Privacy policy
1. USER INFORMATION
Who is the controller of your personal data?
BOUND 4 BLUE, S.L. is the CONTROLLER of the USER’s personal data and informs him/her that these data shall be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR) and the Organic Law 3/2018 of December 5, (LOPDGDD).
Why is personal data processed?
To maintain a commercial relationship with the user. The planned processing operations are:
- Sending commercial advertising communications by email, fax, SMS, MMS, social networks or by any other electronic or physical means, present or future, that make it possible to carry out commercial communications. These communications will be made by the CONTROLLER and will be related to their products and services, or those of their partners or suppliers with whom they have reached a promotion agreement. In this case, the third parties will never have access to personal data.
- Conduct market research and statistical analysis.
- Processing orders, requests, responding to queries or any type of request made by the USER through any of the contact methods available at the CONTROLLER’s website.
- Send the online newsletter on news, offers and promotions in our activity.
Why can we process your personal data?
Because the processing is legitimized by article 6 of the GDPR as follows:
- With the USER’s consent: sending commercial communications and the newsletter.
- In the legitimate interest of the CONTROLLER: conduct market research, statistical analysis, etc. and process orders, requests, etc. at the request of the USER.
For how long will we keep your personal data?
Data shall be stored for no longer than is necessary to maintain the purpose of the processing or for as long as there are legal prescriptions dictating their custody, and when such purpose is no longer necessary the data shall be erased with appropriate security measures to ensure the anonymization of the data or their complete destruction.
To whom do we disclose your personal data?
No communication of personal data to third parties is foreseen except, if necessary for the development and execution of the purposes of the processing, to our suppliers of services related to communications, with which the CONTROLLER has signed the confidentiality and data processor contracts required by current privacy regulations.
What are your rights?
Users who provide us with their data have the following rights in relation to their data:
- Right of access
- Right of rectification or erasure
- Right to restriction of processing
- Right to portability
- Right to object
- Right to withdraw consent
- Right of access: Any person has the right to obtain from the Data Controller confirmation as to whether or not personal data concerning him/her are being processed and, if so, the right of access to the personal data.
- Right of rectification: This is the right to obtain the rectification of personal data held by us concerning you.
- Right of erasure: This is the right to obtain the erasure of your personal data.
- Right to restriction of processing: This is the right for your data to cease to be subject to the relevant processing operations when any of the following conditions are met:
– When you have exercised your rights of rectification or opposition and the Controller is in the process of determining whether the request is admissible.
– If the data processing is unlawful, which implies the erasure of the data, but you do not want your data to be erased by the Data Controller.
– When the data are no longer necessary for processing, this means that the data are deleted, but you wish the data controller to limit the processing of the data and to keep them for the purpose of making, exercising or defending claims. - Right to portability: This is the right to obtain from the Data Controller, in the event of automated processing of your data, a copy of your data in a structured, commonly used and machine-readable format or to have this copy transmitted directly to the Data Controller indicated by you. Please note that this right does not apply to:
– The data of third parties that you have provided to the Data Controller.
– The data which is its responsibility, but which has been provided to the Data Controller by third parties. - Right to object: This is the right to object to the processing of your personal data. As far as the processing carried out by the Data Controller is concerned, you may object to the sending of commercial communications, both our own and those of third parties.
If you would like more information about your rights, we suggest that you visit the website of the Spanish Data Protection Agency, as well as the European Data Protection Regulation.
These rights may be exercised by sending an email to enquires@bound4blue.com, clearly indicating which right you wish to exercise and providing a copy of your identity document to prove your identification. They may also be sent by post to the registered address of the Data Controller, which appears in point 1 of this Privacy Policy.
Additionally, we inform you about the possibility of filing a complaint with the competent Control Authority, in this case, the Spanish Data Protection Agency, especially in the event that you have not obtained satisfaction in the exercise of your rights. You can contact the Spanish Data Protection Agency by telephone on 901 100 099 and 912 663 517 or by visiting them at their address C/ Jorge Juan, 6. 28001 – Madrid.
2. COMPULSORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER
The USERS, by marking the corresponding boxes and entering data in the fields, marked with an asterisk (*) in the contact form or download forms, accept expressly and in a free and unequivocal way that their data are necessary for the supplier to meet their request, voluntarily providing their data in the remaining fields. The USER ensures that the personal data provided to the CONTROLLER is true and is responsible for communicating any changes to them.
The CONTROLLER informs that all data requested through the website is mandatory, as they are necessary for the provision of an optimal service to the USER. In the event that not all of the data is provided, there is no guarantee that the information and services provided will be completely adapted to the User’s needs.
3. SECURITY MEASURES
That in accordance with the provisions of the current regulations on the protection of personal data, the CONTROLLER is complying with all the provisions of the GDPR and LOPDGDD regulations for processing the personal data for which they are responsible, and is manifestly complying with the principles described in Article 5 of the GDPR, by which they are processed in a lawful, fair and transparent manner in relation to the data subject and appropriate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
The CONTROLLER guarantees that all appropriate technical and organizational policies have been implemented to apply the security measures established by the GDPR and LOPDGDD in order to protect the rights and freedoms of USERS and has communicated the appropriate information for them to be able to exercise them.
For more information about privacy guarantees, you can contact the CONTROLLER through BOUND 4 BLUE, S.L. C/ Melampo, 2 2 4 – 39100 Santa Cruz de Bezona (Cantabria). E-mail: enquires@bound4blue.com
- Origin and veracity of the data
All of the data collected comes from the interested party. The User, by accepting this Privacy Policy, declares and undertakes to guarantee the truthfulness and accuracy of the data provided, as well as being the legitimate owner of the same.
Likewise, the User undertakes to keep his/her data updated at all times, and to notify the Controller without delay of any significant modification, such as the change of ownership of his/her bank account, or the modification of his/her e-mail account provided through the relevant forms hosted on the website.
In this regard, the User shall be solely responsible for any failure to comply with the above, exonerating BOUND 4 BLUE from any liability with respect to such data that the User has not previously communicated to BOUND 4 BLUE.
ADVERTISEMENTS: In accordance with the provisions of Article 21 of Spanish Law 34/2002 on Services of the Information Society and E-Commerce (LSSICE) and the privacy regulations in force, we inform you that the data you provided will be processed in order to subscribe and to receive our newsletter.
Purposes and legitimacy of the processing: sending communications concerning products or services through the Newsletter to which you have subscribed (with the Data Subject’s consent, art. 6.1.a GDPR).
Data storage criteria: data shall be stored for no longer than is necessary to maintain the purpose of the processing or for as long as there are legal prescriptions dictating their custody, and, provided that the data subject does not revoke the consent given. When such purpose is no longer necessary the data shall be erased with appropriate security measures to ensure the anonymization of the data or their complete destruction.
Communication of data: data will not be disclosed to third parties, unless legally obliged to do so.
Rights of the Data Subject:
-Right to withdraw consent at any time.
– Right of access, rectification, portability and erasure of the data, and those of limitation or opposition to their processing.
– Right to submit a complaint to the Supervisory Authority (www.aepd.es) if they consider that the processing does not comply with current legislation.
SOCIAL NETWORKS
1. USER INFORMATION
Who is the controller of your personal data?
BOUND 4 BLUE, S.L., hereinafter, CONTROLLER, informs the USER that he/she has proceeded to create a profile on the Social Networks Facebook, Twitter, LinkedIn and, Vimeo and Google+, that he/she is the controller of the user’s personal data processing that takes place on these social networks and informs him/her that these data shall be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR) and the Organic Law 3/2018 of 5 December (LOPDGDD), providing the following information on the processing:
For what purpose do we process your personal data?
Purposes of the data processing: maintaining a relationship between the USER and the CONTROLLER which may include the following operations:
- Process requests and queries made to the data controller
- Report on activities and events organised by the data controller
- Inform about products or services offered by the data controller
- Interact through official profiles
Why can we process your personal data?
