Privacy and Data Protection Policy
We welcome you to our website and invite you to read our company’s Privacy Policy. At BIHOX SPAIN we consider the privacy of our customers and users to be of paramount importance. For this reason we apply a policy of transparency to all our processes, so that users are always informed and have control over their personal data.
Please read each of these terms carefully, as they will regulate the relationship that you will maintain with us.
BIHOX ESPAÑA hereby informs you that it has adopted all the technical and organisational measures necessary to safeguard the security of the systems and media containing personal data, as required by Data Protection regulations, and undertakes to adopt any other measures that may be established in the future, whether due to technical progress or by law, informing users of this through our web page.
For a correct understanding of the Privacy Policy it is necessary to know the following definition:
Users:
shall be those natural persons who have provided their personal data, directly or through third parties, to BIHOX SPAIN. This includes natural persons who visit the facilities or contact BIHOX SPAIN to find out about its services, request information, send CVs, or interact via the website, e-mail or social networks. It also includes the personnel of companies that use or contract any of the services of BIHOX SPAIN, the personnel of external service providers, and in general any person whose personal data is processed by BIHOX SPAIN.
Users accept the Privacy Policy of BIHOX ESPAÑA, as reflected in this document.
Principles
When we use your personal data, your rights are guaranteed. Below, you can see what our principles are regarding your privacy:
- Principle of legality, fairness and transparency: The data requested from interested parties shall be appropriate, specific and necessary for the purpose for which they are collected, and shall not be used for any purpose other than that for which they were collected, without the prior and express authorisation of the user.
- Data minimisation principle: Only the data strictly necessary in relation to the purposes for which they are requested will be requested, which will always be the minimum necessary.
- Principle of limitation of the retention period: The data will only be kept for as long as necessary for the purposes of the processing, depending on the purpose.
- Principle of integrity and confidentiality: The data provided to us by users will be treated in a way that guarantees the security and integrity of the data, as well as its confidentiality. All necessary measures are taken to prevent unauthorised access or misuse of the data by unauthorised third parties.
This Privacy Policy may vary depending on legislative requirements, and shall be applicable to any of the services provided by BIHOX SPAIN.
Implementing legislation
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).
- Organic Law 3/2018, of 5 December, on Personal Data Protection and guarantee of digital rights aims to adapt the Spanish legal system to Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of their personal data and on the free movement of such data, and to complete its provisions; and to guarantee the digital rights of citizens in accordance with the mandate established in Article 18.4 of the Constitution.
- Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE), which regulates economic transactions by electronic means.
Data controller
- Responsible: WATERHOX S.L. (hereinafter BIHOX ESPAÑA)
- TAX ID: B52539970
- Address: C/José María Martínez nº1 Bajo 1 – 33209-Gijón (Asturias). Spain
- Telephone: 985332122
- Mail: protecciondatos@bihox.es
Origin of the data processed
The personal data we process may come from the following sources:
- The interested party itself, obtained through:
– The management or sale of products or services.
– Contact forms.
– Reception of curricula vitae.
– Promotions and competitions.
– Interaction with social networks, blogs or the BIHOX SPAIN website.
- Other natural and/or legal persons.
- Distributors of BIHOX SPAIN.
In particular, the following categories of personal data may be processed:
- Identification data: Name and surname(s); DNI.
- Contact details: Address; telephone; e-mail.
- Personal characteristics: marital status data; age; sex; date of birth; nationality; place of birth.
- Transaction data: goods and services supplied by the data subject; goods and services received by the data subject.
Purpose of data processing
We process data for one or more of the following purposes, depending on the reason for which the user has provided their data:
- Opening, maintenance and registration of the contact list for the internal management of the product warranty.
- Communication of customer data to the product manufacturer for the warranty service.
- Management of the products/services contracted by the customer, invoicing and collection.
- Attention to the customer or interested party to respond to their requests, requests or queries, directly, or through our distributors located throughout the national territory.
