In accordance with the applicable personal-data protection regulations, we explain below how we process your personal data.
As a general rule, we will tell you when the collection of certain personal data is mandatory in the fields marked with an asterisk (*). Failure to complete those fields may prevent us from providing the services related to that data, releasing us from any liability for non-provision or incomplete provision of such services.
Who is the Data Controller?
The owner of the Website and controller of the data collected is ROCK INTERNET, S.L. (hereinafter, “Rock Internet” or the “Company”), with tax ID (NIF): B86907953 and registered office at C/ Barquillo nº 8, 2º izquierda, 28004 Madrid (Spain).
Registry details: Madrid Commercial Registry.
Contact e-mail: dpd@arkeero.com or through the “Contact” section provided on the Website.
The Company focuses, among other activities, on advertising through direct marketing, affiliate marketing and online advertising with the prior consent of the recipient. We also operate as a price/tariff comparator for third-party services and products aimed at “Household savings”, including telephone and internet, water, electricity and gas, acting for these products as a service company under Spanish Law 34/2002 of 11 July, on information society services and electronic commerce.
What is the minimum age to register on the website?
Registration on the website is limited to users over eighteen (18) years of age. Minors may not use the services offered without prior authorisation from their parents, guardians or legal representatives, who shall be solely responsible for all acts carried out through the website by the minors in their care. By registering, you warrant that you are of legal age.
All registration information you submit must be true, accurate, complete and up to date; you are solely responsible for any direct or indirect damage arising from any breach of this obligation. If the data provided belongs to a third party, you warrant that you have previously informed that third party of the matters set out here and obtained their express, informed consent for the purposes specified in this Privacy Policy.
What personal data do we collect?
Below we detail the type of data we collect and how:
- Information provided through the registration forms: may include first name, surname, e-mail address, phone number, gender, country, postcode, date of birth and areas of interest, so that we can manage our mailing lists and send you personalised online advertising. Whenever you visit the website, your IP address, the date and time of the visit and the conditions accepted are automatically recorded, as a mechanism to verify (i) the effective generation of a lead; (ii) obtaining your consent and acceptance of this Privacy Policy and our Cookie Policy; (iii) the control of foreign or duplicate IPs; (iv) fraud detection through bots that generate false records; (v) the control and communication of leads generated for clients.
- Information through the contact form: we will use your name and e-mail address to handle any request, query, suggestion and/or professional matter.
- Newsletter information: if you have agreed to receive our Newsletter, we may use your e-mail address to send you periodic communications about our services and news, based on the preferences you selected.
- Social networks: if you access or register through a social network, you authorise the Company to obtain, store and use the personal data from that social network in accordance with this Privacy Policy. The Company is not responsible for the security or privacy of information collected by such third parties; we recommend you review their respective privacy policies.
- Activity data: when you access and interact with our services, our servers receive and store information about your device and browser (potentially your IP address, browser type and other software/hardware information). We may also install cookies and other tracking technologies. For more information, see our Cookie Policy.
- Information provided during calls: in some cases we will ask for information that is essential to offer you a comparison or to contract one of the offers (for example, an identity document, your postal address or bank account). If you do not provide it, it will be impossible to offer you the service or product you wish to contract.
- Information from other sources: we may supplement the information we collect with information from publicly accessible or commercially available sources, or that which you freely provide to us.
You may withdraw your consent at any time or tell us that you no longer wish to remain subscribed to any of our services. You are solely responsible for keeping your access credentials confidential.
For what purposes do we process your data?
We use the personal data we collect for the following purposes:
- (a) To provide the Company's services in general.
- (b) To handle requests for information and queries.
- (c) To provide the comparison you request of third-party products and services and the subsequent contracting, which means you will deal not only with the Company but also with third-party providers of the requested services.
- (d) To record the phone calls you have with us in order to provide the requested information, carry out the contracting, improve quality and serve as evidence in the event of any complaint. We will inform you that the call is being recorded.
- (e) To allow you to take part in and subscribe to promotions, contests and/or prize draws, where possible.
- (f) To allow you to log in to the Company's services through a social network.
- (g) To manage current or future personnel selection processes.
- (h) To enable browsing, personalisation and alert configuration through technical and functional cookies.
- (i) To prepare statistical and/or research reports in anonymised form.
- (j) To keep suppression lists up to date so that you are not contacted if you have requested so.
- (k) To verify the absence of fraudulent activity or activity contrary to the website's terms.
