Basic Information on Data Protection

Responsible	Beatriz del Castillo Delgado – DNI 44015497Y – Paseo Manuel Girona 16, 08034 Barcelona
Contact	hola@bixcares.com -Telf.: 647 581 683
Purpose	1) Enquiries and requests for information from third parties: Provide a response to the request made. 2) Relationship with the customer: Maintenance of the contractual relationship established between the owner of the data and BIXCARES for the management of the online purchase, customer management, tax, administrative and payment management. 3) Periodic sending of the newsletter. 4) Creation of customer account to enable purchases and access to restricted areas (“My Account”). 5) Contact the persons/companies/businesses interested in becoming official distributors of our brand, in order to manage their request: to respond to the request made.
Legitimation	1) Consultas y solicitudes de información de terceros: interés legítimo de atención al interesado. 2) Relación con el cliente: relación contractual. 3) Periodic sending of the newsletter: consent of the interested party to the sending of commercial communications referring to products or services similar to those initially contracted with the client (article 21.2 of Law 34/2002, of 11 July, on Information Society Services. 4) Creation of a customer account to enable purchases and access to restricted areas (“My Account”): consent of the data subject. 5) Contact with the persons/companies/businesses interested in becoming official distributors of our brand, in order to manage their request: legitimate interest of attention to the interested party.
Conservation	The information collected from the person concerned will be kept for as long as it is necessary to fulfil the purpose for which the personal data were collected, so that, once the purpose has been fulfilled, the data will be cancelled. Said cancellation will give rise to the blocking of the data, which will only be kept at the disposal of the Public Administrations, Judges and Courts, in order to attend to possible liabilities arising from the processing, during the period of limitation of these, after which time the information will be destroyed. The second information layer details the retention periods for the information in relation to different subjects.
Source	1) Enquiries and requests for information from third parties: The data subject himself/herself or his/her legal representative. 2) Relationship with the client: The data subject himself or his legal representative. 3) Periodic sending of the newsletter: The interested party or their legal representative. 4) Creation of a customer account to enable purchases and access to restricted areas (“My account”): The interested party itself or its legal representative. 5) Contact with the persons/companies/businesses interested in becoming official distributors of our brand, in order to manage their application: The interested party or their legal representative.
Addressees	We share your data with service providers who assist or support us (processors), with whom the relevant contract has been concluded in accordance with Article 28 of the GDPR.
International transfers	We do not transfer your data internationally.
Rights	Access, rectification, opposition, erasure, limitation of processing and portability of personal data, as explained in the corresponding section.
Additional information	Additional detailed information on Data Protection can be found in the following breakdown of sections (second layer of information).

General information

The purpose of this Privacy Policy is to disclose the conditions governing the collection and processing of your personal data by our entity to ensure the fundamental rights, your honour and freedoms, all in compliance with current regulations governing the Protection of Personal Data: Regulation 2016/679, of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and the movement of such data, (hereinafter RGPD); and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights (hereinafter LOPDGDD).

In accordance with these regulations, we need your authorisation and consent for the collection and processing of your personal data, so here are all the details of interest to you regarding how we carry out these processes, for what purposes, which other entities may have access to your data and what your rights are.

Responsible. Who is the Data Controller of your data?

The Data Controller is the natural or legal person, of a public or private nature, or administrative body, who alone or jointly with others determines the purposes and means of the processing of personal data.

We inform you that Beatriz del Castillo Delgado (hereinafter Bixcares) is the owner of the website bixcares.com, with DNI 44015497Y. You can contact us by email at hola@bixcares.com or by phone at 647 581 683.

The personal data requested, where applicable, will consist only of those data that are strictly necessary to identify and deal with the request made by the data subject, hereinafter referred to as the data subject. Such information shall be processed fairly, lawfully and transparently in relation to the data subject. Moreover, personal data will be collected for specified, explicit and legitimate purposes and will not be further processed in a way incompatible with those purposes.

The data collected from each data subject shall be adequate, relevant and not excessive in relation to the relevant purposes for each case, and shall be updated whenever necessary.

The data subject shall be informed, prior to the collection of his/her data, of the general points regulated in this policy so that he/she may give his/her express, precise and unequivocal consent to the processing of his/her data, if this is necessary and in accordance with the following aspects.

Purpose. For what purposes do we process your personal data?

The personal information you provide to us through e-mails and/or forms will be kept confidential and protected. In no case will it be destined or used for other purposes, nor will it be given to third parties without your consent, in accordance with the principles of RGPD 679/2016 and L.O. 3/2018. In order to comply with the different legal provisions, we have established different levels of security to protect the personal data you provide us with, having adopted all the technical measures within our reach to prevent the loss, misuse, alteration, unauthorised access and manipulation of said personal data.

The following are the uses and purposes envisaged:

1) Enquiries and requests for information from third parties: Provide a response to the request made.
2) Relationship with the customer: Maintenance of the contractual relationship established between the owner of the data and BIXCARES for the management of the online purchase, customer management, tax, administrative and payment management.
3) Envío periódico de la newsletter.
4) Creation of customer account to enable purchases and access to restricted areas (“My Account”).
5) Contact the persons/companies/businesses interested in becoming official distributors of our brand, in order to manage their request: to respond to the request made.

