• This Privacy Policy gives you all the important information that relates to the use we make of your personal data, regardless of the channel or means by which you interact with RUBÍ. Once you have provided your personal data to us, you will become part of the community that RUBÍ calls Club Rubí.

Club Rubi is a digital platform that aims to be the international meeting place for professionals in the world of ceramic tile installation, with exclusive campaigns and advantages for tilers. The platform presents a whole range of content, services and utilities available in both mobile (APP) and desktop (WEB) versions.

• Some of the terms we will use in this Privacy Policy:

  • When we talk about our Platform we are referring in general terms to any of the digital or in-person channels and media you may have used to interact with us, the main ones being:

    • Our main Website at https://www.rubi.com/es, and any page under that domain.

    • Our Ruby Club App. The App will only process personal data when it is running as a result of User action in the foreground.

    • In person, at any activity organised by RUBÍ.

  • When we talk about the User we are referring to you when you have accessed any page on our website, our App, or because you have provided information to us by any means such as, for example, the registration forms for professional, training and cultural events and other activities organised by RUBÍ, either alone or working with other entities.

• As well as this Privacy Policy, any general terms and conditions you have explicitly accepted for a specific purpose will also apply.

1. WHO IS THE DATA CONTROLLER FOR YOUR PERSONAL DATA?

The data controller for your personal data is:

GERMANS BOADA, S.A. may subsequently be referred to as “RUBÍ”, “GERMANS BOADA” or “Us” or the “Data Controller”.

2. WHAT PERSONAL DATA DO WE PROCESS?

1. What is personal data?

The law says that ''Personal Data'' is any information about an identified or identifiable natural person, such as, for example, a name, an identification number, location data, etc.

2. What personal data does GERMANS BOADA use?

RUBÍ collects and processes different personal data depending on the products, services or features that you may wish to enjoy at any given time or because you contact with a specific request. Generally speaking, personal data are categorised those you provide directly or indirectly to us.

1. Personal data or information that you provide directly to us as User:

• Registration details. During registration as a User of the Platform (both website and App) we may collect the following data: first name, surnames, email address, postal address, telephone number, ID or passport number or equivalent document that identifies you, date of birth. We may also ask you for information about your occupation and level of education and your knowledge of the building industry in general. We may also ask you different questions during registration in our system relating to the building industry and about our products and services in order to determine your preferences. You may have to provide this personal data in order to access the RUBÍ Platform, participate in an event organised or co-organised by RUBÍ, benefit from points redemption and discounts or receive commercial information about Us. If you do not provide this information, you may not be able to complete your registration as a User or be able to enjoy RUBÍ services, activities or features.

• User profile information. Any information you add to the Platform as a User in order to use the services and features offered by RUBÍ, for example, a nickname, product or service purchased, etc. You can view and edit the Personal Data for your profile at any time. You should be aware that RUBÍ does not store credit/debit card details used in any payment system on the Platform. As appropriate, those credit/debit card details are provided to duly approved electronic payment service providers who receive and store the data to manage payment on behalf of RUBÍ without this data being located on RUBÍ's servers or systems. However, we verify that the provider of that service does so securely and adopts appropriate technical and organisational security measures such as encryption, where appropriate.

• Additional information that you as a User may wish to share. Information that you share for other purposes may include profile pictures or details from your own biography, opinions about our products or services, comments, etc.

• Information about communications, claims or complaints and comments made to RUBÍ. RUBÍ will have access to the personal data and information you provide for the resolution of queries, requests for information, complaints, suggestions or comments, either through forms provided for that purpose, by email or through a chat function or customer services on the Platform or any known communication channel.

• Comments for our social media and on the Website(s) giving ratings for our products or services or for events organised by Us.

1. Personal data or information that you provide to us indirectly as a User:

• Personal data derived from use of the Platform and from your preferences.

• Information about the device you use as a User to interact with the Platform. RUBÍ collects data relating to the IP address of a user's device, the operating system version, the browser you use, the internet connection and time zone.

• Data derived from the User's origin. Whether you access the Platform as a User from an external source such as a link from another website or social media platform, via Google, etc. This information can be directly controlled by you as a User through the external source through which you are redirected to the RUBÍ Platform. Check the privacy policy of the external sources you use to browse.

• Geolocation data. When you as a User consent, RUBÍ will view data related to your device's location of your device only at the time of your registration as a User. That information is only viewed at the moment of registration to determine what content may be of interest to you depending on your region and to identify the language you are likely to understand so that we can communicate with you. Geolocation tracking data or similar technology will not be stored in RUBÍ's systems in any circumstances. There is no type of tracking, real-time location or anything else that intrudes on your privacy.

• Data derived from the use of Cookies. RUBÍ may use its own and third-party cookies on its website to facilitate User browsing and for statistical purposes. You will also be notified about cookies and you will be able to manage your privacy at any time.

3. FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?

1. So that you can register on and use the RUBÍ Platform.

RUBÍ uses the data it collects from Users to manage access and communication with the Platform.