- (m) To send commercial communications (Newsletter) by e-mail, SMS, phone, social networks or another enabled means, with offers, promotions or other communications from the Company, affiliated entities and/or associated third parties in the sectors covered by this policy. We will only contact you for this purpose when you have expressly requested it or when you have previously requested any of our services and have not objected.
The purpose is to carry out offers, promotions, marketing and contracting of products and services aimed at “Household savings” in the following sectors: insurance, finance and banking, telephony, technology and telecommunications, energy and water, electricity and gas, real estate, furniture, home-related retail, and surveillance and security. By ticking the relevant box, you give your free and express consent to receive advertising from us and from third parties in the indicated sectors.
What is the legal basis?
The legal basis for purposes a)–d) is the management necessary to provide the Company's own services (Art. 6.1.(b) GDPR) and the application of pre-contractual measures or performance of contracts with the final distributors.
The legal basis for purposes e), f), g), h) and m) is your informed and express consent (Art. 6.1.(a) GDPR). It is discretionary, but without your consent the associated purposes cannot be carried out.
The legal basis for purposes i), j), k) and l) is the Company's legitimate interest (Art. 6.1.(f) GDPR); you may nevertheless withdraw your consent at any time.
How long will we keep your personal data?
As a general rule, personal data will be kept for as long as you do not request its deletion or restriction, or for as long as it remains necessary for the purposes for which it was collected, after a period of inactivity of three (3) years.
Data received through the contact form will be kept for the time needed to resolve your queries or handle your requests. Data from job applications will be kept for a maximum period of one (1) year.
After the above periods, for a period of five (5) years and/or the maximum legally permitted, the data will be kept duly blocked at the disposal of public authorities, judges and courts. When we no longer need to use it, it will be deleted or anonymised.
To which recipients will your data be disclosed?
All the transfers indicated are necessary to fulfil the stated purposes or are carried out in compliance with a legal obligation. Personal data may be disclosed to:
- Associated companies in order to enable the contracting of the products or services you request, so that they can register you as a client and provide the desired service.
- Competent authorities, Public Administrations and State Security Forces and Bodies when required to comply with applicable laws.
Likewise, third-party service providers to whom the Company entrusts part of the provision of certain services (hosting, maintenance and database support, consultants and advisors or affiliated entities) may access personal information as data processors.
Third-party data processing
This Privacy Policy does not apply to data collected by third parties through their websites, even if they contain links to and from our website. The third party that supplies the contracted product or service will have its own privacy policy, which you should review before contracting. The Company is not responsible for the content of such third parties' privacy policies.
What do we do to ensure the security and confidentiality of your data?
Your personal data is processed by automated and non-automated means and is protected by appropriate technical and organisational security measures, taking into account the processing to be carried out and the current state of technology. We appropriately restrict access to personal information and implement the necessary measures and controls to store and transfer data securely and protect it against any loss, theft or unauthorised use, disclosure or modification.
Are there international data transfers?
The personal data we collect may be transferred to, accessed from and stored on our servers located in Spain. To provide our services, we may need to give access to your data to a provider or affiliated entity located outside the European Economic Area (“EEA”), in the United Kingdom or the USA. In that case, these transfers would be carried out on the basis of the standard contractual clauses authorised by the European Commission (more information at aepd.es), which offer the appropriate legal safeguards.
What are your rights when you provide us with your data?
You may exercise your rights of access, rectification, objection and erasure, as well as restriction of processing, objection to automated individual decisions and portability, by sending a written communication to the Company at the address indicated or to dpd@arkeero.com. The request must include your name, surname, the right you wish to exercise and the content of your request, accompanied by a copy of your identity document.
You have the right to withdraw consent at any time, without this affecting the lawfulness of the prior processing. If you consider that the processing is not adequate, you may lodge a complaint with the Spanish Data Protection Agency (aepd.es).
Commercial communications and good-practice statement
The Company does not send commercial communications without the data subject's prior, informed consent. We comply with current legislation and, in particular, with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 of 5 December (LOPDGDD), and Spanish Law 34/2002 of 11 July, on information society services and electronic commerce (LSSI). All e-mails include a link to unsubscribe from our commercial communications, as well as a link to this privacy policy.
Changes to the Privacy Policy
Our Privacy Policy may be updated as a result of legal changes or improvements in the way we provide our services. We recommend you visit it periodically. If the changes relate to the consent given, we will send you a separate notification to obtain it again.
Any questions? Contact us
If you have any questions regarding this Privacy Policy and the processing of your data, contact us:
- E-mail: dpd@arkeero.com
- Postal address: ROCK INTERNET, S.L., Calle Barquillo, 8 planta 2º izq., 28004 Madrid, Spain.