In accordance with the provisions of the applicable personal data protection regulations, below we explain how we process your personal data.
In general, we will inform you of the mandatory nature of the collection of certain personal data in the fields indicated by an asterisk (*). Failure to complete such data may prevent us from providing all those services related to such data, releasing us from all liability for the lack of provision or incomplete provision of such data.
The data controller is ROCK INTERNET S.L. Spanish company, with NIF B-B-86907953, and registered office atCalle Barquillo nº8, 2º izquierda, 28004, Madrid, España, duly registered in the Mercantile Registry of Madrid, Volume 31853, Folio 1, Entry 1, Sheet M-573205 (hereinafter, “the Company” or “we” interchangeably). Email Data Protection Officer: dpd@arkeero.com
The Company, among other activities, focuses on the advertising sector through direct marketing, affiliate marketing, and online advertising with the prior consent of the recipient. We also operate as a rate or price comparator for third-party services and products aimed at “Home Savings,” including: telephone and internet, water, electricity, and gas, operating for these products as a service company in accordance with Law 34/2002 of July 11, on information society services and electronic commerce. See which sectors are included within the “Home Savings” category below.
Registration on the website is limited to users over eighteen (18) years of age. Minors may not use the services offered without the prior authorization of their parents, guardians, or legal representatives, who will be solely responsible for all actions carried out through the website by the minors in their care, including the completion of forms with the personal data of said minors and the marking, where applicable, of the accompanying boxes. By registering on the website, you guarantee that you are of legal age.
All registration information you submit to register must be true, accurate, complete, and up-to-date. Consequently, you are solely responsible for any direct or indirect damages that may arise from any breach of this obligation. If the data provided belongs to a third party, you guarantee that you have previously informed said third party of the aspects set out herein and have obtained their express and informed consent for the purposes specified in this Privacy Policy.
Below, we detail the type of data we collect and how:
Remember that, at any time, you can revoke your consent or inform us that you do not wish to continue subscribing to any of our services, following the instructions contained in this Privacy Policy. You are solely responsible for maintaining the confidentiality of your access codes and account usage. In the event of unauthorized use or access to your account, please contact us immediately and change your access keys from your user panel.
We use the personal data we collect for the following purposes:
Please remember that, by selecting the corresponding box, you are giving your free and express consent to receive your own and third-party advertising from the indicated sectors. At any time, you can revoke your consent or inform us if you no longer wish to continue subscribing to all or some of our services, following the instructions set out in this Privacy Policy.
The legal basis for purposes a) – d) is the management necessary for the provision of the Company’s own services (Art. 6.1.(b) GDPR) and the application of pre-contractual measures or execution of contracts with final distributors (for example, the insurance company). Without this, the provision of these services is not possible.
The legitimate basis for purposes e), f), g), h), and m) is your express, informed consent (Art. 6.1.(a) GDPR). This is discretionary, but the associated purposes cannot be carried out without your consent, in particular being able to provide you with generic communications about services and products from the Company and/or third parties or communications based on your interests and preferences.
Finally, we will sometimes process your data for our commercial interests that do not conflict with your rights, maintaining a balance between our interests and yours. Therefore, the legitimate basis for purposes i), j), k) and l) is the legitimate interest of the Company. (Art. 6.1.(f) GDPR), however, you may withdraw your consent at any time.
Generally, your personal data will be kept as long as you do not request its deletion, limitation of processing, or it is no longer necessary for the purposes for which it was collected after a period of inactivity (without active interaction with commercial communications or third parties) of three (3) years.
Notwithstanding the foregoing, we will keep the data that you have received through a request on the contact form for the time necessary to resolve your questions or respond to your requests.
If we have your data due to your application for a job offer, we will keep it for a maximum period of one (1) year. We understand that this period is reasonable for a new job opportunity to arise or for you to contact us regarding a contract or service that may be of interest to you.
After the above periods have elapsed, for a period of five (5) years and/or the maximum time legally permitted, the data will be duly blocked and kept available to public administrations, judges and courts to address any potential liabilities arising from the relationship maintained and to comply with any legal obligation required of us.
