Privacy policy content

  1. Who is the controller of your personal data?
  2. How do I contact the person responsible for data protection?
  3. For what purposes and on what legal basis do we process your data?
  4. How and where is information shared?
  5. Are international transfers of your personal data carried out?
  6. What security measures are applied?
  7. How long will we retain your personal data?
  8. How can you exercise your rights?
  9. Mandatory or optional nature of the data requested
  10. User undertaking

Who is the controller of your personal data?

RAGADI
C/. Aeronáutica 24, Pol. Ind. Urtinsa II, 28923 Alcorcón (Madrid, Spain).
Tax ID (CIF) no. B798745582
Registered in the Madrid Commercial Register, Volume 852, Folio 001, Section 8, Sheet M-17032, Entry 1

You can contact us through:

Phone: +34 91 641 81 88
Email: email@ragadi.net

How do I contact the person responsible for data protection?

RAGADI has not appointed a Data Protection Officer but does have a data protection contact whom you may reach at protecciondedatos@ragadi.net


For what purposes and on what legal basis do we process your data?

Your personal data will be processed by RAGADI for the following purposes:

  • Contact: To manage and respond to information requests submitted through the website contact form. The lawful basis is your express consent (Art. 6(1)(a) GDPR) when you send your request.
  • Recruitment: If you have sent us your CV, RAGADI will process your data solely to manage recruitment processes. The lawful basis is the need to take steps prior to entering into a contract (Art. 6(1)(b) GDPR) and, in certain cases, the legitimate interest (Art. 6(1)(f) GDPR) of RAGADI in retaining your CV for future recruitment processes.
  • Prospective customers: The purpose is to manage communications and provide information about our products or services upon request or with your consent. The lawful basis is your express consent (Art. 6(1)(a) GDPR).
  • Customers: The purpose is to manage the commercial relationship with legal entities through professional contacts. The lawful basis is legitimate interest (Art. 6(1)(f) GDPR) in connection with Art. 19 of the Spanish Data Protection Act (LOPDGDD).
  • Suppliers: The purpose is to manage the contractual relationship between the parties. The lawful basis is the contract between the parties (Art. 6(1)(b) GDPR). For legal entities, the purpose also includes managing the commercial relationship through professional contacts. The lawful basis is legitimate interest (Art. 6(1)(f) GDPR) in connection with Art. 19 LOPDGDD.
  • Video surveillance: The purpose is to ensure the security of people and property. The lawful basis is public interest (Art. 6(1)(e) GDPR).
  • Visits: The purpose is to ensure the security of people, property and premises by managing access control for those entering the facilities. The lawful basis is public interest (Art. 6(1)(e) GDPR).
  • Privacy: The purpose is to handle your requests when exercising data protection rights. The lawful basis is compliance with a legal obligation (Art. 6(1)(c) GDPR).
  • Cookies: The purpose is to allow you to browse our website without errors by installing technical cookies on your device and, where you give consent, to improve website functionality through analytics cookies (Art. 6(1)(a) GDPR). You can find more information in our cookie policy.

How and where is information shared?

RAGADI only shares your personal data with:

  • RAGADI: pursuant to Law 34/2002 of 11 July on information society services and electronic commerce, it will in no case send advertising or commercial communications for sales or other commercial purposes to users without their prior request or consent. Likewise, RAGADI will not send unsolicited or unconsented messages, nor unsolicited or unconsented email chains.
  • Third parties, bodies and public institutions of the Spanish General State Administration, regional and local administrations, including judicial bodies, where there is a legal obligation to disclose the data.
  • Service providers to RAGADI who act as processors following our instructions in accordance with the data processing agreements we have entered into with them.

Are international transfers of your personal data carried out?

International transfers of personal data will only take place when strictly necessary to manage our relationship, and in such cases they will be carried out in compliance with the obligations set out in applicable personal data protection law.


What security measures are applied?

RAGADI attaches great importance to the security of all personal information. We therefore invest effort and resources to improve our website day by day so that the features we offer you are more secure.

We implement security measures to ensure the availability, integrity and confidentiality of your personal data in compliance with Art. 32 of Regulation (EU) 2016/679 (General Data Protection Regulation).

RAGADI is also certified to ISO 27001:2013 on information security management systems.


How long will we retain your personal data?

We retain your personal data only for as long as strictly necessary for each processing activity, which varies depending on the purpose:

  • Contacts: Data provided to request information will be kept for 2 years from the user’s last communication.
  • Recruitment: If you send your CV for a specific selection process, we will keep it for the duration of that process. Once it ends, we will delete it immediately or, where applicable, retain it for future processes for a maximum of 2 years.
  • Prospective customers: Data provided to request information about our products and services will be kept for 2 years from the last communication or until consent is withdrawn.
  • Customers: Data relating to our customers and professional contacts providing services for the legal entity will be kept for as long as the contractual relationship lasts and, after it ends, for the limitation period for legal liabilities, up to 6 years from the end of the contractual relationship.
  • Suppliers: Our suppliers’ data will be kept for as long as the contractual relationship lasts and, after it ends, for the limitation period for legal liabilities, up to 6 years from the end of the contractual relationship.
  • Video surveillance: As a general rule, images are kept for 1 week from capture, unless they must be kept longer, for example at the request of the competent authorities.
  • Visits: Data entered in the visitors’ log will be kept for 1 month from the visit.
  • Privacy: If you have exercised your data protection rights or where retention is required to comply with legal obligations under data protection law, we will keep your data only as long as strictly necessary and, in any case, until the expiry of possible legal liabilities, up to 3 years as the limitation period for very serious infringements under the LOPDGDD.
  • Cookies: Retention periods depend on each cookie and therefore vary according to their configuration. The maximum retention period for cookies will be 2 years. For more information, see our cookie policy.

How can you exercise your rights?

You may at any time exercise your rights of access, rectification, objection, erasure, restriction, portability and not to be subject to automated decisions, and withdraw consents given, free of charge, through:

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you consider it appropriate.


Mandatory or optional nature of the data requested

Mandatory fields in each form are identified as such in the forms. Refusal to provide that information will prevent communication with the user and, where applicable, our ability to provide the requested information and/or service.


User undertaking

Users undertake to inform RAGADI of any change to the data they have provided.