- Management of the user’s participation in promotions, discounts and offers.
- Necessary actions for the selection and recruitment of personnel; Evaluation and management of CVs received.
- Processing of video surveillance images.
- Subscription to online newsletters, physical publications, web pages and commercial and promotional communications related to the services offered by BIHOX ESPAÑA.
- Carrying out competitions and prize draws with gifts for users.
- Compliance with the obligations and duties imposed on BIHOX ESPAÑA by the laws in force at any given time.
BIHOX SPAIN reserves the right to decide whether or not to incorporate the personal data of data subjects into its internal systems.
The data requested from users will be appropriate, specific and necessary for the purpose for which they are collected, and will not be used for a different purpose without their prior and express authorisation.
Accuracy and veracity of data
The data provided by users must be true, accurate, complete and up to date. Users shall be solely responsible for any direct or indirect damage or harm caused to BIHOX SPAIN or to any third party in the event of providing false, inaccurate, incomplete or out-of-date data, or data of third parties without having previously obtained the consent of the said third parties, prior to their communication to BIHOX SPAIN.
Data retention period
Users’ personal data shall be kept for the minimum time necessary, and may be kept for up to:
- 4 years: Law on Infractions and Penalties in the Social Order (obligations regarding affiliation, registrations, cancellations, contributions, payment of wages, etc.); Art. 66 et seq.
- 5 years: Art. 1964 Civil Code (personal actions with no special time limit).
- 6 years: Art. 30 Commercial Code (accountancy books, invoices, etc.)
- 10 years: Art. 25 Prevention of Money Laundering and Terrorist Financing Act.
- 30 days: Recordings from video-surveillance cameras on the premises.
No time limit: disaggregated and/or anonymised data.
The data processed for the purpose of sending advertising and promotions from BIHOX SPAIN to non-customer users shall be kept until the consent granted by the interested party is revoked.
The data from the curriculum vitae, for selection processes, will be kept for two years, and will subsequently be destroyed.
Legitimising bases
The legitimate bases for the processing are:
Execution of a contract.
For the provision of the services contracted by users.
Consent of the interested party:The sending of information on the different services offered by BIHOX ESPAÑA.
Sending of customer data to the manufacturer of the product for its guarantee.The receipt or delivery of curriculum vitae of candidates to participate in selection processes.
The sending of commercial communications to non-customer users, which may be revoked at any time.
Processing of the data provided when subscribing to the Newsletter.
Fulfilment of a legal obligation.
Communication of your data when so requested by the Tax Agency, covered by Law 58/2003, of 17 December, General Taxation.
The management of the collection of receipts corresponding to the payment of the services provided is covered by Law 16/2009 on Payment Services.
Any other legal obligation deriving from the services rendered by BIHOXBIHOX ESPAÑA, which establishes the need to communicate the personal data of users to the Administration, judges or courts.
- Legitimate interest of the person responsible.
- Sending the user’s identification and contact details to the nearest distributor when requesting commercial information about our products or services.
- Capture of images for video surveillance for security reasons of the facilities.
- The prospective offer of products and services to existing customers is based on the satisfaction of a legitimate business interest, consisting of being able to offer our customers the possibility of contracting other products or services similar to those already purchased, and thus gaining their loyalty.
Transfers of data
In the event that users contact the BIHOX ESPAÑA customer service department, the user authorises the communication of their identification and contact details to the distributor located in the geographical area closest to the location of the interested party, in order to attend to their commercial or information needs.
No data will be transferred to other third parties without the prior consent of the users, except in the cases provided for by law, or when the provision of the service implies the need for a contractual relationship with a Data Processor.
Under the first premise, the data must be transferred to the following recipients, in compliance with legal obligations:
- Tax Authorities, including the State Tax Administration Agency and the corresponding Autonomous Communities.
- Others, such as notaries, solicitors and lawyers, for the satisfaction of legal needs that may arise for the legal defence of the interests of BIHOX ESPAÑA.
