Privacy Policy.

PRIVACY POLICY

This privacy policy applies to the processing of personal data of clients and/or users of https://www.bullplanet.es , hereinafter the WEBSITE, whose data controller is Ismael Iglesias Martínez, hereinafter the CONTROLLER. OF THE TREATMENT.

Applicable regulations

Our Privacy Policy has been designed in accordance with REGULATION (EU) 2016/679 of the EUROPEAN PARLIAMENT and the COUNCIL, of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free circulation of these data and which repeals Directive 95/46/EC (General Data Protection Regulation), hereinafter GDPR EU 2016/679, and insofar as it does not contradict the aforementioned Regulation, as provided in Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, hereinafter LOPDGDD 3/2018.

By providing us with their data, the client and/or user declares that they have read and are aware of this Privacy Policy, giving their unequivocal and express consent to the processing of their personal data in accordance with the purposes and terms expressed here.

Basic information on data protection

BASIC INFORMATION ON DATA PROTECTION

Responsible

Ismael Iglesias Martínez

Purpose

Respond to requests for information received, provide the requested services, attend to and manage orders from customers and/or web users of the online store of articles and/or products, provide customer service, subscribe to the newsletter. informative news, manage user comments to the entries published in the website's blog, as well as send commercial communications about our articles and/or products by letter, telephone, email, SMS/MMS, WhatsApp, Telegram or by others equivalent means of electronic communication, as long as the interested party has consented to the processing of their personal data for this purpose.

Legitimation

Execution of a contract in which the interested party is a party or for the application at his request of pre-contractual measures. Legitimate interest of the person responsible. Consent of the interested party.

Recipients

No data will be transferred to third parties, except under legal obligation.

Rights

You have the right to access, rectify and delete the data, as well as other rights, indicated in the additional information, which you can exercise by contacting the address of the Data Controller at info@bullplanet.es

Additional Information

You can consult additional and detailed information on Data Protection in the attached clauses found at https://www.bullplanet.es/pages/politica-de-privacidad

 

Additional information on data protection

The person responsible for the treatment is:

  • Identity: Ismael Iglesias Martínez
  • IF: 50464050ª
  • Postal address: C/ Porthos 17 - 2º | 28011 Madrid (Spain)
  • Telephones: (+34) 6660441297 | (+34) 690213171
  • Email address: info@bullplanet.es

 

Data Protection Officer

 

The CONTROLLER does not have a Data Protection Officer.

Purposes and legal basis of processing

  1. a) In general terms:

The DATA CONTROLLER processes the personal data provided by its clients and/or users for the following purposes:

  • Purpose : carry out administrative, commercial, accounting and tax management, respond to requests for information received, respond to queries raised, attend to and manage orders from customers and/or users of the online store for articles and/or products, provide customer service, subscribe to the informative newsletter, manage user comments to the entries published on the website's blog, as well as send commercial communications about our articles and/or products by letter, telephone , email, SMS/MMS, WhatsApp, Telegram or by other equivalent means of electronic communication, as long as the interested party has consented to the processing of their personal data for this purpose.
  • Legal basis that legitimizes this processing: Execution of a contract in which the interested party is a party or for the application at their request of pre-contractual measures. Legitimate interest. The consent of the interested party, which may be withdrawn at any time.

  1. b) Electronic forms WEBSITE:

The CONTROLLER processes the personal data provided by clients and/or users through the electronic forms for collecting personal data existing on the WEBSITE for the purposes identified below:

In relation to the “Contact Form” and other queries (those that can be directed through the email accounts listed on the WEBSITE) :

  • Purpose : Contact the interested party, respond to requests for information received and respond to queries raised, provide customer service, as well as send commercial communications about our articles and/or products by letter, telephone, email, SMS/MMS , WhatsApp, Telegram or by other equivalent means of electronic communication, as long as the interested party has consented to the processing of their personal data for this purpose.
  • Legal basis that legitimizes this processing: Execution of a contract in which the interested party is a party or for the application at their request of pre-contractual measures. The consent of the interested party, which may be withdrawn at any time.

