PRIVACY POLICY

In accordance with data protection legislation and Article 10 of Law 34/2002 on Information Society Services and Electronic Commerce, the owner of this website and the data controller is:

 

DATA CONTROLLER

 

Benmayor, S.A., with registered address for these purposes at Pol. Ind. Foinvasa, Calle Bach 2-B, 08110 Montcada i Reixac (Barcelona) and CIF A-60512100. Registered in the Mercantile Register of Barcelona, Folio 59, Volume 26,822, Sheet No. B-109.143, Entry 1. Contact phone: 93.572.41.61. Contact e-mail: benmayor@benmayor.com.

 

The Controller always applies the principle of transparency in the processing of personal data, providing individuals with information about the processing of their data in a concise, easily accessible and comprehensive way, in plain, understandable language, while facilitating the exercise of the rights established by current regulations.

 

 

Purpose of processing

 

The data collected are those necessary to handle the request you have submitted to us, as well as to manage and provide the contracted service. Benmayor processes personal data for the following purposes:

·        Management and purchase of products and services offered by Benmayor.

·        Informing about Benmayor’s activities.

·        Management and handling of the request you have made.

·        Keeping you informed about events, offers, products and services that may be of interest to you through different communication channels, provided you have given your consent.

·        Managing the business relationship maintained with our suppliers.

 

 

Lawful basis

 

The legal bases legitimising the processing of personal data of the data subjects, based on the Controller’s competences and functions, are as follows:

 

1.       Purpose: management, purchase of products and provision of Services.

 

·        Consent of the data subject: GDPR, art. 6(1)(a) – the data subject has given consent to the processing of their personal data for one or more specific purposes.

·        Performance of a contract: GDPR, art. 6(1)(b) – processing necessary for the performance of a contract to which the data subject is party or to take steps at the data subject’s request prior to entering into a contract.

·        Compliance with a legal obligation: GDPR, art. 6(1)(c) – processing is necessary for compliance with a legal obligation to which the Controller is subject.

 

2.       Purpose: handling the request submitted.

 

·        Consent of the data subject: GDPR, art. 6(1)(a) – the data subject has given consent to the processing of their personal data for one or more specific purposes.

 

 

3.       Purpose: commercial communications and information.

 

·        Consent of the data subject: GDPR, art. 6(1)(a) – the data subject has given consent to the processing of their personal data for one or more specific purposes.

·        Legitimate interest: GDPR, art. 6(1)(f) – processing is necessary for the purposes of the legitimate interests pursued by the Controller.

 

 

 

Mandatory fields are specified in the different forms available on the web platform; refusing to provide them will make it impossible to handle your request.

 

You warrant that all data provided are accurate, truthful and relevant to the purpose for which we request them. It is important that you inform us of any changes so we can keep your personal data up to date. Otherwise, we cannot be responsible for their accuracy. We consider that, if you do not expressly request the deletion of your personal data from our files, you remain interested in being included in them for as long as the Controller deems appropriate and while it is suitable for the purpose for which they were obtained.

 

Retention

The personal data provided will be retained while the commercial relationship is maintained and, once that relationship ends, will be blocked for the legally established period before being destroyed.

 

Source of the data

The personal data processed by the Controller come directly from the data subjects or their representatives, or from other public administrations in accordance with legal provisions. We collect your personal information through different forms. You will always be informed at the time of collection about the characteristics of the processing of your data. The data collected are adequate, relevant and strictly necessary for the purpose of managing and handling the request you have submitted.

 

Data disclosure

We inform you that your data will not be disclosed to third parties without your express consent, except for disclosures necessary to comply with a legal obligation.

Additionally, if necessary or useful to achieve the purposes described above, we reserve the right to disclose or grant access to personal data to the following recipients, where authorised or required by law: suppliers, public administrations, government bodies, courts and competent authorities.

 

International data transfers

Please note that the data collected through the forms on the website will not be transferred to third countries outside the European Economic Area.

 

 

Children under 14

For children under 14, parental or guardian consent is required for the processing of their data. If the Controller detects users who may be under the indicated age, it reserves the right to request a copy of their national ID or equivalent document, or, where appropriate, authorisation from their parents or guardians.

 

 

Data subjects’ rights

 

Holders of personal data have the right to:

 

·        Obtain confirmation as to whether or not the Controller is processing personal data concerning them.

·        Access their personal data and request the rectification of inaccurate data or, where appropriate, request their erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

·        In certain circumstances, request the restriction of processing, in which case the Controller will only retain them for the exercise or defence of legal claims.

·        In certain circumstances and on grounds relating to their particular situation, object to the processing of their data.

·        In certain circumstances, under the right to data portability, obtain their personal data in a structured, commonly used and machine-readable format and transmit it to another controller.

·        Not be subject to decisions based solely on automated processing, including profiling, which produce legal effects concerning them or similarly significantly affect them.

 

Data subjects may exercise their rights:

·        By writing to the Controller at Calle Bach 2-B, 08110 Montcada i Reixac, reference “Data Protection”.

·        By e-mail to benmayor@benmayor.com, indicating “Data Protection” in the subject line.

If you are not satisfied with the response to your request to exercise your rights, and in any case whenever you deem it appropriate, you may lodge a complaint with the Spanish Data Protection Agency.

 

Changes to this data protection information

We will review and update this data protection information whenever we deem it necessary or when there are changes in legislation or in any of the procedures for processing your personal information. If we have your e-mail address or mobile phone number, we will also send you an e-mail or SMS with information about such changes. Where necessary, we will renew your consent so that you can confirm your agreement with these changes.