Privacy Policy and Data Protection

FOR HOW LONG WILL WE KEEP YOUR PERSONAL DATA

The personal data you provide us will be kept as long as our contractual or commercial relationship is maintained. However, from the date of termination of our contractual relationship or mercantile your data will be kept:

As long as the requested relationship lasts or you revoke your consent, at which time we will proceed to keep them duly blocked to attend to possible responsibilities arising from the processing of your personal data for a maximum of 3 years.

In the event that you are a client or supplier of ours, your data will be kept:

Four Years for tax purposes: Accounting books and other mandatory record books according to the applicable tax regulations (personal income tax, VAT, IS, etc.). Articles 66 to 70 General Tax Law.

Six years for commercial purposes: Books, correspondence, documentation and supporting documents, invoices issued and received, tickets, corrective invoices, bank documents, etc.). Art. 30 Commercial Code.

IS THERE AN OBLIGATION TO PROVIDE THIS PERSONAL DATA?

In the requested contact, it is necessary that you provide us with some contact information in order to be able to contact you in order to provide the service you request.

WHAT ARE THE CONSEQUENCES OF NOT DOING IT?

Given that we consider them necessary to be able to provide you with the service you request, if you do not fill in the contact form, it will not be sent and your inquiry will be unviable.

HOW HAVE WE OBTAINED YOUR PERSONAL DATA?

The data obtained has been provided to us directly or through the portals where we advertise our products and services on CNAE 4775 Retail trade of cosmetic and hygienic products in specialized establishments.

TO WHICH RECIPIENTS WILL YOUR PERSONAL DATA BE COMMUNICATED?

As a general rule, your data will not be communicated to any third party, except for current legal obligations. In any case that this possibility changes, you will be duly informed requesting your consent for said assignment.

However, we inform you that for the correct provision of services (see, web hosting, support, email marketing, etc.), different service providers contracted by our entity (those in charge of the treatment) could have access to the personal information necessary to perform their functions and with the sole objective of guaranteeing the correct development of the contractual and / or commercial relationship and complying with the entity’s legal obligations.

These services provided by third parties are necessary for the development of our activity and, at all times, the treatment of the data they carry out is governed by a contract that binds the person in charge with respect to our entity. In no case will they use the information for other purposes and will treat it in accordance with the guidelines stipulated by our entity, in accordance with its privacy policy and current regulations on data protection.

BIONAT VEGAN in its commitment to the privacy and protection of User data, will only choose service providers that offer sufficient guarantees to apply appropriate technical and organizational measures, so that the treatment is in accordance with the applicable legislation on data protection and guarantee the protection of the User’s rights.

In the case of subscribing to our newsletter, we inform you that we use the Mailchimp application for its management, which implies an international transfer of data to Mailchimp (The Rocket Science Group LLC) for the provision of the service, based on a Decision of adequacy of the European Commission (Commission Implementing Decision (EU) 2016/1250, of July 12, 2016, in accordance with Directive 95/46 / EC of the European Parliament and of the Council, on the adequacy of the protection conferred by the EU-US Privacy Shield Likewise, we inform you that this company uses devices to monitor the activity of recipients, in order to control the opening of emails and the clicking of the links contained in the emails and collect information such as the IP address, browser, type of email client and similar details, to be able to prepare with the information collected, monitoring reports of the campaigns as well as improve the effectiveness nity of Mailchimp services. For more information, you can consult the Mailchimp Policy: https://mailchimp.com/legal/privacy/

WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE ME WITH YOUR PERSONAL DATA?

Any interested party may request the exercise of the following rights:

Right of access: The interested party will have the right to obtain confirmation of whether or not personal data concerning them is being processed.

Right of rectification: The interested party will have the right to obtain the rectification of inaccurate or incomplete personal data.

Right of deletion: The interested party will have the right to obtain the deletion of the personal data that concerns him when the personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed.

Right of limitation: You may request the limitation of the processing of your personal data, in which case it would only be kept for the exercise or defense of claims.

Right to the portability of your data: Therefore, you can request that your automated personal data be transferred or transferred to any other company that you indicate to us in a structured, intelligible and automated format.

Right to withdraw consent: You will have the right to withdraw consent at any time, without affecting the legality of the treatment based on consent before its withdrawal.

Right of opposition: The interested party will have the right to oppose the processing of their data.

HOW CAN YOU EXERCISE THESE RIGHTS?

We put at your disposal, if requested, the forms where you can exercise these rights. You can request us by email (e-mail): info@bionatvegan.com indicating the right you want to exercise and we will send you the corresponding form.