In order to meet a request, RUBÍ may communicate your personal data to companies outside the European Economic Area (“EEA”). If so, RUBÍ will implement appropriate safeguards to protect your information.

In the absence of an adequacy decision by the European Commission with the country of destination, the transfer will as an alternative be based on:

• The use of the Standard Data Protection Clauses adopted by the supervisory authority and approved by the European Commission.

• Performance of a contract between you and RUBÍ on the basis of participation in activities organised by RUBÍ, such as sweepstakes, contests and/or promotions.

• Your express consent which will be requested specifically by us for the purpose.

Please note that all processing of personal data carried out by RUBÍ is in carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, Organic Law 3/2018 of 5 December on the Protection of Personal Data and Safeguarding of Digital Rights and other applicable legislation.

2. Communicate your personal data to companies in the RUBÍ group of companies for internal administrative purposes and/or for sending commercial communications, including according to your preference profile. This purpose may include the promotion and carrying out of commercial offers, competitions and/or training activities both online and offline relating to products and services sold by RUBÍ or any of the companies in the group.

It is possible that we may share your personal among companies in the RUBÍ group of companies, either for internal administrative purposes within the group or to send you commercial communications according to your preference profile. This purpose may include the promotion and carrying out of commercial offers, competitions and/or training activities both online and offline relating to products and services sold by RUBÍ or any of the companies in the group. The products or services will always be related to those sold by RUBÍ or to products or services you have purchased, as the case may be.

If we share your personal data with a company in the group and we need your consent, we will ask for it in advance. In addition, if you have given consent, you may withdraw that consent at any time. However, withdrawal of your consent will not affect any processing that we may have lawfully carried out prior to its withdrawal on the basis of your consent.

Companies in the RUBÍ group may be located outside the European Economic Area (“EEA”). In that case, RUBÍ will implement the appropriate safeguards to protect your information.

In the absence of an adequacy decision by the European Commission with the country of destination, the transfer will as an alternative be based on:

• The use of the Standard Data Protection Clauses adopted by the supervisory authority and approved by the European Commission.

• Performance of a contract between you and RUBÍ on the basis of participation in activities organised by RUBÍ, such as sweepstakes, contests and/or promotions.

• Your express consent which will be requested specifically by us for the purpose.

3. Comply with legal, accounting, tax, administrative and contractual obligations related to the provision of services requested by the User, such as participation in a competition, training activity or an event of a similar nature, including possible payment processing through the secure payment gateway offered by an external provider.

4. Sending commercial communications, including those according to your preference profile. This purpose may include the promotion and carrying out of commercial offers, competitions and/or training activities, both online and offline, relating to products and services sold by RUBÍ. In addition, if you have been a customer or have maintained a contractual relationship with RUBÍ, we may send you advertising about our products or services that are similar to those you have purchased.

RUBÍ may send you commercial communications about its products and/or services and similar content to the content in which you have expressed an interest by providing your details in a record provided for this purpose. RUBÍ may select and send personalised commercial communications based on Users' requests.

RUBÍ may send you communications by any means of communication (including, for example: email, telephone calls, multi-platform messaging or chats, automated communications without human intervention, push notifications, etc. consisting of sending promotional messages to a mobile phone or any other similar type of communication) about RUBÍ products and services in accordance with the preferences stated by you in that record and in any requests you have made.

You will be able to cancel all commercial communications by unsubscribing using the link provided for that purpose in each communication. You may also manage your communication and privacy preferences through the Platform.

There may be data processors that provide RUBÍ with services for sending and managing commercial communications and if so they will have entered into appropriate data processing agreements with RUBÍ to restrict data processing to the fulfilment of specific purposes.

5. Handle claims, complaints, incidents and/or queries.

Information may be processed to handle claims, complaints, incidents and/or queries at the request of both Users and by RUBÍ at its own decision.

6. Detect and investigate fraud and the possible commission of crimes or unlawful acts.

RUBÍ may process information for the purpose of detecting and investigating fraud and for investigating possible matters relating to regulatory compliance and the possible commission of alleged crimes. To that end, we may request information from you in order to comply with legal obligations to pursue conduct that may breach applicable law or our general terms and conditions or any legal terms and conditions for competitions organised by Us.

7. Statistical purposes and analysis.

Information may be used to analyse the behaviour and preferences of Users in order to offer the best possible experience in the use of the Platform and so that you can easily and intuitively access features and manage your privacy. Improving your experience means that you can enjoy the Platform and have direct access to information that may be of interest to you and manage your privacy preferences. We may also carry out surveys to find out your level of satisfaction or suggestions about our products and services that you have purchased previously.

8. Process insured risks and claims to insurance companies.

RUBÍ may process Users' personal data to report any damage or unforeseen event covered by the insurance policy or policies taken out by RUBÍ.

4. WHAT IS THE LAWFUL BASIS FOR THE PROCESSING?

The processing of your Personal Data is carried out on the basis of different lawful bases in accordance with applicable law:

5. WHO RECEIVES PERSONAL DATA?

We may disclose your personal data to a company in the RUBÍ group of companies, either for internal administrative purposes or to send you commercial communications, including those that match your preference profile depending on your location. This purpose may include the promotion and carrying out of commercial offers, competitions and/or training activities, both online and offline relating to products and services sold by RUBÍ or any of the companies is the same group of companies. In that case, we will seek your specific consent or we will inform you of the lawful basis used.