Legitimation. What is the legitimacy for the processing of your data?

The collection and processing of your data is always legitimised by one or more legal bases, which are detailed below:

1) Enquiries and requests for information from third parties: legitimate interest in serving the data subject.
2) Relationship with the client: contractual relationship.
3) Periodic sending of the newsletter: consent of the interested party to the sending of commercial communications referring to products or services similar to those initially contracted with the client (article 21.2 of Law 34/2002, of 11 July, on Information Society Services.
4) Creation of a customer account to enable purchases and access to restricted areas (“My Account”): consent of the data subject.
5) Contact with the persons/companies/businesses interested in becoming official distributors of our brand, in order to manage their request: legitimate interest of attention to the interested party.

Conservation. How long will we keep your data?

We use your data for the time strictly necessary to fulfil the purposes set out above. The following is an indication of how long we keep your data:

For information purposes, the periods for the conservation of information in relation to different subjects are given below:

DOCUMENT	DEADLINE	REF. LEGAL
Documentation of an employment or social security nature	4 years	Article 21 of Royal Legislative Decree 5/2000, of 4 August, approving the revised text of the Law on Offences and Penalties in the Social Order.
Documentación de carácter laboral o de la seguridad social	6 years	Art. 30 Commercial Code
Accounting and tax documentation for tax purposes	4 years	Articles 66 to 70 General Tax Law
Data for sending information on products and services	As long as the data subject does not request its deletion	Not applicable
Contact details	As long as you do not request its deletion	Not applicable
Details of newsletter subscriber	As long as you do not cancel the subscription	Not applicable
Details of those interested in becoming official distributors	As long as you do not request its deletion	Not applicable

Provenance. How did we obtain your data?

Visiting the “Bixcares” website does not imply that the user is obliged to provide any information about himself/herself.

“Bixcares” expressly prohibits minors under the age of eighteen from providing Personal Data without the prior consent of their parents or guardians.

Below we indicate the origin of the data:
1) Enquiries and requests for information from third parties: The data subject himself/herself or his/her legal representative.
2) Relationship with the client: The data subject himself or his legal representative.
3) Envío periódico de la newsletter: El propio interesado o su representante legal.
4) Creation of a customer account to enable purchases and access to restricted areas (“My account”): The interested party itself or its legal representative.
5) Contact with the persons/companies/businesses interested in becoming official distributors of our brand, in order to manage their application: The interested party or their legal representative.

Safety stockings. What do we do to protect your data?

“Bixcares” adopts the necessary organisational and technical measures to guarantee the security and privacy of your data, avoid its alteration, loss, processing or unauthorised access, depending on the state of the technology, the nature of the data stored and the risks to which they are exposed.

Among others, the following measures stand out:
· Ensure the continued confidentiality, integrity, availability and resilience of processing systems and services.
· Restore availability and access to personal data quickly, in the event of a physical or technical incident.
· Regularly verify, evaluate and assess the effectiveness of the technical and organisational measures implemented to ensure the security of the processing.
· Pseudonymise and encrypt personal data, in case of sensitive data.

Target group. To which recipients will your data be communicated?

This data will be processed by “Bixcares”. We share your data with service providers who assist or support us (processors), with whom the relevant contract has been concluded in accordance with Article 28 of the GDPR. We do not pass on your data to other external parties, except in the case of a legal obligation.

We do not transfer your personal data internationally.

Rights. What are your rights when you provide us with your data?

Current data protection legislation gives you a number of rights in relation to our use of your personal data. Each and every one of your rights are unipersonal and non-transferable, i.e. they can only be exercised by the data subject, subject to verification of his or her identity.

The following are your rights:
· Request access to your personal data
· Request the rectification of your data
· Request the erasure or deletion of your data (right to be “forgotten”).
· Limit or object to our use of your data
· The right to data portability for telecommunications or internet services.
· Right to withdraw consent at any time
· Right to lodge a data protection complaint with the Supervisory Authority: Spanish Data Protection Agency.

How can you exercise your rights?
To exercise your rights of access, rectification, deletion, limitation or opposition, portability and withdrawal of your consent, you may do so as follows:

In person or by e-mail at:
Beatriz del Castillo Delgado
DNI 44015497Y
hola@bixcares.com

In addition to your rights, if you believe that your data is not being collected or processed in accordance with current Data Protection legislation, you may lodge a complaint with the Supervisory Authority, whose contact details are given below:

Spanish Data Protection Agency
C/ Jorge Juan, 6. 28001, Madrid.
Email: info@agpd.es
Phone: 912663517
Web: https://www.agpd.es

Consent and acceptance

Acceptance of this document indicates that you understand and agree to all the terms of our privacy policy and that you consent to the collection and processing of your personal data in accordance with these terms. The user who provides personal data through “Bixcares” e-mail, is voluntarily providing personal data.