Last updated: 30 July 2026

1. Applicable regulations on privacy and data protection

RIBA MUNDO TECNOLOGÍA, S.A., aware of the importance of guaranteeing the fundamental right of users to the protection of their personal data, and in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and with Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), sets out below the Privacy Policy governing the website https://web.ribamundotecnologia.es.

2. Identification of the data controller

The controller of the personal data collected through the Website is RIBA MUNDO TECNOLOGÍA, S.A. (hereinafter “RIBA MUNDO”), with NIF ESA40526717 and registered office at Calle en Proyecto N7, Sector 10-2, 46393 Loriguilla, Valencia, Spain.

For any question relating to data protection, users may contact the company at the following email address: privacy@ribamundotecnologia.es.

3. What kinds of personal data we collect

The Website is a B2B platform: it addresses companies and professionals, not consumers. The data collected therefore relates largely to the customer company and to the people who represent it.

Registration and assessment of the customer account application

• Contact person's details: first name, surname, email address, telephone number.
• Company details: legal name, tax identification number (VAT/NIF/CIF), country, billing and delivery addresses, commercial register number, EORI code and, for Italian companies, SDI code and PEC address.
• Legal representative's details: first name and surname.
• Company contacts (administration, logistics, after-sales support): first name, surname, email, telephone.
• Documents uploaded in support of the application (for example the legal representative's identity document, commercial register certificate, reseller certificate), kept in restricted-access storage.
• Evidence of acceptance of the terms: when the Terms and Conditions are accepted, a signed copy of the document is generated recording the legal name, tax identifier, name of the legal representative, date and time, IP address and information about the browser used. This data is retained as evidence of acceptance.

Account and order management

• Login credentials (the user sets their own password, which is stored in encrypted form and is not readable by RIBA MUNDO).
• Order data: products, quantities, amounts, delivery and billing addresses, references of tax documents.
• Delivery data passed to the carrier.

Payments

• For card payments, the card details are collected and processed directly by the payment service provider: RIBA MUNDO neither receives nor stores the card number or the other full details of the payment instrument, only the outcome of the transaction and a technical reference to it.
• For bank transfer payments, the transaction data resulting from bank reconciliation.

Communications and support

• The content of requests sent by email or through the contact channels provided, and the identification and contact data needed to reply.

Browsing

• Technical information relating to browsing, as set out in the Cookie Policy. The Website uses no profiling or traffic-measurement tools.

Note — unlike earlier versions of this policy, the Website does not collect users' date of birth or any form of graphometric signature.

4. Purposes of processing, legal bases and retention periods

Enabling the Website to operate — access to the information and content available, security and correct delivery of the service. Legal basis: legitimate interest in the proper management, maintenance and security of the platform. Retention: the time strictly necessary for browsing; for technical data, the periods set out in the Cookie Policy.

Assessment of the customer account application — verification of the identity of the company and its legal representative, of tax requirements and of the documentation required, in order to decide whether to enter into the commercial relationship. Legal basis: implementation of pre-contractual measures requested by the data subject (art. 6.1.b GDPR) and compliance with legal obligations in tax matters and fraud prevention (art. 6.1.c GDPR). Retention: for the duration of the relationship and thereafter for the limitation period of legal actions.

VAT number verification in the VIES system — the tax identification number provided by the company is checked through the European Commission's public VIES service; the result is retained with the application file. Legal basis: compliance with legal obligations in tax matters (art. 6.1.c GDPR).

Management of the contractual relationship and orders — processing the order, managing payment, arranging shipment and delivery, invoicing, handling returns and incidents. Legal basis: performance of the contract (art. 6.1.b GDPR) and compliance with accounting and tax obligations (art. 6.1.c GDPR). Retention: for the duration of the contract and thereafter for the periods required by accounting and tax law.

Account management — creating the user account, accessing the profile, consulting orders and previous purchases, pre-filling data for subsequent purchases. Legal basis: performance of the contract (art. 6.1.b) and legitimate interest in simplifying the purchase process (art. 6.1.f). Retention: indefinitely unless deletion is requested, then duly blocked for the limitation period of legal actions.

Service communications — sending the emails required by the relationship: registration confirmation and access to the application, outcome of the assessment, order confirmation, shipment progress, tax documents, replies to reported issues. Legal basis: performance of the contract and of pre-contractual measures (art. 6.1.b GDPR). These are not promotional communications and are not subject to unsubscribe, as they are necessary to the transaction requested.

Operational support on the account — at the customer's request or to resolve an issue, an authorised RIBA MUNDO operator may temporarily access the customer's private area to check its status. Every such access is logged, is time-limited and is flagged on screen. Legal basis: performance of the contract and legitimate interest in properly delivering the support service.

