Privacy Policy of the Website
bimmai.com
I. Privacy and Data Protection Policy
In compliance with current legislation, Bimmai (hereinafter, also referred to as the “Website”) is committed to adopting the necessary technical and organizational measures, in line with the appropriate level of security relative to the risk of the collected data.
Laws Governing This Privacy Policy
This Privacy Policy is adapted to current Spanish and European regulations regarding the protection of personal data online. Specifically, it complies with the following:
• Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
• Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
• Royal Decree 1720/2007, of December 21, approving the regulation implementing Organic Law 15/1999, of December 13, on the Protection of Personal Data (RDLOPD).
• Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce (LSSI-CE).
Data Controller
The data controller for the personal data collected on Bimmai is: Joan Cargol Rubió, with NIF: 77916491N (hereinafter, “Data Controller”).
Contact details:
• Address: Carrer Ample 6, 17176 Sant Esteve d’en Bas
• Phone: +34 606814025
• Email: info@bimmai.com
Personal Data Records
In compliance with the GDPR and LOPD-GDD, we inform you that personal data collected by Bimmai through forms available on its web pages will be incorporated into our system and processed for the purpose of facilitating, streamlining, and fulfilling commitments established between Bimmai and the User, maintaining relationships through completed forms, or responding to requests or inquiries.
Furthermore, in line with the GDPR and LOPD-GDD, unless exempt under Article 30.5 of the GDPR, a record of processing activities will be maintained specifying, according to their purposes, the activities carried out and other relevant circumstances.
Principles Governing Data Processing
Processing of User data will adhere to the principles set out in Article 5 of the GDPR and Articles 4 and following of the LOPD-GDD:
• Lawfulness, fairness, and transparency: User consent will always be required after being clearly informed of the purpose of data collection.
• Purpose limitation: Data will only be collected for specific, explicit, and legitimate purposes.
• Data minimization: Only strictly necessary data will be collected.
• Accuracy: Data must be accurate and kept up to date.
• Storage limitation: Data will only be kept as long as necessary.
• Integrity and confidentiality: Data will be processed securely and confidentially.
• Accountability: The Data Controller must ensure compliance with all the above principles.
Categories of Personal Data
Bimmai only processes identification data. No special categories of personal data, as defined in Article 9 of the GDPR, are processed.
Legal Basis for Processing
The legal basis for processing is the User’s consent, which can be withdrawn at any time in the same manner it was granted.
Purpose of Processing
Data is collected to facilitate, streamline, and fulfill commitments established between the User and the Website, respond to requests or inquiries, and for commercial, personalization, operational, statistical, marketing, and quality improvement purposes.
Data Retention
Data will be kept for the minimum period necessary to fulfill its processing purposes, and in any case for a maximum of 18 months, unless the User requests deletion.
Data Recipients
Personal data will not be shared with third parties.
Data of Minors
Only individuals over the age of 14 may lawfully consent to their data being processed by Bimmai. For minors under this age, parental or guardian consent will be required.
Security and Confidentiality
Bimmai will implement technical and organizational measures to guarantee data security, although it cannot guarantee absolute invulnerability of the internet. In case of a security breach involving a high risk, Users will be notified without undue delay.
User Rights
Users may exercise the following rights under the GDPR and LOPD-GDD:
• Right of access
• Right to rectification
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to data portability
• Right to object
• Right not to be subject to automated decisions, including profiling
Requests must be addressed to the Data Controller with the reference “GDPR-bimmai.com,” including: full name, a copy of ID (or valid document), reasons for the request, an address for notifications, date, and signature.
Contact details:
• Postal address: Carrer Ample 6, 17176 Sant Esteve d’en Bas
• Email: info@bimmai.com
Third-Party Links
The Website may include links to third-party sites outside Bimmai. These sites have their own privacy policies and are responsible for their own practices.
Complaints
Users have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if they believe their data has been misused.
________________________________________
II. Acceptance and Changes to This Privacy Policy
It is necessary that the User has read and agrees with the terms regarding the processing of personal data contained in this Privacy Policy, and that they consent to such processing so that the Data Controller may act accordingly. Use of the Website implies acceptance of this Privacy Policy.
Bimmai reserves the right to amend its Privacy Policy to reflect legislative, jurisprudential, or regulatory changes by the Spanish Data Protection Agency. Changes will not be explicitly notified to Users, so it is recommended to review this page regularly.
Last updated in accordance with Regulation (EU) 2016/679 and Organic Law 3/2018 of December 5.