PRIVACY POLICY AND COOKIES

Who is responsible for the processing of Personal Data?

Identity: Bimba & Lola, S.L. (hereinafter “Bimba & Lola”)
Postal address: Parque Tecnológico y Logístico de Vigo, Nave D13 (36315 – Vigo – Spain)
Telephone: (+34) 886 440 871
email: lopd@bimbaylola.com

Why do we process your personal data?
In accordance with the provisions of the European General Data Protection Regulation (GDPR) 2016/679, as well as any applicable national legislation, we inform you that at Bimba & Lola we request the data that is strictly required for the following purposes:

(1) To process your registration as a customer and manage the buying process.
(2) To send commercial communications about Bimba & Lola's products (emails, phone calls, SMS, PUSH notifications, post, etc.).
(3) The preparation of commercial profiles based on information from internal and external sources, with the aim of sending you personalised advertising and analysing your purchasing behaviour.
(4) Abuse and fraud prevention (fraudulent activities, denial-of-service attacks, among others).
(5) Disclosure of data to public bodies and authorities (administrative or judicial), providing that this is required under the legal and statutory provisions.
(6) Management of our customer service telephone service, whereby conversations may be recorded in order to deal with queries and requests, as well as for quality assurance purposes.

How long will we keep Personal Data?
Your data will be kept for as long as we have a contractual relationship, it is necessary to fulfil the purpose for which it was obtained, or until you ask for it to be erased, as well as for the time necessary to comply with our legal obligations.

What is the legitimation of the processing of Personal Data?
The legal bases for the processing of your personal data corresponding to each of the purposes (1) to (5) included in Section 2 above (“Purposes”) are as follows:

Purpose (1): The execution of a contract with Bimba & Lola in relation to the purchase of products.
Purpose (2): Consent expressly given to Bimba & Lola at the time your personal data are collected.
Purpose (3): Consent expressly given to Bimba & Lola at the time your personal data are collected in relation to the preparation of profiles based on external sources and the satisfaction of a legitimate interest pursued by Bimba & Lola in relation to the preparation of profiles based on internal sources.
Purposes (4) and (5): The legal discharge of responsibilities applicable to Bimba & Lola.
Purpose (6): (i) The execution of a contract between the customer and Bimba & Lola, when the enquiry or request is related to products acquired from Bimba & Lola (order status, returns, etc.) and (ii) Bimba & Lola's legitimate interest in dealing with and resolving queries or requests that do not relate to purchases made from Bimba & Lola.

To which recipients will Personal Data be communicated?
Your personal data may be accessed by our suppliers when it is necessary for the correct provision of services and fulfillment of the purposes for which the data was obtained. In this regard, your personal data may be accessed by:
(i) transport and logistics companies,
(ii) financial institutions, fraud detection and prevention companies,
(iii) customer support providers,
(iv) technological and analytical service providers,
(v) digital advertising and marketing providers that, in certain cases, may act as joint controllers.

In addition, your data may also be disclosed to public bodies and authorities (administrative or judicial) in those cases in which a legal regulation thus establishes it.

What are your rights when you provide us with your personal data and how can you exercise them?
You have the right to access your personal data, as well as to request the rectification of inaccurate data or, where applicable, to request their suppression when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, you will be able to request the limitation of the processing of your data, in which case we only will keep them for the exercise or defence of claims.

In certain circumstances and for reasons related to your particular situation, you will be able to oppose the processing of your data. Bimba & Lola will cease to process your data, except for imperative legal reasons, or for the exercise or defence of possible claims.

In the same way, you can exercise your right to data portability, as well as to withdraw the consents given at any time, without this affecting the legality of the processing based on the consent given prior to its withdrawal.

If you wish to exercise any of your rights, you can contact us in writing at our email address lopd@bimbaylola.com or our postal address Bimba & Lola, Parque Tecnológico y Logístico de Vigo, nave D13 (36315 – Vigo – Spain). The request to exercise any of your rights must be accompanied by a copy of an official document that identifies you (National Identification Document, driving license or passport).

Finally, we inform that you can contact the Spanish Data Protection Authority and other competent public authorities regarding any claim deriving from the processing of your personal data.