Responding to requests sent through the contact channels — legal basis: the user's consent (art. 6.1.a) and, where applicable, pre-contractual measures or performance of the contract (art. 6.1.b). Retention: the time needed to reply; the data is then deleted, unless the nature of the request requires it to be kept for other purposes, of which the user will be informed.

Sending newsletters and commercial communications — information about news on the Website and about products and services. Legal basis: for customers who have already entered into a contract, the legitimate interest in carrying out promotional activities regarding similar products and services, as recognised by article 21.2 of the Spanish LSSI; for other users, consent (art. 6.1.a GDPR). Users may ask at any time, free of charge, to stop receiving such communications by writing to privacy@ribamundotecnologia.es or by following the instructions at the foot of each communication. Retention: indefinitely unless a stop is requested, then blocked for the limitation period of legal actions.

Transfer of data to the tax administration or other public bodies — in the framework of compliance with obligations arising from accounting, tax, consumer-protection and other applicable regulations. Legal basis: compliance with legal obligations (art. 6.1.c GDPR). Refusal to provide personal data that is legally mandatory makes it impossible to purchase products or contract services.

5. Accuracy of the information provided

All information provided by the user must be truthful and accurate. To this end, the user guarantees the authenticity of all data provided when completing the relevant forms and submitting requests, and will be solely responsible for any false or inaccurate statements made and for any damage caused to RIBA MUNDO or to third parties.

6. Recipients of the data and international transfers

The information collected through the Website may be disclosed to the following recipients:

• Group business management systems: the customer company's data and order data are recorded in RIBA MUNDO's management information system, which is the company's reference archive for administration, logistics and accounting.
• Trusted service providers that access the data while delivering the services they provide to RIBA MUNDO, under its control and to the extent strictly necessary: hosting and cloud infrastructure providers, the content delivery and site security service, the content management system, the store for uploaded documents, the email delivery service, the catalogue search service, the address autocomplete service and the payment service provider for card payments.
• Carriers and logistics operators responsible for delivery (UPS, DHL, MRW, CORREOS EXPRESS, TSB, SCHENKER), to whom the data necessary for shipment is disclosed.
• Other companies, where applicable, in the framework of preparatory acts for commercial operations such as mergers, spin-offs or transfers of businesses or branches of activity, on the basis of the legitimate interest in ensuring continuity of services.
• Third parties to whom RIBA MUNDO is legally obliged to transfer the data: public bodies and authorities, the Tax Agency, courts and tribunals, and the State Security Forces and Bodies.

Some of the providers listed have their headquarters or infrastructure outside the European Economic Area, in particular in the United States. In such cases the transfer takes place on the basis of the safeguards provided for in Chapter V of the GDPR — typically the Standard Contractual Clauses approved by the European Commission, supplemented by the necessary technical and organisational measures.

7. Exercise of rights

Users have the right to withdraw the consent given, to access their personal data, to request the rectification of inaccurate data or, where applicable, its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances and for reasons relating to their particular situation, users may object to the processing, in particular to the sending of commercial communications. In that case RIBA MUNDO will stop processing the data, unless there are legitimate grounds, such as the exercise of or defence against possible claims. Users also have the right to restriction of processing and to data portability.

To exercise these rights, users may send an email to privacy@ribamundotecnologia.es or a written communication to:

Calle en Proyecto N7, Sector 10-2
46393 Loriguilla, Valencia, Spain

If users consider that their rights have not been properly addressed or that the processing does not comply with applicable law, they may file a complaint with the competent supervisory authority, in this case the Spanish Data Protection Agency: www.aepd.es.

8. Social networks

RIBA MUNDO has profiles on some of the main social networks, such as Facebook and LinkedIn. Where users contact RIBA MUNDO or interact with it through those platforms, the personal data they provide, and the data visible as a user of the relevant social network, will be processed within that social network for the sole purpose of responding to the request. This policy applies.

The exercise of rights will be determined by the functionality of the relevant social network and may only concern information under RIBA MUNDO's control. RIBA MUNDO does not extract data from social networks under any circumstances, unless the user's specific and express prior consent has been obtained.

9. Cookies

Information about the cookies used by the Website, how long they last and how to manage them is available in the Cookie Policy.

10. Changes to this policy

RIBA MUNDO reserves the right to modify this Privacy Policy to adapt it to legislative or case-law developments, as well as to industry practice. In such cases the changes will be announced on this page with reasonable notice, and the last-updated date at the top of the document will always indicate the version in force.