When we no longer need to use your personal data, it will be deleted from our systems and records or anonymized so that it is not identifiable.
All the transfers indicated below are necessary for the fulfillment of the purposes indicated above or are carried out in compliance with a legal obligation. Personal data may be transferred to:
Furthermore, we remind you that third-party service providers to whom the Company entrusts all or part of the provision of certain services may have access to personal information as data processors, such as hosting, maintenance and support providers in our databases, consultants and advisors or related entities, for administrative purposes or unified management of resources within the framework of the provision of services.
For clarification purposes, this Privacy Policy does not apply to data collected by third parties through their websites, even if any of these websites contain links to and from our website. Please also remember that the third party that provides you with the contracted product or service will have its own privacy policy, which you should consult before contracting the service. The Company is not responsible for any content within the respective privacy policies of such third parties, and does not offer any guarantee, express or implied, in relation to the accuracy, legality, correctness, or validity of any third-party website or the data processing carried out by these third parties. If you want to know how these third parties process your personal data, please consult their privacy policy through the link provided on the website.
Your personal data is processed through automated and non-automated means, and is protected by those technical and organizational security measures that we consider sufficient and appropriate, taking into account the data processing to be carried out and the state of current technology.
To this end, we appropriately restrict access to personal information and implement the necessary measures and controls, including physical and supervisory measures, to store and transfer data securely and protect the personal data in its possession against any loss, theft and unauthorized use, disclosure or modification.
The personal data we collect may be transferred to, accessed from, and stored on our servers located in Spain.
Similarly, in order to provide our services, we may need to store or provide access to your personal data to a supplier or one of our affiliated entities located outside the European Economic Area (“EEA”), in the United Kingdom or the United States. In any case, these transfers would be carried out on the basis of the signing with such companies located outside the EEA of the standard contractual clauses authorized by the European Commission (more information at aepd.es), which offer adequate legal guarantees in accordance with data protection regulations and safeguards defined by the European Union.
Remember that you have the right to request additional information about the processing of your personal data at any time by contacting us at the addresses indicated in this Privacy Policy.
You may exercise your rights to information, rectification, objection and erasure, as well as the right to restriction of processing, objection to being subject to automated individual decisions or data portability of your personal data by sending a written communication to the Company at the address indicated above or by email to dpd@arkeero.com.
The request must include your name, surname, the right you wish to request, and the content of your request. Likewise, the request must be accompanied by a copy of your identity document, in order to verify ownership of the data.
Remember that, at any time, you have the possibility and the right to withdraw consent for any specific purpose granted at the time, through the procedure described in the previous paragraph, without affecting the legality of the processing based on the consent prior to its withdrawal.
Likewise, if you consider that the processing of your personal data is not adequate, you can file a complaint with the competent national supervisory authority, that is, the Spanish Data Protection Agency (aepd.es).
The Company does not send commercial communications without the prior and informed consent of the interested party in accordance with current legislation. In this regard, we inform you that we comply with current legislation and, in particular, with European protection standards in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, and implementing regulations, guaranteeing the highest standards of protection in the processing of your personal data (GDPR).
The content of communications sent by electronic means complies with the regulations established in the GDPR, Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (“LOPDGDD”), and Law 34/2002, of July 11, on information society services and electronic commerce (“LSSI”).
All emails include a link to unsubscribe from our commercial communications, as well as a link to this privacy policy with the instructions you must follow if you are interested in exercising any of your data protection rights in accordance with current legislation.
Our Privacy Policy may be updated as a result of changes and legal requirements, as well as due to Improvements and changes included in the way we offer and provide our services and information of interest. Therefore, we recommend that you visit and access our Privacy Policy periodically to access and be aware of any recent changes that may have been made. If these changes are related to the consent you have provided, you will be sent a separate notification to obtain it again.
If you have any questions regarding this Privacy Policy and the processing of your data, please contact us at the following addresses:
Last updated: December 2021