis is your explicit consent, which you may revoke at any time.
- For social media data: The basis is your consent, which can also be revoked at any time.
The data categories processed are those requested via our forms or contracts.
Who will your data be shared with?
Your data may be communicated to:
a) Competent public authorities, including courts, as required by law.
b) Financial institutions for payment processing.
Additionally, third-party service providers may access your data to deliver services on our behalf. These providers act under strict confidentiality and in accordance with data protection regulations, through contracts that bind them to these obligations.
What are your rights regarding your data?
You have the right to:
- Confirm whether we are processing your personal data.
- Access your personal data.
- Request the rectification or deletion of inaccurate or outdated data.
- Request data portability or restriction of processing.
- Object to the processing of your data for legitimate reasons.
- Withdraw your consent at any time for any processing based on consent.
- Object to automated decision-making that significantly affects you.
These rights are:
- Free of charge, unless requests are manifestly unfounded or excessive.
- Exercisable directly or via legal/authorized representatives.
- Responded to within one month, extendable to two more in complex cases.
We must inform you of the means to exercise your rights (which must be accessible), and we cannot refuse the request solely based on the communication channel you choose. If you submit your request electronically, we will respond via the same method whenever possible.
If your request is not fulfilled, you will be informed within one month and given the option to lodge a complaint with a Supervisory Authority.
You can use the following forms to exercise your rights:
- Access Request Form
- Rectification Request Form
- Objection Request Form
- Erasure (“Right to be Forgotten”) Request Form
- Processing Restriction Request Form
- Data Portability Request Form
- Automated Decision-Making Objection Form
These can be submitted via any of the contact methods listed above.
You must provide proof of identity (copy of your ID or equivalent, or proof of representation if submitted by a representative).
If you believe your rights have been violated, or if you are not satisfied with how your request was handled, you can file a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es) or another competent authority.
How do we protect your personal data?
We are firmly committed to protecting the personal data we process. We use reasonably reliable and effective physical, organizational, and technological measures to ensure the integrity and security of your data.
All staff with access to personal data are trained and aware of their responsibilities.
Contracts with service providers include clauses requiring strict confidentiality and implementation of necessary technical and organizational security measures.
These security measures are reviewed periodically to ensure effectiveness and adequacy.
However, absolute security cannot be guaranteed, and no system is impenetrable. In the event of a data breach, we will take appropriate actions to investigate, notify the Supervisory Authority, and inform affected users if necessary.
What is your responsibility as the data subject?
By providing us with your personal data, you confirm that you are over 14 years of age and that the data you provide is true, accurate, complete, and up to date.
You are responsible for keeping your data updated and for any consequences resulting from providing false or inaccurate data.
If you provide data belonging to third parties, you are responsible for informing them of all points outlined in Article 14 of the GDPR, under the conditions set forth in that provision.