Legal basis of the processing: article 6.1.a GDPR, the data subject has given consent to the processing of his or her personal data for one or more specific purposes. The USER has a profile in the same social network and has decided to join the CONTROLLER’s social network showing interest in the information published in it, therefore, at the time of requesting to follow our official profiles, gives us consent for the processing of those personal data published in their profile.
The USER can access at all times the privacy policies of the social network itself, as well as configure their profile to ensure their privacy.
The CONTROLLER has access and processes the USER’s public information, especially their contact name. These data are only used within the social network and will only be incorporated into a CONTROLLER’s file when necessary to process the request of the USER.
For how long will we keep your personal data?
Data storage criteria: the data will be kept as long as the USER does not revoke the consent given, as indicated in this privacy policy.
To whom do we disclose your personal data?
Communication of data: the information provided by the USER through the CONTROLLER’s social networks, including his/her personal data, may be published, always depending on the services that the USER uses, so that they may be publicly available to other third parties who are users of the social networks. From the profile of each social network, the USER can configure what information he/she wants to make public in each case, see the permissions that have been granted, delete them or deactivate them, like any third party’s application that you no longer want to use.
No communication of personal data to third parties out of the social network is foreseen except, if necessary for the development and execution of the purposes of the processing, to our suppliers of services related to communications, with which the CONTROLLER has signed the confidentiality and data processor contracts required by current privacy regulations.
What are your rights?
Rights of the USER: they can only be exercised in relation to that information that is under the control of the CONTROLLER.
- Right to withdraw consent at any time
- Right of access, rectification, portability and erasure of your data and the limitation or objection to their processing
- The right to file a claim with the Spanish Supervisory Authority (www.aepd.es) if you consider that the processing does not comply with the current legislation
Contact information for exercising rights:
BOUND 4 BLUE, S.L. C/ Melampo, 2 2 4 – 39100 Santa Cruz de Bezona (Cantabria). E-mail: enquires@bound4blue.com
2. USE OF THE PROFILE
The CONTROLLER will carry out the following actions:
- Access to the public information of the profile.
- Publication in the profile of the USER of all the information already published in the CONTROLLER’s social network.
- Sending personal and individual messages through the channels of the social network.
- Updates of the state of the page that will be published in the USER’S profile.
The USER can always control their connections, delete the contents that no longer interest them and define with whom they share their connections; to do so they must access their privacy settings.
3. PUBLICATIONS
The USER, once he/she is a follower or has joined the CONTROLLER’s social network, may publish comments, links, images, photographs or any other type of multimedia content supported by the social network. The USER, in all cases, must be the owner of the published content, have the copyright and intellectual property rights or have the consent of affected third parties.
Any publication on the social network, be it texts, graphics, photographs, videos, etc., that threaten or are likely to threaten morals, ethics, good taste or decorum, and/or that infringe, violate or breach intellectual or industrial property rights, the right to the image or the Law, is expressly prohibited.
In these cases, the CONTROLLER reserves the right to immediately remove the content, without prior notice, and may request the permanent blocking of the USER.
The CONTROLLER shall not be held responsible for the contents freely published by a USER.
The USER must keep in mind that their publications will be known by other users, so they are the main responsible for their privacy.
The images that can be published in the social network will not be stored in any file by the CONTROLLER, but they will remain in the social network.
4. DATA ON MINORS OR PEOPLE WITH SPECIAL NEEDS
Access and registration through the CONTROLLER’s social networks is prohibited to minors under the age of 18. On the other hand, if the USER is disabled, the intervention of the holder of their parental authority or guardianship will be necessary, or that of their legal representative by means of a valid document that accredits the representation.
The CONTROLLER will be expressly exonerated of any responsibility that may arise from the use of social networks by minors or disabled people. The CONTROLLER’s social networks do not collect consciously any personal information from minors, therefore, if the USER is a minor, they must not register, nor use the CONTROLLER’s social networks nor provide any personal information.
- The right to file a complaint before the Spanish Data Protection Agency (AEPD).Contact information to exercise their rights:
BOUND 4 BLUE, S... C/ Melampo, 2 2 4 – 39100 Santa Cruz de Bezona (Cantabria). E-mail: enquires@bound4blue.com