Privacy Policy

BIESOGEN – Cristina Fransi, informs the users of the website about its policy regarding the processing and protection of the personal data of users and customers.

And it guarantees at all times full compliance with the obligations set out in the regulations on data protection and information society services: Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), the regulations Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD) and Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSIce).

DATA CONTROLLER

CRISTINA FRANSI LABAT

C.I.F.: 43735355G

Address: Av. de Miquel Batllori, 81-83 bajos 25001 Lleida

Phone: 685316277

Email: teambsg@biesogen.com

DATA PROTECTION OFFICER

The Data Controller, in accordance with Article 37 of the GDPR and Article 34 of the LOPDGDD, has appointed a Data Protection Officer (DPO). The contact email is: dpd@biesogen.com.

PURPOSES OF DATA PROCESSING

The data provided by users are used for various purposes that are listed below:

Purpose of processing	Legal basis for processing
Manage queries raised through the consultation form	Legitimate interest of the Company to respond to requests for information through the website. Consent expressly given at the time of data collection through the web forms.
Sending newsletters, commercial communications and promotions.	Consent expressly given at the time of data collection through the web forms.
For the development, fulfilment and execution of the purchase or sale contract or services that you have contracted through our website.	Consent expressly given at the time of data collection through the web forms. We believe we have a legitimate interest in carrying out the necessary checks to detect and prevent potential fraud when you make a purchase. Performance of a contract.
Carry out accounting management.	Performance of a contract.
Comply with current tax obligations.	Compliance with legal obligations that apply to us.
Manage incidents and website maintenance.	Legitimate interest of the Company.

DATA RETENTION PERIOD

Purpose of processing	Legal basis for processing
Manage queries raised through the consultation form	We will process your data for as long as necessary to respond to your request or request.
Sending newsletters, commercial communications and promotions.	We will process your data until you unsubscribe.
For the development, fulfilment and execution of the purchase or sale contract or services that you have contracted through our website.	We will process your data for the time necessary to manage the purchase of the products or services you have purchased, including possible returns, complaints or claims associated with the purchase of the particular product or service.
Carry out accounting management.	We will process your data for as long as necessary to comply with the statutory limitation periods that apply to you.
Comply with current tax obligations.	We will process your data for as long as necessary to comply with the statutory limitation periods that apply to you.
Manage incidents and website maintenance.	We will process your data for as long as necessary to comply with the statutory limitation periods that apply to you.

DATA RECIPIENTS

In order to fulfil the purposes indicated in this Privacy Policy, it is necessary that we give access to your personal data to third parties who provide us with support in the services we offer you (Data Processors), namely:

– Financial institutions.

– Technology service providers.

– Suppliers and collaborators of services related to marketing and advertising.

Data processors for the execution of a contract or provision of a service to the Data Controller, thereby following their instructions at all times and ensuring the same levels of security.

USER RIGHTS

Users have the right to:

Request access to your personal data that is being processed and receive such information in writing by the means requested.
Request the rectification of inaccurate personal data or, where appropriate, request their deletion when, among other reasons, the data is no longer necessary for the purpose for which they were collected.
Request the restriction of the processing of your data.
Object to the processing of your personal data where appropriate, in which case your data will no longer be processed except for legitimate reasons.
The right to portability of your personal data when the processing is based on consent and is carried out by automated means. The data will be delivered in a structured, commonly used and machine-readable manner.
Right to withdraw the consent given.
Right to complain to the Spanish data protection agency.

Users can exercise the rights indicated above at the email address dpd@biesogen.com, proving their identity with a scanned copy of their ID card or equivalent document, and specifying the right they wish to exercise.

ORIGIN OF THE DATA

The personal data will be provided by the interested party on an absolutely voluntary basis. The failure to provide certain data or questions that may be asked in the registration processes or in the different electronic forms that are presented to the user, may make it impossible to access certain services for the provision of which it is essential to have personal data, in which case the Data Controller will inform of the mandatory and/or necessary nature of providing personal data for the operation of the service.

The Data Controller assures you of the confidentiality of your personal data and guarantees their security, adopting the necessary measures to prevent their alteration, loss, processing or unauthorized access.

INFORMATION PROVIDED BY THE USER

Persons under the age of 18 may not transfer their personal data without the prior consent of their parent and/or legal guardians.

Users, by entering their data in the contact forms or presented in download forms, expressly, freely and unequivocally accept that their data are necessary to respond to their request by the Data Controller, and the inclusion of data in the remaining fields is voluntary.

Users guarantee that the personal data provided are true and are responsible for communicating any modification to them.

All the data requested through the website are necessary for the provision of an optimal service to users. In the event that not all the data is provided, it is not guaranteed that the information and services provided by the Data Controller will be completely adjusted to your needs.

SECURITY MEASURES

That in accordance with the provisions of the current regulations on the protection of personal data, the Responsible Party is complying with all the provisions of the GDPR and LOPDGDD regulations for the processing of personal data, which are processed in a lawful, loyal and transparent manner in relation to the interested party and adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

The Data Controller guarantees that it has implemented appropriate technical and organisational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of Users and has communicated to them the appropriate information so that they can exercise them.

SECURITY BREACHES

The Data Controller will report any security breach affecting the database used by this website, or affecting any of our third-party services, to any and all persons, data of which may have been affected, and authorities, within 72 hours of the breach being detected.

APPLICABLE LAW AND JURISDICTION

For the resolution of all controversies or questions related to this website or the activities carried out on it, Spanish law will be applicable, to which the parties expressly submit, and the Courts and Tribunals of Lleida will be competent for the resolution of all conflicts arising from or related to its use.