- To the corresponding banking institutions, in order to keep up to date with payments.
In the event that it is requested, the data shall be transferred to the Labour Inspectorate.
BIHOX ESPAÑA may process personal data directly, or through third parties acting on its behalf, as data processors. The data processors shall have access to the personal information of users necessary to carry out their functions, but may not use it for other purposes. Furthermore, they must process personal information in accordance with this Privacy Policy and applicable data protection legislation.
The User accepts that his or her personal data may be provided in whole or in part to the Data Processors, when necessary, for the effective performance of a contracted service. The User also accepts that, in the case of the provision of services, these may be totally or partially subcontracted to other persons or companies, who will be considered Data Processors, with whom the corresponding data processing contract has been signed. The User may refuse the transfer of his/her data to the Data Processors, by means of a written request, but the User is warned that such refusal may prevent the provision of the service under the agreed conditions.
International transfers of data to countries outside the EU are not foreseen.
User rights
Customers and interested parties have the right to:
- Access to your personal data collected in BIHOX ESPAÑA’s systems.
- Request their rectification, in the event that they are inaccurate or incomplete.
- Oppose their processing, under the terms established by the RGPD and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights.
- The right to be forgotten, which implies the right of the user to obtain, without undue delay, the deletion by BIHOX ESPAÑA of the personal data he/she has communicated.
- Request data portability, which means the user’s right to obtain a copy of his or her personal data in a structured and commonly used electronic format, and to transfer his or her data from one electronic processing system to another.
- The right to limitation of processing, consisting of the right of users to request and obtain, on the part of BIHOX ESPAÑA, a limitation of the processing of their personal data when any of the following conditions are met:
– The user contests the accuracy of the personal data, for a period of time that allows the data controller to verify the accuracy of the data.
– The processing is unlawful and the user objects to the deletion of the personal data, requesting instead the restriction of their use.
– The controller no longer needs the personal data for the purposes of the processing, but the user needs them for the purpose of making, exercising or defending claims.
– The user has objected to the processing, while it is being verified whether the legitimate reasons of the controller outweigh those of the data subject.
The exercise of the aforementioned rights may be carried out by letter or e-mail to our Data Protection Officer:
WATERHOX S.L.
- C/José María Martínez nº1 Bajo 1
- 33209-Gijon (Asturias). España
- protecciondatos@bihox.es
Accompanying a photocopy of your ID card, or a document accrediting the entity you represent, and indicating an address for the purpose of notifications.
Users shall also have the right to effective judicial protection and to lodge a complaint with the supervisory authority, at www.agpd.es, if they consider that the processing of personal data concerning them infringes current regulations.
In order to keep personal data up to date, it is important that the user informs BIHOX SPAIN of any modification to the same; otherwise, BIHOX SPAIN shall not be held responsible for the veracity of said data.
Personnel selection
Interested users may send their curriculum vitae via the web, e-mail or letter in order to participate in the different selection processes carried out at BIHOX SPAIN.
The data included in the curriculum vitae shall be used for the sole purpose of assessing the qualifications of the interested party, as well as for the subsequent conduct of a personal interview. By sending your curriculum vitae, you expressly authorise BIHOX SPAIN to process said data for its personnel selection processes. The personal data requested are strictly necessary and pertinent for the development of the selection process, are confidential and used exclusively for the indicated purpose.
Your CV will be kept, for the purposes foreseen, for a maximum period of two years, after which time it will be destroyed, guaranteeing total respect for the confidentiality of the data, both in the processing and in its elimination. In this regard, once the aforementioned period has elapsed, and if the interested party wishes to continue participating in the selection processes carried out by BIHOX SPAIN, he/she must resubmit his/her curriculum vitae with the relevant updates.
Social networks
BIHOX SPAIN is present in the following social networks: Twitter, Facebook, Instagram, LinkedIn and YouTube.
