Privacy policy

1. Data Controller

The Data Controller corresponds to the owner of the website, whose full details are: HIJOS DE RIVERA S.A.U. with CIF A15002637 and registered office at Calle José María Rivera Corral 6, 15008 A Coruña.

Data Protection Officer Identification:

2. Processed data, purposes, and data retention period

2.1 Processed data:

  1. Data obtained from the user: This is the data provided by the user in the process of completing the forms available, such as registration or subscription to newsletters. This data includes identification and contact data, such as name, surname and email address, among others. Each of the forms will indicate which data are mandatory and which are optional.
  2. Data not obtained from the user: During browsing, data such as those sent by the browser, the IP address assigned by their provider or the information of the device used may be provided. This information, if the user accepts the corresponding cookie categories, may be used to personalize the content and advertisements displayed, as well as to contribute to the creation of user profiles.

In case you decided to register using your profile on social networks, they will provide us with data shared with them, such as geolocation, personal characteristics, social circumstances or academic and professional data, among others, including identification data and profile image. It is possible to review the configuration of the different social platforms in case you want to revoke the permissions granted and, with it, the information transmitted through the social connector.

2.2 Purposes: The purposes are the following

  1. Registration: The user may register in a specific section, to manage their preferences and subscriptions. In case that other sections are enabled, registration will enable access to manage them.
  2. Contact: The email or telephone number provided for contact will be used to provide an effective response to any questions raised.
  3. Sending newsletters and personalized communications: Sent through the means chosen by the user, whether email, messaging system, notification systems or similar, which must be verified or previously approved by the user.
  4. Creation of a profile: In order to determine what the tastes and preferences of our users may be, we will use the data provided, so that we can personalize our products and services, as well as the commercial and marketing actions, carried out even on those platforms or social networks in which the user has a presence. The creation of a profile will not imply, in any case, the adoption of automated decisions that may produce legal effects or that may significantly affect the user in a similar way.
  5. Promotions and contests: When participating in any of our activities or contests, we will process the data provided according to the needs of each promotional action. In each of them, the corresponding legal bases will be published, in which more detailed information on the processing of personal data will be provided.
  6. Training: We will process the data of users who register on our online training platform to manage access to the content of the courses.

2.3 Conservation: The data conservation period will be the following.

  1. Registration: The information provided in the registration phase will be kept for as long as the user maintains their status.
  2. Contact: The data will be kept for as long as it is necessary to fulfil the pursued purpose.
  3. Sending newsletters and personalized communications: The data will be processed from the time the user gives their consent until it is withdrawn, which may be granted as many times as they wish.
  4. Creation of a profile: The data will be processed from the time the user gives their consent until it is withdrawn through the means provided for this purpose.
  5. Promotions, clubs and contests: We will keep the data for the duration of the activity and it will be kept for the time strictly necessary to attend possible claims or the period established by law.
  6. Training: The information will be kept for the fulfilment of contractual obligations and in anticipation of possible claims from clients and consumers.

3. Legitimation of the treatment

According to the treatments carried out on the website, we inform you of the bases for the legitimation of each of them:

  1. Execution of a contract: The data recorded in the registration process, exchange of access codes to training courses or those provided for participation in a promotional activity will be used.
  2. Consent: It will be duly obtained for the preparation of the profile, the sending of newsletters and news, as well as to give a timely response to all those questions or queries posed by the Users.

Consent will always be revocable and may be withdrawn at any time, by means of mechanisms such as the links located at the bottom of communications, the sections provided for this purpose the section “My account” or by sending a communication to the contact email of the Data Protection Committee.

  1. Legitimate interest: It will correspond to the legitimate interest of the Owner to send commercial communications based on the interests expressed by the user.

4. Exercise of rights

Any person has the right to obtain confirmation about whether or not personal data concerning them is being processed. The interested people have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, the interested parties may request the limitation of the processing of their data or oppose the processing of their data, in which case these data will only be kept for the exercise or defence of claims.

To do this, users can send a written communication to the Data Protection Committee, c/ José María Rivera Corral, 6 15008 A Coruña or to the email, including in both cases a photocopy of the national identity document or equivalent supporting documentation.

As an additional management method, users can modify their privacy options from the “My account” section, accessible from any Hijos de Rivera website with integrated login. They can also manage their privacy preferences through the links at the bottom of the page of the commercial communications received.

Those users who wish to do so can file a claim with the Spanish Data Protection Agency, accessible from

5. Recipients and transfer of data

In order to fulfil the purposes indicated in this Privacy Policy, we may rely on third parties, such as technology service providers, providers of services related to customer service, marketing and/or advertising, that offer adequate guarantees and with whom a Data Processor agreement will have been signed. We may also communicate user information to companies responsible for carrying out logistics to the final point or to collaborators responsible for managing and delivering prizes in the case of promotions and contests.

The data collected may be transferred to servers located in territories outside the European Union, with all the necessary guarantees being in place, as this transfer is based on the signing of SCCs (Standard Contractual Clauses).

Version 1.1, updated on February 19th, 2024