Privacy policy

Last updated: 11 October 2026

What personal data rybcompany.com processes, why, and how to exercise your rights over it.

Who is responsible for your data?

The data controller is Carlos Larriba Rius, trading as RYB Company. For any privacy matter, write to hola@rybcompany.com. Full identification details are given in the legal notice.

What data is processed?

• Data from the contact form or from an email sent to hola@rybcompany.com: your name, company (if provided), email address and message. Name, email and message are needed to reply; without them, the enquiry cannot be dealt with.
• Technical data from your visit: your IP address and technical details of your browser and device, used to protect the website and the form.
• Visitor statistics: aggregate figures that identify no one.

This website is aimed at businesses and professionals, not at minors.

Why is it processed, and on what legal basis?

• To answer your enquiry and, if you ask for one, prepare a proposal. Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b) of the General Data Protection Regulation, GDPR).
• To protect the form and the website from spam and abuse. Turnstile, Cloudflare's anti-spam service, tells people apart from bots using your IP address and technical details of your browser and device, without reading anything you type into the form. It loads only when you reach the form. Your IP address is also used to limit repeated submissions from the same address. The content of messages is never stored in any log. Legal basis: the owner's legitimate interest in keeping the website secure and the inbox free of spam (Article 6(1)(f) GDPR).
• To count visits. Cloudflare Web Analytics provides statistics without cookies, without storing anything in your browser and without identifying you. Legal basis: legitimate interest in understanding how the website is used (Article 6(1)(f) GDPR).

Your data is never used for marketing. No profiling takes place, and no decisions are made by automated means.

How long is it kept?

• Messages received through the form or by email: for as long as it takes to deal with the enquiry, and no longer than 12 months if no further relationship follows.
• If you become a client: for as long as the relationship lasts. After that, the data is restricted (kept without being used, available only to courts and public authorities) until any legal claims arising from the relationship become time-barred.
• Technical security and anti-spam data: the counter that limits submissions is cleared after one minute, and the website keeps no logs of visits.

Who else is involved?

Your data is not disclosed to third parties unless the law requires it, except for the Turnstile processing explained below. Two providers process it on the owner's behalf, as data processors:

• Cloudflare, Inc. (United States): website hosting, form processing, Turnstile spam protection and visitor statistics.
• Zoho Corporation B.V. (the Netherlands, with its data centre in the European Union): email, where messages are received.

To improve its bot detection service, Cloudflare processes Turnstile's technical data as a controller in its own right, under its own privacy policy: https://www.cloudflare.com/turnstile-privacy-policy/

Is any data transferred outside the European Union?

• Cloudflare: to the United States. The transfer relies on the European Commission's adequacy decision for the EU-US Data Privacy Framework, under which Cloudflare is certified, and, as a fallback, on the standard contractual clauses approved by the Commission.
• Zoho: your data is stored in the European Union. Only in exceptional cases, for support purposes, may it be accessed by Zoho in India, under standard contractual clauses.

A copy of these safeguards is available on request from hola@rybcompany.com.

What are your rights, and how can you exercise them?

You can ask to access, rectify or erase your data, to restrict its processing or to receive it in a portable format, and you can object to its processing, by writing to hola@rybcompany.com. If you believe your data is not being processed lawfully, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

Cookies

This website sets no cookies of its own or from third parties, and does not use browser storage to track visitors: both the statistics and the spam protection work without them. That is why no cookie banner is shown. Should any be added in the future, this policy will say so, and consent will be requested where the law requires it.

Can this policy change?

Yes, whenever the website, its providers or the law change. The date of the last update appears at the top.

Language

This English version is provided for convenience. In the event of any discrepancy, the Spanish version prevails.