The processing of the data of users who become followers on social networks shall be governed by this section, as well as by those conditions of use, privacy policies and access regulations that belong to the social network in each case, and which have been previously accepted by the user.
BIHOX ESPAÑA shall process your data for the purpose of correctly managing your presence on our social network, informing you of activities, new products, services or any other information we consider relevant. In the event that a user leaves a comment or interacts in the social networks in which BIHOX SPAIN is present, they should be aware that their data may be published in the environment in which they act, that is to say, they will be expressly authorising the communication of their data, associated with the action they carry out, to the rest of the users who access the web site or social network.
The user may only publish personal data, photographs, information or other content on the social networks of BIHOX ESPAÑA whose ownership and property belongs to him/her or in respect of which he/she holds the authorisation of third parties.
BIHOX ESPAÑA hereby warns the user that this entity is not responsible for and cannot guarantee the confidentiality and security of the processing of the data that may be carried out by Twitter, Facebook, Pinterest and YouTube, as well as by third parties who may access such data as a result of the provision of their services, the exercise of their activity or third parties who establish hyperlinks to said social networks.
WhatsApp Business
In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, you are hereby informed of the possibility of making communications through instant messaging systems (WhatsApp Business) in order to speed up the response to your commercial and/or information requests. By sending us any communication through our WhatsApp Business service, you expressly consent and authorise us to respond to you through the same medium. The use of WhatsApp Business by us will only have the sole purpose of responding to your request, and will not be used for any other purpose, such as sending advertising to your mobile phone, unless expressly requested by you. The data provided by you through WhatsApp Business may be communicated to our distributors, in order to respond to your commercial or information requests. You have the right to access, rectify and delete the data, as well as other rights, indicated in the ‘Users’ rights’ section of this Privacy Policy. The interested party may object, without affecting the lawfulness of the processing, to the use of WhatsApp Business at any time by sending an email to protecciondatos@bihox.es.
You must also be aware of and accept the WhatsApp Business privacy policy in order to use this service.
WhatsApp Business is an application that has been designed to facilitate communications with our customers, providing tools that allow you to automate, sort and respond to your messages quickly.
Sending commercial communications
In certain cases, article 21.2 of the Law on Information Society Services and Electronic Commerce (Law 34/2002, of 11 July) is applicable, which authorises the sending of commercial communications by electronic mail provided that there is a prior contractual relationship and BIHOX ESPAÑA has lawfully obtained the recipient’s contact details, which shall only be used to send commercial communications referring to products or services offered by our company that are similar to those initially contracted with the customer.
However, in the event that the user does not wish to receive such commercial communications by e-mail, he/she may inform BIHOX ESPAÑA of this by writing to the following e-mail address: protecciondatos@bihox.es.
Minors
This website is not intended for use by minors. Only persons over the age of 18 may use the services on this website. Minors may not use the services available through the website. Parents, guardians or legal representatives shall be solely responsible for all acts carried out through the website by minors in their care, including the completion of forms with personal data of minors.
Cookies
The website will only use data storage and retrieval devices (cookies) when the user has given their prior consent. To this end, you can consult the Cookies Policy, which all users should be aware of before accessing the website.
Modifications to the Privacy Policy
BIHOX SPAIN reserves the right to modify this Privacy Policy in the future in accordance with its own criteria or due to changes in legislation, jurisprudence or business practice, respecting at all times the regulations in force regarding Personal Data Protection.
Should BIHOX ESPAÑA introduce any modification to its Privacy Policy, it shall be published on this page, where the user may be informed of the new policy, in respect of which his/her consent shall be sought if necessary, and without prejudice to his/her possibility of making use of his/her right to suppression or right to be forgotten.
In any case, the relationship with the user shall be governed by the rules laid down at the precise moment when the relationship between the company and the user is established, and it is therefore essential for the user to read them.
This Privacy Policy shall also be applicable to the following websites owned by BIHOX SPAIN: https://bihox.es/blog/