Privacy Policy Compliance

Introduction

In compliance with Data Protection Regulation, and in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”), and Organic Law 3/2018 of 5 December, on Personal Data Protection and the Guarantee of Digital Rights (“LOPDGDD”), THE BENTO BOX, S.L. (hereinafter, “theBentoBox”) provides you with the relevant information regarding the processing of your personal data.

Who is the Data Controller?

• Identity: THE BENTO BOX, S.L.
• CIF: B-66215591.
• Address: c/: Rambla del Poblenou, 99, 1º 3ª, Barcelona (08005).
• E-mail: contact@thebentobox.biz

When do we collect your personal data?

Your personal data may be collected at:

• On our website we have a form available for you to contact us to request information about our services or make inquiries. When completing the form, we ask you to identify yourself and provide us with your contact information.

What are the main purposes for processing your data?

Your personal data shall be processed for the following purposes:

• Your data shall be processed to assist, manage and attend to possible requests, comments and/or consultations made by you.
• If you are our customer, your data will be processed to offer you our services in compliance with the General and/or Particular Conditions of the contracted service. For more information regarding the processing of your personal data during the use of our services, please refer to the data protection clause/s of the General and/or Particular Conditions of the contracted services.
• If you have given your consent, we will keep you informed by sending you our newsletter, whose content is mainly about our services, activities, projects and other relevant information.
• The information shall be processed in order to comply with our legal obligations, possible court and other authorities’ decisions. Whenever we have suspicions or indications of an action that may constitute an illicit/criminal offence, we will communicate your personal data to law enforcement agencies.
• Your information will be processed for statistical analysis and reports in order to know the performance and needs of our services, in order to improve the development and offer new solutions.

What is the legal basis for processing your data?

The processing activities are made with the following legal basis:

• When your personal data is processed to assist, manage and attend to possible requests, comments and/or consultations, the processing is carried out on the basis of your consent when you send us your query and/or request (Article 6.1.a) GDPR).
• When your data is processed to provide you our services, the processing is carried out on the basis of the performance of the General and/or Particular Conditions which rule our relationship and that you’ve accepted (Article 6.1.b) GDPR).
• When your information is processed to send you our newsletter, the processing is carried out on the basis of your consent given through the corresponding box and/or form provided for this purpose (article 6.1.a) GDPR). We remind you that the sending of our newsletter can be revoked at any time in each of the communications received through the mechanism provided for this purpose.
• When the information is processed in order to comply with our legal obligations, possible court and other authorities’ decisions, including any disclosure, the processing is done on the basis of compliance with our legal obligations (Article 6.1.c) GDPR).
• When the information is processed to perform statistical analyses and reports for the purpose of knowing the performance and needs of our services, in order to improve the development and offer new solutions, the processing is carried out based on our legitimate interest (article 6.1.f) GDPR), which is to manage and improve our services and products to offer a quality service and grow as a business.

How long do we store your personal data?

Your personal data shall be processed for the period necessary to comply with the purposes set out in this Privacy Policy, as well as to keep your personal information in compliance with the provision of the applicable law and regulations, especially in relation to the legal statute of limitations, and for the exercise or defence of claims.

Our criteria for doing so are determined by the purpose of the data collected and the fulfilment of that purpose (e.g., in the event of consent, you may withdraw it at any time); and the retention periods required by contractual and regulatory requirements.

Please note that, in some cases, we may retain your data for the time necessary to exercise or defend claims, requirements, liabilities and legal and/or contractual obligations arising from the processing, always being dully blocked.

Who could be the recipients your personal data?

Depending on the purposes for which the personal information is collected, such information may be accessed by the following persons:

• Public administrations, Organisms and/or competent Authorities and, law enforcement authorities, in cases where there is a requirement, a legal obligation exists or we consider that there are indications and/or sufficient suspicions to be before an illicit or criminal offence.
• Partners and third-party service providers that process information as data processors. We’ve entered into the relevant data processing agreement as required by personal data protection regulations. The relevant data processing agreement has been concluded with all our providers in compliance with data protection regulation.
• Employees and/or collaborators authorised by theBentoBox, always subject to the applicable data protection regulations.

We inform you that theBentoBox does not transfer your personal data to a country outside the European Economic Area (EEA.) However, if this were to be done, we would ensure that adequate protection of personal data is provided by using the safeguards allowed by the regulation, in particular the use of the standard contractual clauses approved by the European Commission.

What are your rights when you provide your personal data?

If we process your personal data, you’ve the following rights:

• Right to request access to personal data: you may ask us if we’re processing your data, and if it is, you may have access to the same.
• Right to request the rectification of your data in case they are inaccurate or to request data to be completed if they are incomplete.
• Right to request the erasure of your data.
• Right to request the restriction of processing: in this case, we will only keep data for exercising or defending against claims.
• Right to object to processing: we will cease to process personal data, unless they must continue to be processed for legitimate reasons or for exercising or defending against possible claims.
• Right to the portability of data: in the event that a user would like for their data to be processed by another data controller, we will facilitate the transfer of their data to the new controller, if technically possible.
• Right to not be the object of automated decision-making regarding your personal data.

If you had given your consent for any specific purpose, you may withdraw that consent whenever you wish, without affecting the lawfulness of the processing based on the consent prior to withdrawal.

To exercise your rights, please send us an e-mail to contact@thebentobox.biz or write us to our postal address in Section 1 of this policy.

Whenever you consider it appropriate, you can lodge a complaint with a supervisory authority, in this case, the Spanish Data Protection Agency.

How did we obtain your personal data?

Your personal data may have been obtained through the following ways:

• The personal data that we process are those that you have provided directly to us by completing the enabled contact form and/or directly contracted our services and completed the corresponding registration form.
• Your personal data have been obtained by communication from the company, organisation or entity of which you are part of or have a relationship with and which has contracted our services. In these cases, remember that the services are conditioned by the relationship that you have with that company, organisation or entity, being able to request your cancellation of the service.

Additional information

Minors: Our services are aimed exclusively at adults. Therefore, we do not knowingly collect information from minors. If parents or legal guardians believe that they children have submitted us personal data, please contact us by sending us an e-mail to contact@thebentobox.biz.

Special categories of personal data: theBentoBox does not collect or process data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic or biometric data, data concerning a natural person’s health, sex life or sexual orientation.

Personal data of third parties: If the personal data provided belong to a third party, you guarantee that you have informed said third party of the aspects contained in this Privacy Policy, and have obtained their consent to provide us with their data for the purposes indicated in said Policy.

Links: On the theBentoBox website there may be links to other websites that we consider potentially useful and informative to you. However, please note that we do not endorse or recommend the content or services of such websites, nor are we responsible for the privacy policies of such websites. We recommend that you consider and read the privacy policies of all sites you visit. Remember that what is stated in this Privacy Policy only applies to the data that theBentoBox collects and/or processes.

Updates: We will only use your personal data as set out in this document, which is in force at the time, we collect your information. If any revision or update is done that affects the processing of your personal data, we will inform you.

Contact us: If at any time you believe that we have not complied with the provisions set forth in this Privacy Policy, please let us know by sending an email to contact@thebentobox.biz.If you want to inform about a problem regarding the privacy of your data or have any questions regarding this Privacy Policy, do not hesitate and contact us by the email address above. We will be happy to help you.

Last updated: 1/11/2023