PRIVACY POLICY

“RHYS” is deeply committed to complying with Spanish and European regulations on the protection of personal data and guarantees full compliance with the obligations set forth therein, as well as the implementation of the security measures established in the General Data Protection Regulation (GDPR) (EU) 2016/679 of April 27, and in Organic Law 3/2018 of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD and GDD, hereinafter LOPD).

In accordance with these regulations, we inform you that the use of our website may require you to provide certain personal data through contact forms or by sending emails, and that this data will be processed by “RHYS”, the Data Controller, whose details are:

  • Company Name: Rigging Hydraulic Yacht Services, S.L.
  • CIF: B67628818
  • Registered Address: C/ Rost, 2, 2B, 08328 – Alella, Barcelona – España
  • Telephone: +34 628 791 306
  • eMail: [email protected]

Collection and Processing of Personal Data

Personal data is any information relating to an individual: name, email address, home address, telephone number, tax identification number (NIF/NIE), etc. Additionally, when a User visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by their Internet service provider.

“RHYS”, as the Data Controller, is obligated to inform Users of its website about the collection of personal data that may occur, whether through email or by completing the forms included on the website.

Only the data necessary to provide the contracted service or to adequately respond to the User’s request for information will be collected. The data collected is identifying information and corresponds to the minimum reasonable for carrying out the activity. In particular, no specially protected data is collected at any time. Under no circumstances will the data be used for any purpose other than that for which it was collected.

Contact Forms/Email

Purpose: To respond to your information request submitted through our contact form(s).

Legal Basic: The legal basis for this processing is the User’s consent, which may be revoked at any time.

Data transfer: Personal data will be processed through servers managed by Arsys, which will be considered the Data Processor.

Minors

Only individuals over 14 years of age may provide personal data on this website. As required by the Spanish Data Protection Act (LOPD) and the General Data Protection Regulation (GDPR), in the case of minors under 14 years of age, the consent of their parents or guardians is mandatory for us to process their personal data.

Furthermore, only individuals over 18 years of age may contract our services. In the case of minors under 18 years of age, the consent of their parents or legal guardians is mandatory for us to provide the offered services, unless the minor is emancipated.

Security Measures

Users of the “RHYS” website are hereby informed that we have adopted all available technical and organizational security measures to prevent the loss, misuse, alteration, unauthorized access, and theft of data, thus guaranteeing the confidentiality, integrity, and quality of the information contained therein, in accordance with current data protection regulations. The personal data collected in the forms is processed solely by “RHYS” personnel or designated Data Processors.

The “RHYS” website also uses SSL encryption, which allows users to securely send their personal data through the website’s contact or registration forms.

Data Accuracy

The User declares that all data provided is true and correct and undertakes to keep it updated. The User is responsible for the accuracy of their data and will be solely liable for any disputes or litigation that may arise from its falsity. It is important that, in order for us to keep personal data up to date, the User informs “RHYS” whenever there has been any change to it.

Data Transfer

“RHYS” will not transfer or disclose your data to any third party, except in cases legally required or when strictly necessary for the provision of a service. Specifically, data may be transferred to:

  • Technology or IT service providers
  • Payment service providers
  • Courier and parcel delivery companies
  • Third parties or intermediaries, acting as service providers, operating on our behalf (administrative services, consulting, etc.).

Data transfers will be carried out respecting the strictest confidentiality, employing the necessary measures, such as the signing of confidentiality agreements or adherence to the privacy policies established on their respective websites. Users may refuse the transfer of their data to Data Processors by submitting a written request through any of the aforementioned means.

Furthermore, where necessary, Customer data may be transferred to certain bodies in compliance with a legal obligation: the Spanish Tax Agency, the Labor Inspectorate, etc.

Exercising User Rights

The Spanish Data Protection Act (LOPD) and the General Data Protection Regulation (GDPR) grant data subjects the right to exercise a series of rights related to the processing of their personal data. To do so, Users must contact us by email at [email protected] or by written communication to the address provided in our Legal Notice, properly identifying themselves. This communication must include the following information: the User’s full name, the purpose of the request, their address, and supporting documentation.

The exercise of rights must be carried out by the User themselves. However, they may be exercised by an authorized person acting as the User’s legal representative, provided that documentation proving such representation is submitted.

The User may request to exercise the following rights:

  • Right to request access to personal data, which is the right to obtain information about whether their personal data is being processed, the purpose of the processing, if any, as well as information available about the origin of said data and any communications made or planned regarding it.
  • Right to request rectification, if the personal data is incorrect or inaccurate, or erasure of data that is inadequate or excessive.
  • Right to request restriction of processing, in which case “RHYS” will only retain the data strictly necessary for the exercise or defense of legal claims.
  • Right to object to processing: This refers to the data subject’s right to object to the processing of their personal data or to have such processing cease in cases where their consent is not required for processing, where the data is used for commercial prospecting, or where the purpose is to make decisions concerning the data subject based solely on automated processing of their data, unless there are legitimate grounds for the processing or for the establishment, exercise, or defense of legal claims.
  • Right to data portability: If you wish your data to be processed by another company, RHYS will facilitate the transfer of your data in an exportable format.

If you have given your consent for a specific purpose, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

We are committed to fulfilling all these rights within the maximum legal timeframe (1 month).

If a User believes there is a problem with how “RHYS” is handling their data, they can address their complaints to the Data Protection Officer or the relevant data protection authority, which in the case of Spain is the Spanish Data Protection Agency (AEPD).

Data Retention

The personal data of Users who use the contact form or send us an email requesting information will be processed for the time strictly necessary to respond to the information request, or until the consent granted is revoked.

The personal data of Clients will be processed until the contractual relationship ends. The retention period for personal data will be the minimum necessary, and may be kept for up to:

  • 4 years: Law on Infringements and Sanctions in the Social Order (obligations regarding registration, commencement of employment, termination of employment, contributions, payment of wages, etc.); Articles 66 et seq. General Tax Law (accounting records, etc.)
  • 5 years: Art. 1964 Civil Code (personal actions without a specific limitation period)
  • 6 years: Art. 30 Commercial Code (accounting records, invoices, etc.)
  • 10 years: Art. 25 Law on the Prevention of Money Laundering and Terrorist Financing.
  • No limitation period: disaggregated and anonymized data.

In the case of processing candidate data (CVs), “RHYS” may store your CV for a maximum of two years to include it in future job openings, unless the candidate objects.

Personnel Selection

Applicants who send electronic communications to RHYS for the purpose of participating in the company’s recruitment processes authorize us to analyze the documents they submit (e.g., their CV), all content directly accessible through internet search engines (e.g., Google), their profiles on professional social networks (e.g., LinkedIn), the data obtained from entrance exams, and the information they disclose during the job interview. This analysis is for the purpose of evaluating their candidacy and, if applicable, offering them a job. If the candidate is not selected, RHYS may store their CV for a maximum of two years for consideration in future recruitment processes, unless the candidate objects. The legal basis for this processing is the applicant’s consent, which they may withdraw at any time.

Confidentiality

The information provided by the User will, in all cases, be considered confidential and may not be used for any purpose other than those described herein. “RHYS” undertakes not to disclose or reveal any information regarding the User’s claims, the reasons for the requested advice, or the duration of their relationship.

Validity

This privacy and data protection policy was drafted on December 25, 2025. It may change depending on regulatory and jurisprudential changes, and it is the responsibility of the data subject to read the updated document to understand their rights and obligations at any given time.