Privacy Policy

01.Data controller

The controller of personal data is the business entity operating the RAWAINV holding, domiciled at Libertad 501, Madrid (Spain).

Contact channel for any data protection matter: soporte@rawainv.com.

02.Data we process and purpose

This website does not collect personal data through forms nor does it use user registration systems. If you contact us by email, we will process your email address and the content of the message solely to handle, manage and follow up on your inquiry.

Browsing this site may generate technical server logs — IP address, access date and time, requested pages and user agent — necessary for the security, diagnosis and proper operation of the service.

Personal data is not used for profiling, automated decision-making or marketing purposes.

03.Legal basis for processing

Handling inquiries: legitimate interest in responding to received communications and, where applicable, the data subject's consent given by sending the message (art. 6.1.f and 6.1.a GDPR).

Technical logs: legitimate interest in ensuring the security of the network and information (art. 6.1.f GDPR), in line with recital 49 of the Regulation itself.

04.Recipients and processors

Personal data is not disclosed to third parties for their own purposes, except under legal obligation.

Certain technical providers — server and email infrastructure — may process data as processors, always under contract and with the safeguards required by art. 28 GDPR.

05.International transfers

The holding's main infrastructure is located in the European Union. Should any technical provider process data outside the European Economic Area, the appropriate safeguards provided for in the GDPR would be required, such as standard contractual clauses approved by the European Commission.

06.Retention period

Data derived from email communications is kept for the time needed to handle the inquiry and, where applicable, for the applicable legal limitation periods.

Technical server logs are kept for periods that are limited and proportionate to their security purpose, after which they are deleted or anonymized.

07.Data subject rights

You may exercise the rights of access, rectification, erasure, objection, restriction of processing and portability, as well as withdraw any consent given, by writing to soporte@rawainv.com and indicating the right you wish to exercise. We may request verification of your identity where necessary.

08.Supervisory authority

If you consider that the processing of your data does not comply with regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), at C/ Jorge Juan, 6, 28001 Madrid, or with the supervisory authority corresponding to you.

09.Security measures

We apply technical and organizational measures appropriate to the risk to protect personal data against unauthorized access, loss, destruction or alteration, in accordance with art. 32 GDPR: encryption in transit, access control, infrastructure segmentation and monitoring.

10.Minors

This site is not directed at children under 14 and no data from minors is deliberately collected. If the involuntary processing of a minor's data were detected, it would be diligently deleted.

11.Updates to this policy

This privacy policy may be updated to reflect regulatory or data-processing changes. The version published on this page, with its last-updated date indicated, will always be the current one.