Privacy policy

PRIVACY POLICY

WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?
Agustina Mompo Noceti, with NIE ES04305592S and address at Carrer Penya Segat 49, 07609 Llucmajor, Balearic Islands, and email
hello@rioonthego.com, is the individual responsible for processing the personal data provided by users through our online store.

WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE US WITH YOUR DATA?
Anyone has the right to obtain confirmation as to whether or not we are processing personal data concerning them. In this regard, you have the right to request:
• Access: The person who provides their data has the right to obtain confirmation from the data controller as to whether or not their data are being processed, as well as detailed information on certain aspects of the processing being carried out.
• Rectification: The person who provides their data has the right to obtain the rectification of inaccurate personal data concerning them or to have incomplete data completed.
• Erasure: The person who provides their data has the right to request the deletion of their personal data. In any case, such deletion will be subject to the limits established by the applicable regulations.
• Restriction of processing: The person who provides their data has the right to request the restriction of the processing of their personal data.
• Objection to processing: In certain circumstances, and for reasons related to their particular situation, the persons who provide their data may object to the processing of such data. The entity will cease processing them, unless there are compelling legitimate grounds or for the exercise or defense of possible claims.
• Portability: The person who provides their data has the right to receive the personal data concerning them — those that they have provided to the data controller — in a structured, commonly used, and machine-readable format, as well as to transmit them to another data controller.

If you have given your consent for a specific purpose, you have the right to withdraw it at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

To exercise these rights, you can write to hello@rioonthego.com. The forms may also be submitted in person or sent by postal mail to the contact addresses indicated above.

In case of acting through legal representation, you must provide your ID and a document proving such representation. It will be necessary to present a photocopy of your ID or an equivalent document proving your identity when the data controller has doubts about it.

If you consider that your personal data protection rights have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can file a complaint with the Spanish Data Protection Agency (C/ Jorge Juan, 6 – 28001 Madrid or at www.aepd.es).

DISCLOSURE OF DATA TO THIRD PARTIES
We do not transfer your data to third parties except where there is a legal obligation or for the proper provision of the service (for example, courier companies or payment platforms), always guaranteeing the confidentiality and security of the information.

In any case, the user is informed that the personal data provided may be communicated to third parties in order to comply with the established contractual relationship.

Likewise, the user agrees that their personal data may be communicated to Shopify or any other payment platform when making a purchase, in order to manage, sell and ship the purchased products.

In summary, the data may be communicated to:
• Shopify Inc., as the provider of the e-commerce platform.
• Transport and logistics companies, for product delivery.
• Financial institutions, for payment processing.
• Public administrations, in the cases provided by law.

We expressly inform you that, due to the use of the Shopify platform, international data transfers may occur to countries that do not provide a level of protection equivalent to that of the European Union. In such cases, appropriate safeguards will be adopted through standard contractual clauses approved by the European Commission or other appropriate mechanisms.

PURPOSE OF THE PROCESSING
We process your data in order to:
• Manage your purchases.
• Process payments and ship products.
• Respond to inquiries and communications.
• Provide after-sales services.
• If applicable, send commercial communications related to our products and promotions, always with your prior explicit consent.

CATEGORIES OF DATA PROCESSED
The data we collect include:
• Identification data (name, surname, ID/NIF, postal address, phone number, email).
• Payment data.
• Web browsing data (cookies and analytical data).
• Transaction data (purchased products, date, amount).
• Any other information voluntarily provided in forms or communications.

These data may also be used for commercial and marketing actions aimed at informing and building customer loyalty.

LEGAL BASIS FOR PROCESSING AND DATA RETENTION
The processing is based on:
• The performance of the sales contract.
• The user’s explicit consent for commercial purposes.
• Compliance with applicable legal obligations.

The personal data provided will be retained:
• While the commercial relationship is maintained.
• Until you request their deletion.
• For the time necessary to comply with legal obligations.