The exercise of the rights must be carried out by means of communication addressed to the electronic mail (e-mail): info@bionatvegan.com or at the address Calle Urumea 4 – 2 Dcha Llodio 01400 Álava (Spain)

WHO CAN EXERCISE THE RIGHTS?

The rights of the interested parties are very personal, therefore, they will be exercised by the owner of the data, duly proving their identity (for this the DNI or equivalent will be requested).

It may also be exercised through legal representation, in which case, in addition to the interested party’s DNI or equivalent, a DNI and authentic document certifying the representation of the third party must be provided.

WHAT WILL OUR OBLIGATION BE WHEN YOU EXERCISE ANY OF THE RIGHTS?

The person responsible for the treatment must answer the request that is addressed to him in any case, regardless of whether or not personal data of the affected person or interested party is included in their treatment.

In the event that the request does not meet the specified requirements, the person responsible for the file must request their correction.

The data controller will respond to requests within one month of receiving the request. This period may be extended for another two months if necessary, taking into account the complexity and number of requests. The person in charge will inform the interested party of any of said extensions within one month of receiving the request, indicating the reasons for the delay.

RIGHT OF COMPLAINT TO THE CONTROL AUTHORITY

You may request the protection of rights that have not been duly addressed to the Spanish Agency for Data Protection. Either through the electronic headquarters of its web portal (www.agpd.es), or by writing to its postal address (C / Jorge Juan, 6, 28001-Madrid Spain).

COMPULSORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

Users, by checking the corresponding boxes and entering data in the fields of the contact forms, or by sending an email requesting information, expressly and freely and unequivocally accept that their data is necessary to meet their request. , by the provider. The User guarantees that the personal data provided is true and is responsible for communicating any changes to them.

WHAT INFORMATION DO WE COLLECT?

In general, you can use the Website without providing any personal information.

There are channels on our website where you can contact us. When you request information from us, the user guarantees the authenticity, accuracy and veracity of all the information you provide us, committing to keep the personal data you provide us updated so that they respond, at all times, to your real situation. The User will be solely responsible for false or inaccurate statements and for the damages that they may cause.

WHAT MEASURES DO WE TAKE TO KEEP YOUR INFORMATION SECURE?

We apply reasonable technical and physical measures to protect the information we collect through the Website.

DATA PROTECTION IN SOCIAL NETWORKS

FOR WHAT PURPOSE WILL WE TREAT YOUR PERSONAL DATA?

We use social networks to inform about our activities and interact with our followers. By becoming a follower of us, you consent to us treating the personal data that is available in your profile, exclusively for that purpose and only in the environment of each social network in accordance with their use and privacy policies. Your personal data will be used in order to manage the list of people who like our page. And thus be able to receive information directly related to the services we provide, events, activities and promotions of our organization, always through the chosen social network and interact with us.

WHAT IS THE LEGITIMATION FOR THE TREATMENT OF YOUR PERSONAL DATA?

Communications via social networks in any case are subject to the consent of the interested party and are entirely voluntary, said relationship being subject to the conditions established in the privacy and data protection policies of each social network.

FOR HOW LONG WILL WE KEEP YOUR PERSONAL DATA?

The data provided in the corresponding social network will remain accessible to us as long as you keep the “follow” or “like” button active and as long as you want to stop following us, all you have to do is “click” on the “unfollow” button. “Or” I no longer like it “or leave the Google+ contacts or delete contact on Linkedin or the specific procedure of the social network.

IS THERE AN OBLIGATION TO PROVIDE THIS PERSONAL DATA?

There is no obligation to provide data beyond those necessary for registration in each social network.

WHAT ARE THE CONSEQUENCES OF NOT DOING IT?

Impossibility of communication and monitoring through social networks.

You can exercise the rights of access, rectification, deletion, limitation, portability of your data, withdrawal of consent and opposition at the email address (e-mail): info@bionatvegan.com. We will respond to your requests within the framework and with the limitations derived from the operating rules established by Twitter, Facebook, Instagram, Mailchimp, Disqus, YouTube, Google / Google+ / Google Maps, Linkedin, Vimeo and Pinterest.

In the section What are your rights when you provide me with your personal data? In this document we explain how you can exercise those rights.

MODIFICATIONS TO THIS DATA PROTECTION INFORMATION

BIONAT VEGAN reserves the right to modify its Data Protection Policy in accordance with the applicable legislation at all times. Any modification of said policy will be published on the website.