In compliance with Regulation (EU) 2016/679 of the European Parliament and Council, dated April 27, 2016, regarding the protection of individuals with respect to the processing of personal data, which repeals Directive 95/46/EC (hereinafter, GDPR); Law 34/2002 of July 11, on information society services and electronic commerce (hereinafter, LSSI-CE); and Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights, BIOBOXWATER SL guarantees the protection and confidentiality of any type of personal data provided by our customers, in accordance with the provisions of the General Data Protection Regulation.

BIOBOXWATER SL’s Data Protection Policy is based on the principle of proactive responsibility, according to which the Data Controller is responsible for ensuring compliance with the regulatory and legal framework and is capable of demonstrating compliance to relevant supervisory authorities.

The data provided will be processed according to the terms established in the GDPR. In this sense, BIOBOXWATER SL has adopted the levels of protection legally required and has implemented all technical measures within its reach to prevent loss, misuse, alteration, or unauthorized access by third parties. However, users should be aware that Internet security measures are not foolproof.

1. DATA CONTROLLER: WHO ARE WE?

Name: BIOBOXWATER SL
CIF: B44601243
Address: C/ Madre Rafols, Nº2, 7ª Of, 5B, 50004, Zaragoza, Zaragoza
Phone: 976483532
Email: comercial@biobox-water.com

2. PURPOSE OF PROCESSING: WHAT WILL WE USE YOUR DATA FOR?

All data provided by our customers and/or visitors on the BIOBOXWATER SL website or to its personnel will be included in files, automated or otherwise, created and maintained under the responsibility of BIOBOXWATER SL, which are essential to provide the services requested by users or to respond to questions or inquiries raised by our visitors.

3. LEGITIMACY OF PROCESSING: WHY DO WE NEED YOUR DATA?

• Contractual relationship: This applies when you contract any of our services.
• Legitimate interest: To respond to inquiries and complaints you submit to us and to manage the collection of amounts owed.
• Your consent: If you are a user of our website, by checking the box in the contact form, you authorize us to send you the necessary communications to respond to your inquiry or request for information.

4. RECIPIENTS: WITH WHOM DO WE SHARE YOUR DATA?

We do not share your personal data with third parties, except with our business partners mentioned on the website and those public or private entities to which we are obligated to provide your personal data to comply with legal requirements. For example, tax law requires that we provide the Tax Agency with certain information on economic transactions exceeding a specified amount.

In cases beyond the ones mentioned, if we need to disclose your personal information to other entities, we will seek your prior permission through clear options that will allow you to decide in this regard.

5. COMMUNICATION: WHERE COULD WE SEND YOUR DATA?

We will not make international transfers of your personal data for any of the indicated purposes.

6. RETENTION: HOW LONG WILL WE KEEP YOUR DATA?

We will retain your personal data only as long as necessary to achieve the purposes for which it was collected. In determining the appropriate retention period, we consider the risks associated with processing, as well as our contractual, legal, and regulatory obligations, internal data retention policies, and our legitimate business interests as described in this Privacy Notice and Cookie Policy.

In this sense, BIOBOXWATER SL will keep the personal data once its relationship with you has ended, duly blocked, during the limitation period of the actions that may arise from the relationship maintained with the data subject.

Once blocked, your data will be inaccessible to BIOBOXWATER SL and will only be processed for making them available to public administrations, judges, and courts to address any liabilities arising from processing, as well as for the exercise and defense of claims before the Spanish Data Protection Agency.

7. SECURITY: HOW WILL WE PROTECT YOUR DATA?

We make every reasonable effort to maintain the confidentiality of personal information processed in our systems. We maintain strict security levels to protect personal data from accidental loss and from unauthorized access, processing, or disclosure, taking into account the state of technology, nature, and risks to which the data are exposed. However, we cannot be held responsible for the use of your data (including username and password) on our website. Our staff follows strict privacy standards, and if we engage third parties to provide support services, we require them to comply with the same standards and allow us to audit them for compliance.

8. YOUR RIGHTS: WHAT RIGHTS CAN YOU EXERCISE AS A DATA SUBJECT?

You may exercise the following rights:

• Right of access to your personal data to know which are being processed and the processing operations carried out with them.
• Right to rectification of any inaccurate personal data.
• Right to erasure of your personal data, where this is possible (e.g., by law).
• Right to restriction of processing of your personal data where the accuracy, legality, or necessity of the data processing is in doubt; in such cases, we may retain them for the exercise or defense of claims.
• Right to object to the processing of your personal data when the legal basis for processing is our legitimate interest. BIOBOXWATER SL will cease processing your data unless it has a legitimate interest or it is necessary for defending claims.
• Right to data portability when the legal basis that enables us to process your data is the existence of a contractual relationship or your consent.
• Right to withdraw consent given to BIOBOXWATER SL.

To exercise your rights, you can do so free of charge and at any time by contacting us at the address C/ Madre Rafols, Nº2, 7ª Of, 5B, 50004, Zaragoza, Zaragoza, or by emailing comercial@biobox-water.com, always attaching a copy of your ID.

9. RIGHTS PROTECTION: WHERE CAN YOU FILE A CLAIM?

If you believe your rights have been disregarded by our organization, you can file a complaint with the Spanish Data Protection Agency through the following means:

• Electronic site: https://www.aepd.es
• Postal address: Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001, Madrid.
• Phone: 901.100.099 and 912.663.517.

Filing a complaint with the Spanish Data Protection Agency is free of charge and does not require the assistance of a lawyer or solicitor.

10. UPDATES: WHAT CHANGES MAY BE MADE TO THIS PRIVACY POLICY?

BIOBOXWATER SL reserves the right to modify this policy to adapt it to legislative or jurisprudential developments that may affect its compliance.