In relation to the “News Bulletin Form” :

  • Purpose : Allows the user to subscribe to the newsletter to receive the latest news, offers and special discounts on our articles and/or products in their email.

  • Legal basis that legitimizes this treatment: The consent of the interested party, which may be withdrawn at any time.

In relation to the “Blog Form – Leave a comment” :

  • Purpose : Manage user comments to the entries published on the website's blog, as well as send commercial communications about our articles and/or products by letter, telephone, email, SMS/MMS, WhatsApp, Telegram or by others. equivalent means of electronic communication, as long as the interested party has consented to the processing of their personal data for this purpose.

  • Legal basis that legitimizes this processing : The consent of the interested party, which may be withdrawn at any time.

In relation to the “Register Form” :

  • Purpose: Allows the user to create an account to access the online store of articles and/or products.

  • Legal basis that legitimizes this processing: Execution of a contract in which the interested party is a party or for the application at their request of pre-contractual measures.

In relation to the “Access Form” :

  • Purpose: Allows the registered user to access the online store with their username or email address and password to purchase the articles and/or products that are made available to them.

  • Legal basis that legitimizes this processing: Execution of a contract in which the interested party is a party or for the application at their request of pre-contractual measures.

In relation to the “Buy as Guest Form” :

  • Purpose : Allows the user, without having to register previously, to purchase the articles and/or products that are made available in the online store.

  • Legal basis that legitimizes this processing : Execution of a contract in which the interested party is a party or for the application at their request of pre-contractual measures.

In relation to the “Live Support Form – Online Customer Service Platform” :

  • Purpose: Provides the user with direct communication with the DATA CONTROLLER through Chat and WhatsApp (RoarTheme plugin for Shopify).

  • Legal basis that legitimizes this processing: The consent of the interested party, which may be revoked at any time.

When the data requested in the electronic forms is necessary, the DATA CONTROLLER will indicate this mandatory nature at the time of collecting data from clients and/or users and failure to provide it will mean that the corresponding request cannot be fulfilled.

What type of data do we process?

For the purposes set out in the previous section, the set of Client data is processed, which we can divide into the following sources and categories:

  1. a) Data provided directly by the client and/or user: data provided directly by the client and/or user, either at the time of requesting the service through the completion of electronic forms for collecting personal data or in paper format enabled for this purpose as well as those provided throughout the contractual relationship through different means such as, for example, complaints or requests for information filed with the Customer Service. The client and/or user is responsible for its veracity and updating.

  • Identification Data (name and surname, NIF, NIE, passport, postal address, email, telephone, mobile, manual, handwritten or digitized signature, social network profiles, IP addresses, username and password)

  • Economic Data (bank details)

  1. b) Data obtained from sources other than the client and/or user: data obtained from sources other than the client and/or user, either by having their consent or by any other legal authorization (legitimate interest, compliance with a legal obligation). …).

  1. c) Data derived from the development of the commercial relationship: data provided indirectly by the client and/or user as a result of the provision of the contracted service and the maintenance of this activity. This category includes traffic data, payment history or contracted items, navigation data through the public Web page or access to the private area, or others of a similar nature.

Record of treatment activities

We inform you that the personal data obtained from the client and/or user as a result of completing the electronic forms existing on the WEBSITE are part of the Record of Processing Activities (RAT) of the CONTROLLER, which will be updated periodically. in accordance with the provisions of the RGPD EU 2016/679 and the LOPDGDD 3/2018 .

 

Recipients

The personal data of the interested parties will be communicated to the recipients indicated below:

  1. a) In general terms:
  • The suppliers of the CONTROLLER as data processors, within the framework of the corresponding provision of services (lawyers, accounting and tax advice, consultants, transport agencies and information technology service providers).

  • The competent authorities and organizations, to the extent necessary to comply with legal obligations.
  1. b) In relation to the “Contact Form” and other queries (those that can be directed through the email accounts listed on the WEBSITE) , with the “News Bulletin Form” , with the “Blog Form ” – Leave a comment” , with the “Register Form” , with the “Access Form” , with the “Buy as Guest Form” and with the “Live Support Form – Online Customer Service Platform” :
  • Shopify International Limited, VAT IE3347697KH, website hosting service.
  • ARSYS INTERNET, SLU, NIF: B85294916, domain and email registration services.
  • No data will be transferred to other third parties, except under legal obligation.

