Privacy Policy

BASIC INFORMATION ON DATA PROTECTION

Responsible

J.J. BCN INTERNACIONAL, S.A.

Purpose

We use your data to deal with requests of various kinds from the User.

Legitimation

The legitimacy for the processing of your data lies in the provision of your consent to J.J. BCN INTERNACIONAL, S.A.

Addressees

Your data will be processed by other Group companies and third party partners working with us.

Rights

You have the right to access, rectify, delete, oppose, limit and request portability of your personal data.

Additional information

Further detailed information about how we handle your personal data and the rights you have can be found in the full text of the Privacy Policy below.
below, as well as the Cookie Policy.

ADDITIONAL INFORMATION ON DATA PROTECTION

J.J. BCN INTERNACIONAL, S.A. (hereinafter, "the Company") undertakes, in its capacity as Controller of the processing of your personal data, to adopt the necessary technical and organisational measures to ensure that the processing of your data complies with the provisions of Regulation (EU) 2016/679 (hereinafter, "GDPR") and Organic Law 3/2018.

The Company treats your personal data in a lawful and fair manner, ensuring that they are adequately protected and that they are not misused. Furthermore, the Company is committed to being transparent in the management of the personal data of its customers and users, making available to them all the necessary information about the collection and processing of their data.

The purpose of the Privacy Policy is to inform you about who will process your personal data, why we collect this data, how long we will keep the collected data, to whom we will pass it on and what your rights are in this area.

By providing us with your personal information and using our Website, we understand that you have read and understood the information on personal data protection set out in this Privacy Policy and in the Cookie Policy.

WHO IS THE DATA CONTROLLER?

The Controller of the processing of your personal data is:

Company name: J.J. BCN INTERNACIONAL, S.A.
TAX IDENTIFICATION NUMBER: A-61617767
Telephone: 93 871 33 04
Postal address: Pol. Ind. Sud. C/ de l'Orfeó Català, 7. 08440, Cardedeu (Barcelona).
E-mail: info@jjbcn.com

FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?

Depending on the products requested by customers and users, the Company will need to deal with some data or others, which in general will be the following:

Identification and contact details: name, surname, e-mail, among others;

Automatically collected data: when you interact with our Website, certain navigation data is automatically collected. This information is collected by means of cookies, the regulation of which is detailed in the Cookie Policy of the Company;

The information we may collect automatically relates to your use of our Website and the devices you use to access and interact with it. Some of the information we collect includes: the IP address of the device you are using, the browser software you are using, your operating system, the date and time you access the Website, the Internet address of the website through which you accessed our Website, geolocation data, information about the pages visited by you within the Website and the time spent on each page;

The personal data collected are processed for the following purposes:

Quality analysis: to conduct surveys on customer and user satisfaction with the quality of the products offered by the Company;

Customer and user service: channelling and attending to their requests, queries and complaints for their management and resolution;

To improve the user experience on the Website: to carry out analytical and statistical studies on how users browse the Company's Website.

WHAT IS THE LEGITIMACY FOR THE PROCESSING OF YOUR DATA?

The legal basis for us to process your personal data depends on the purpose for which we process it, as set out below:

Quality analysis. The legitimacy of the processing of your data lies in the legitimate interest of the Company to analyse the degree of satisfaction of customers and users, in order to be able to offer them products of the best quality;

Attention to users and customers. The legitimacy of the processing of your data lies in the legitimate interest of the Company to deal with your requests and complaints in order to be able to attend to you properly and resolve your requests. In case of queries related to the exercise of your legally recognised data protection rights, the Company requires the processing of your data in order to comply with the legal obligations that bind it in this area;

To improve the user's experience on the Website. The legitimacy of the processing of your data lies in the legitimate interest of the Company to know the degree of user satisfaction and take appropriate corrective measures to improve the quality of our services.

HOW LONG WILL WE KEEP YOUR DATA?

Your personal data will be duly stored for the time necessary to be used for the purpose for which they were collected.

Personal data will be stored, using appropriate security measures to ensure their accuracy and integrity, for as long as their processing is necessary for the purpose for which they were collected or as long as you do not exercise your right to erasure or restriction of processing.

In such cases, we will keep your personal information blocked, without processing it, for the periods provided for by law in order to meet possible liabilities and to be able to prove compliance with our legal and contractual obligations. Subsequently, the Company will definitively delete your personal data.