You can view a list of possible recipients in the group at the following link: https://www.rubi.com/es/rubi-en-el-mundo

We may also disclose specific personal data to our contracted providers with whom we assure you that we have entered into binding contractual commitments to comply with law relating to data protection and confidentiality for the disclosure of personal data between data controllers and data processors.

The possible recipients of your data are:

• Service providers. RUBÍ may subcontract the provision of certain services consequently there may be companies with access to certain personal data solely for the provision of the subcontracted service.

• Payment service providers. If you enter your credit/debit card details through the RUBÍ Platform, that data is stored directly on payment platforms engaged by RUBÍ. The providers of these services are selected on the basis of their compliance with security standards in accordance with the Payment Card Industry Data Security Standard (PCI SSC). RUBÍ does not store that data at any time.

• Customer service and incident management. RUBÍ may disclose your personal data to businesses that provide customer services and to businesses that carry out activities aimed at measuring levels of User satisfaction and to provide Services, subject to prior written agreement with those businesses.

• RUBÍ Group Companies. RUBÍ may disclose your personal data to other companies in the RUBÍ Group for the performance of contractual obligations arising from the use of the Platform.

• Computer system services. RUBÍ may engage IT services for the management and maintenance of RUBÍ's own systems and consequently those companies may have incidental access to personal data controlled by RUBÍ.

• Insurance companies. RUBÍ may disclose personal data to insurance companies and insurance brokers with whom RUBÍ has contractual relationships for the handling, management and monitoring of claims and insured events arising from the business of RUBÍ and its partners.

• Co-organisers of training or cultural events: It is possible that for contractual reasons we may have to share certain personal data with other companies with whom RUBÍ co-organises events or functions, mainly related to professional training.

6. HOW LONG DO WE KEEP YOUR DATA?

When you leave the Platform and cease to be a User or at the end of the retention period stated above, RUBÍ may retain your personal data until the expiry of the limitation periods for contractual or tax obligations and under other applicable law. Personal data will be blocked as required by applicable law and RUBÍ will take all reasonable technical and organisational measures to prevent the processing of such personal data, except for making the personal data available to judges and courts, the Public Prosecutor's Office or any competent Authority, in particular personal data protection authorities, and insurers on the occurrence of insured events, in order to enforce any liabilities that may arise from your relationship with RUBÍ.

7. WHAT ARE YOUR RIGHTS?

As a User, you can exercise the following rights related to your Personal Data:

To exercise any of those rights, you can contact us at any time by email at gdpr@rubi.com. You will need to attach a copy of your national identity card, passport or other valid document that identifies you, clearly state which right you are exercising and in relation which specific processing.

Please note also that you can contact the competent supervisory authority if you are not satisfied, in this case the Spanish Data Protection Agency athttps://www.aepd.es/es.

If you would like to receive more information, please do not hesitate to contact us.

8. WHAT SECURITY MEASURES DO WE USE IN PROCESSING?

Your personal data is important to RUBÍ. We use effective technical and organisational measures to protect your Personal Data. We undertake to process your personal data in accordance with the provisions of applicable law and, in particular, to (i) process the Personal Data to which we have access with adequate confidentiality safeguards; and to (ii) implement any reasonable technical and organisational security measures required to prevent the alteration, loss or unauthorised processing of or access to your Personal Data.

In addition, all your information is protected in our systems. Only staff who require information to perform a particular task will have access to information of that type. Our staff are obliged to take the required security measures mandated by law. Although absolute security cannot be guaranteed on the Internet, you can be assured that we have implemented proportionate security measures to protect the confidentiality of your information. We will continue to maintain and improve those measures over time in accordance with legal and technical developments. Please note that the transmission of information over the Internet, whether by email or web-based email, is only secure when encrypted. Your messages may be sent through an unknown number of countries before they reach the addressee. RUBÍ accepts no liability for any unauthorised access or loss of personal information beyond our control.

9. CHANGES TO THE PRIVACY POLICY

Due to the continuous development of RUBÍ's business and new law and guidance on security and data protection, RUBÍ may change this Privacy Policy and the Cookies Policy. In the event of any change, you will be notified when you log in or access the Platform. You may also receive an email to the address you have provided. Any changes will not reduce the effectiveness of the protection of your personal data.

In the event of any discrepancy between any translation and the Spanish version of this text, the Spanish version will prevail.

10. INFORMATION ABOUT COOKIES

We use cookies to make it easier for you to navigate on the Platform, to know how you interact with Us and in certain cases to be able to show you advertising based on your browsing habits. See more information in the Cookies Policy.

CONTACT US

If you have any questions about your Personal Data, you can contact us at the following address:

GERMANS BOADA, S.A.

Avinguda de les Olimpiades, 89-91

08191, Rubí (Barcelona)

gdpr@rubi.com