Transfers to third countries

  • Data transfers to third countries are not planned without an adequate level of protection.

Conservation periods

Personal data will be kept:

  1. a) In general terms:
  • The data will be kept as long as you do not request its deletion, and in any case, for the years necessary to comply with legal obligations.
  1. b) In relation to the “Contact Form” and other queries (those that can be directed through the email accounts listed on the WEBSITE) , with the “News Bulletin Form” , with the “Blog Form ” – Leave a comment” , with the “Register Form” , with the “Access Form” , with the “Buy as Guest Form” and with the “Live Support Form – Online Customer Service Platform” :

The personal data will be kept until the end of the relationship between the DATA CONTROLLER and the client and/or user, unless the latter previously requests their deletion, or until the interested party withdraws the consent granted at any time, without that this affects the legality of the treatment based on consent prior to its withdrawal.

For these purposes, the interested party is reminded that they must transfer to the DATA CONTROLLER as recipient to whom personal data is communicated, any rectification or deletion of the data of their representatives, authorized persons and other contact persons.

Once the relationship has concluded, to the extent that the personal data of the interested parties is relevant for the purposes of the responsibility of the DATA CONTROLLER towards clients and/or users, these data will be kept, duly blocked, at the disposal of the authorities. judicial authorities or the competent public administrations, to demand the responsibilities derived from the treatment during the statute of limitations thereof.

Rights of interested parties

Clients and/or users of the WEBSITE may exercise before the DATA CONTROLLER, to the extent applicable, the following rights: access to personal data, rectification, deletion (right to be forgotten), limitation of processing, portability of data. data, opposition to processing and not being subject to automated individual decisions and, when processing is based on consent, the right to withdraw it at any time.

Clients and/or users may exercise these rights by means of a written and signed request sent to the postal address of the CONTROLLER located at C/ Porthos 17 - 2º | 28011 Madrid (Spain) or through the email address info@bullplanet.es , attaching, in both cases, the interested party, proof of identity valid in law, such as a photocopy of the NIF/NIE or equivalent document, and clearly indicating the right that you want to exercise.

Clients and/or users will also have the right to file a claim with the competent Control Authority (Spanish Data Protection Agency) if they observe that the treatment does not comply with current regulations or they consider that their rights regarding protection have been violated. of your personal data, especially when you have not obtained satisfaction in the exercise of your rights, through the WEB page https://www.aepd.es

These rights will be attended to by the DATA CONTROLLER within a period of 1 month, which may be extended to 2 months if the complexity of the request or the number of requests received so requires. All of this without prejudice to the duty to retain certain data in accordance with legal terms and until the possible responsibilities arising from possible processing, or, where applicable, from a contractual relationship, expire.

In addition to the above, and in relation to data protection regulations, Users who request it have the possibility of organizing the destination of their data after their death.

Sending commercial communications

 

In compliance with the provisions of the second final provision of Law 9/2014, of May 9, on Telecommunications, which modifies Law 34/2002, of July 11, on information society services and electronic commerce, Commercial communications made electronically must be clearly identifiable as such, and the natural or legal person on whose behalf they are made must also be clearly identifiable, without prejudice to the provisions of the regulations issued by the Autonomous Communities with exclusive powers over consumption.

The client and/or user, who provides their contact information to the CONTROLLER by clicking on the “SEND” button of the electronic forms for collecting personal data existing on the website and affirmatively checks the two boxes for obtaining consent. existing, “I accept the processing of my data according to the purposes indicated in the basic data protection information” and “I give my consent to receive commercial communications about your articles and/or products”, you clearly authorize and grant your express, free and express consent. unequivocally to the CONTROLLER to process your personal data in order to send you commercial communications about your articles and/or products by letter, telephone, email, SMS/MMS, WhatsApp, Telegram or by other equivalent means of electronic communication.

The legal basis that legitimizes this processing is the consent of the interested party, which may be revoked at any time.