WITH WHOM CAN WE SHARE YOUR DATA?

Your personal data will be processed by members of the Company acting on behalf of the organisation and in relation to whom appropriate contracts have been concluded, containing specific obligations of confidentiality and diligent handling of personal data in accordance with the legislation in this area.

In certain cases, in order to fulfil the purposes set out in this Privacy Policy, the Company needs to share your personal data with other companies within the Group and with the following third parties:

financial institutions;
technology and analytics service providers;
customer service related service providers;
authorities and public bodies in order to: comply with a court order, subpoena or investigation, or as otherwise required by law; deal with potential liabilities arising from the processing of personal data; prevent unlawful uses of our Website or violations of our Website policies; deal with third party claims; assist in the prevention and investigation of suspected fraud, among others.

These third party partners only have access to the personal information necessary to perform the relevant services and are required not to use it for any purpose other than that for which it was requested. We also require the same level of protection and confidentiality from these third parties that we apply to the handling of your personal information. They are also subject to the obligations set out in their respective data processing agreements with us.

WHAT ARE YOUR RIGHTS?

You are entitled to exercise the following rights in relation to the processing of your personal data:

Access (art. 15 RGPD): allows you to obtain certain information on the purposes for which your data are being processed, the recipients to whom they are communicated or the categories of data being processed, among others.

Rectification (art. 16 RGPD): allows you to contact the Data Controller to modify any personal data that is inaccurate and to complete any data that is incomplete.

Deletion (art. 17 RGPD): allows you to request the deletion, without undue delay, of your personal data being processed by the Data Controller.

Limitation of processing (art. 18 RGPD): allows you to obtain from the Data Controller the limitation of the processing of your data.

Portability (art. 20 GDPR): allows you to receive your personal data or have it sent to a third party, in a structured, commonly used and machine-readable format.

Opposition (art. 21 GDPR): allows you to object to the processing of your data by the Data Controller. However, you can only exercise this right in relation to processing operations that are based on a legitimate public interest or a legitimate interest of the Data Controller.

Opposition to automated processing (art. 22 GDPR): allows you not to be subject to decisions based solely on automated processing of your data, including profiling, which produce legal effects on you or significantly affect you in a similar way.

How can I exercise my rights?

In order to exercise your data protection rights, the Company makes the following means available to you:

By means of a written and signed request addressed to the Company [Pol. Ind. Sud. C/de l'Orfeó Català,7. 08440, Cardedeu (Barcelona)], indicating the reason for your request and the right you wish to exercise, and attaching a photocopy of your ID card or equivalent document accrediting the identity of the applicant;

By sending the completed and signed form, enclosing a photocopy of the ID card or equivalent document proving the identity of the applicant, to the following e-mail address: info@jjbcn.com

The forms for exercising the various rights are provided below:

Right of access: https://www.aepd.es/sites/default/files/2019-09/formulario-derecho-de-acceso.pdf
Right of rectification: https://www.aepd.es/sites/default/files/2019-09/formulario-derecho-de-rectificacion.pdf
Right of deletion: https://www.aepd.es/sites/default/files/2019-09/formulario-derecho-de-supresion.pdf
Right to restriction of processing: https://www.aepd.es/sites/default/files/2019-09/formulario-derecho-de-limitacion.pdf
Right to portability: https://www.aepd.es/sites/default/files/2019-09/formulario-derecho-de-portabilidad.pdf
Right to object: https://www.aepd.es/sites/default/files/2019-09/formulario-derecho-de-oposicion.pdf
Right to object to automated processing: https://www.aepd.es/sites/default/files/2019-09/formulario-derecho-de-oposicion-decisiones-automatizadas.pdf

Likewise, you have the right to address any claim arising from the processing of your personal data to the corresponding competent supervisory authority for data protection: the Spanish Data Protection Agency (Complaint Submission Form).

CHANGES TO THE PRIVACY POLICY

This Privacy Policy is subject to continuous review by the Company and will be amended as necessary to adapt it to current legislation or to any changes to our Website.
In the event that an update to the Policy entails a material change in the processing of your personal data, we will notify you of such change through our Website (by means of a banner, pop-up or push notification) so that you can review and assess it.
We therefore recommend that you periodically review the Privacy Policy to keep yourself informed of any new developments regarding the processing of your personal data.