PRIVACY POLICY AND COOKIES

Who is responsible for the processing of Personal Data?

Controller 1: “MIX AND MATCH GROUP” LLC (the Company)
Postal address: Ukraine, 04050, Kyiv, 32B Hlybochytska St., office 210
Telephone: +38 0443449201 / +38 0635249211 [every day from 09:00 to 18:00 including weekends]
E-mail for personal data related issues: lopd@bimbaylola.com

Controller 2: Bimba & Lola, S.L.
Postal address: Parque Tecnológico y Logístico de Vigo, Nave D13 (36315 – Vigo – Spain)
Telephone: (+34) 886 440 871
E-mail: lopd@bimbaylola.com

The Company and Bimba & Lola, S.L. are acting as joint-controllers, which rights and obligations regarding processing your personal data, are regulated by the joint-controller agreement.

The Company and Bimba & Lola S.L. collects personal information, such as your name, postal address, email address, telephone number and city, only when you voluntarily provide it to us.

When you visit our website https://www.bimbaylola.com/ua_en/, we may receive certain information automatically.

This information may include:

• Your requests as a website visitor;
• Data from your browser;
• Cookies;
• Your IP address;
• Geographic location;
• Number of visits to the website and page views;
• Length of time spent on the website;
• Queries you used when navigating the website.

Why do we process your personal data?

In accordance with the provisions of the European General Data Protection Regulation (GDPR) 2016/679, Law of Ukraine “On Personal Data Protection”, as well as any applicable national legislation, we inform you that at the Company and Bimba & Lola S.L. we request the data that is strictly required for the following purposes:

1. To process your registration as a customer and manage the buying process.
2. To send commercial communications about BIMBA Y LOLA products (emails, phone calls, SMS, PUSH notifications, post, etc.).
3. The preparation of commercial profiles based on information from internal and external sources, with the aim of sending you personalised advertising and analysing your purchasing behaviour.
4. To provide information on the shipping of BIMBA Y LOLA products.
5. To communicate the status of BIMBA Y LOLA product returns and change of BIMBA Y LOLA products.
6. To send the invoices of the purchase.
7. Abuse and fraud prevention (fraudulent activities, denial-of-service attacks, among others).
8. Disclosure of data to public bodies and authorities (administrative or judicial), providing that this is required under the legal and statutory provisions.
9. Management of our customer service telephone service, whereby conversations may be recorded in order to deal with queries and requests, as well as for quality assurance purposes. Similarly, for the management of customer support and users of our website through our e-mail contactua@bimbaylola.com.

How long will we keep Personal Data?

Your data will be kept for as long as we have a contractual relationship, it is necessary to fulfil the purpose for which it was obtained, or until you ask for it to be erased, as well as for the time necessary to comply with our legal obligations under the applicable laws.

What is the legitimation of the processing of Personal Data?

The legal bases for the processing of your personal data corresponding to each of the purposes (1) to (9) included in Section 2 above (“Purposes”) are as follows:

• Purposes (1), (4), (5), (6): The execution of a contract with the Company in relation to the purchase of BIMBA Y LOLA products.
• Purpose (2): Consent expressly given to Bimba & Lola at the time your personal data are collected.
• Purpose (3): Consent expressly given to Bimba & Lola at the time your personal data are collected in relation to the preparation of profiles based on external sources and the satisfaction of a legitimate interest pursued by Bimba & Lola S.L. in relation to the preparation of profiles based on internal sources.
• Purposes (7) and (8): The legal discharge of responsibilities applicable to the Company and Bimba & Lola S.L.
• Purpose (9): (i) The execution of a contract between the customer and the Company, when the enquiry or request is related to BIMBA Y LOLA products acquired from the Company (order status, returns, etc.) and (ii) The Company’s and Bimba & Lola's S.L. legitimate interest in dealing with and resolving queries or requests that do not relate to purchases made from the Company.

To which recipients will Personal Data be communicated?

Your personal data may be accessed by our suppliers when it is necessary for the correct provision of services and fulfillment of the purposes for which the data was obtained. In this regard, your personal data may be accessed by:

1. transport and logistics companies,
2. financial institutions, fraud detection and prevention companies,
3. customer support providers,
4. technological and analytical service providers,
5. digital advertising and marketing providers that, in certain cases, may act as joint controllers.

In addition, your data may also be disclosed to public bodies and authorities (administrative or judicial) in those cases in which a legal regulation thus establishes it.

What are your rights when you provide us with your personal data and how can you exercise them?

You have the right to know about the sources of collection, location of your personal data, purpose of their processing, location or place of residence (stay) of the personal data owner or manager.

You have the right to receive information about the conditions for granting access to personal data, in particular information about third parties to whom his personal data is transferred.

You have the to receive a response on whether your personal data is being processed, as well as receive the content of such personal data not later than 30 (thirty) calendar days from the date of request receipt, except in cases provided for by law.

You have the right to access your personal data, as well as to request the rectification of inaccurate data or, where applicable, to request their suppression when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, you will be able to request the limitation of the processing of your data, in which case we only will keep them for the exercise or defence of claims.

In certain circumstances and for reasons related to your particular situation, you will be able to oppose the processing of your data. The Company and Bimba & Lola S.L. will cease to process your data, except for imperative legal reasons, or for the exercise or defence of possible claims.

In the same way, you can exercise your right to data portability, as well as to withdraw the consents given at any time, without this affecting the legality of the processing based on the consent given prior to its withdrawal.

If you wish to exercise any of your rights, you can contact us in writing at our email address lopd@bimbaylola.com. The request to exercise any of your rights must be accompanied by a copy of an official document that identifies you (for example, driving license or passport/ID card).

Finally, we inform that you can contact the Authorised Human Rights Representative of the Verkhovna Rada of Ukraine in the field of personal data protection and other competent public authorities regarding any claim deriving from the processing of your personal data.