GDPR Compliance

General Data Protection Regulation (GDPR) Compliance

RopaExport complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

Principles applied

• Lawfulness, fairness and transparency: we process your data lawfully, fairly and transparently.
• Purpose limitation: we use your data only for the stated purposes.
• Data minimisation: we only request necessary data.
• Accuracy: we keep your data up to date.
• Storage limitation: we keep data only as long as necessary.
• Integrity and confidentiality: we apply technical and organisational security measures.

Data subject rights

You may exercise at any time your rights: access, rectification, erasure, restriction, portability and objection. Email contacto@ropaexport.com.

Data Protection Officer (DPO)

For data protection enquiries contact us at contacto@ropaexport.com.

Processors

We work exclusively with European providers or under standard contractual clauses approved by the European Commission. All providers sign a data processing agreement pursuant to Art. 28 GDPR.

Breach notification

In the event of a security breach, we will notify the competent authority (AEPD) within the legal 72-hour period and, where necessary, the affected individuals.