In compliance with the provisions of articles 21 and 22 of Law 34/2002, of July 11, on information society services and electronic commerce, the user may oppose the processing of their data for promotional purposes and revoke the consent given to receive commercial communications via email with the simple notification of your will to the PROVIDER through a simple and free procedure, consisting of sending an email to the email address info@bullplanet.es , indicating in the Subject of the message “LOW” or “DO NOT SEND”.

The data provided will be kept as long as the commercial relationship is maintained or for the years necessary to comply with legal obligations.

Social media policy

The CONTROLLER has profiles on the following Internet social networks:

  • Facebook:

https://www.facebook.com/arteconcuero

https://www.facebook.com/cinturonlumbar

 

  • Instagram:

https://www.instagram.com/bullplanet

https://www.instagram.com/bullplanetfit

 

  • Youtube:

https://www.youtube.com/channel/UChI_PWJDkE1Kxx6Bc4vA78w

In all cases , it is considered responsible for the processing of its users' data, including followers, subscribers, fans, or simply people who make comments or queries through these channels.

In this sense, the CONTROLLER could use this profile to inform its users of news that it considers appropriate for the purpose of the services offered, or perhaps it could also share information or current articles published by other users of social networks.

In no case will it use users' personal information without their consent to have relationships other than those expected in each of the aforementioned social networks, requesting, where appropriate, the user's own consent.

Veracity of the data provided by the interested parties

The client and/or user is responsible for the information provided by completing the electronic forms that are made available on the WEBSITE or by sending emails to the different accounts that exist under the domain in Internet bullplanet.es, is true, responsible for the accuracy of all the data it communicates and will keep it updated so that it reflects a real situation, being responsible for false or inaccurate information provided and for any damages, inconveniences and problems that it may cause. to the CONTROLLER RESPONSIBLE FOR THE TREATMENT or to third parties.

Security measures

The CONTROLLER guarantees that it has implemented on the WEBSITE the appropriate technical and organizational policies to apply the security measures established by the RGPD EU 2016/679 and the LOPDGDD 3/2018 in order to protect the rights and freedoms of clients. and/or users and has communicated the appropriate information to them so that they can exercise them.

The DATA CONTROLLER, to protect individual rights, especially in relation to automated treatments and with the desire to be transparent with clients and/or users, has established a policy that includes all of said treatments, the purposes pursued by the latter. , their legitimacy and also the instruments available to the client and/or user so that they can exercise their rights.

The WEBSITE is developed with the Shopify e-commerce platform and has a Let's Encrypt Authority X3 SSL encryption certificate activated for the entire domain, which allows the user to securely send their personal data through existing electronic forms.

The WEBSITE is hosted on the servers that Shopify International Limited, IVA IE3347697KH, with address 2nd Floor, 1-2 Victoria Buildings, Haddington Road Dublin 4, D04 XN32, Ireland, offers to the CONTROLLER.

All information will be saved and managed with due confidentiality, applying the necessary computer security measures to prevent access or improper use of your data, its manipulation, deterioration or loss.

However, the client and/or user must keep in mind that the security of computer systems is never absolute. When personal data is provided over the Internet, said information could be collected without your consent and processed by unauthorized third parties. The CONTROLLER declines any type of responsibility for the consequences of these acts for the User, if they published the information voluntarily.

Acceptance and consent

The client and/or user declares to have been informed of the conditions regarding the protection of personal data, accepting and consenting to the automated processing thereof by the CONTROLLER in the manner and for the purposes indicated in this Privacy Policy. Certain services provided on the WEBSITE may contain particular conditions with specific provisions regarding the protection of personal data.

Changes to this privacy policy

THE CONTROLLER reserves the right to modify this Privacy Policy to adapt it to new legislation, jurisprudence, interpretation of the Spanish Data Protection Agency, as well as industry practices.

In such cases, the DATA CONTROLLER will announce the changes introduced on the websites with reasonable advance notice of their implementation.

This privacy policy may be complemented by the Legal Notice, Cookies Policy and the General Contracting Conditions that, where appropriate, are collected for certain products or services, if said access involves any specialization in matters of personal data protection. .