PRIVACY POLICY

he Privacy Policy is part of the General Conditions that govern this 2Web.
In compliance with current regulations on the protection of personal data (EU Regulation 679/2016 on General Data Protection, Spanish Organic Law 3/2018 on Protection of personal data and guarantee of Digital Rights) users are informed:

Who is responsible for processing your data?
BOMBON BOSS S.L.
Tax ID: B53673091
Paseo de la Explanada 11, 03002 Alicante.
Email: info@bombonboss.com
Telephone: 966744140
Contact details of the Data Protection Delegate: dpo@bombonboss.com

You can use any method to communicate with us.
We reserve the right to modify or adapt this Privacy Policy at any time. We advise you to review it; and if you have registered and access your account or profile, you will be informed of any modifications.
If you belong to any of the following groups, check the drop-down information:

   + CLIENTS

What are the purposes for which we are processing your personal data?

Preparation of an offer and monitoring it through communications between both parties.
Sending information by electronic means, that is related to your request.
Sending commercial information or of events by electronic means, if there is express consent.
Managing administrative, communications and logistics services performed by the Controller.
Invoicing and declaration of due taxes.
Performing the transactions that are applicable.
Control and recovery procedures.

 + WEB OR EMAIL CONTACTS

What data do we collect through the website?

We may process your IP address, used by the operating system or browser, and the duration of your visit; all anonymously.
If you provide us with data in the contact form, you will identify yourself in order for us to contact you if it should be necessary.

What are the purposes for which we process your personal data?
Responding to your questions, requests or orders.
Managing the requested service, responding to your request or processing your order. Sending information that is related to your request by electronic means. Sending commercial information or of events by electronic means, if there is express consent. Performing analysis and improvements on the website regarding our products and services. Improving our commercial strategy.

What is the legitimacy for the processing of your data?
Acceptance and consent of the interested party: When you make a request, you must fill in a form and click on the send button; doing this necessarily implies that you have been informed and expressly given your consent to the clause attached to the form or acceptance of the privacy policy.
All our form have the symbol * in the required fields. If you do not complete these fields or do not mark the acceptance check box of the privacy policy, the information will not be sent.

+ SOCIAL MEDIA CONTACTS

What are the purposes for which we are processing your personal data?
Responding to your questions, requests or orders.
Managing the requested service, responding to your request or processing your order.
Having a relationship with you and creating a community of followers.

What is the legitimacy for the processing of your data?
The acceptance of a contractual relationship in the environment of the corresponding social network and in accordance with their Privacy Policies.
Facebook http://www.facebook.com/policy.php?ref=pf
Instagram https://help.instagram.com/155833707900388
Twitter http://twitter.com/privacy
Linkedin http://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
Pinterest https://about.pinterest.com/es/privacy-policy
Google* http://www.google.com/intl/es/policies/privacy/
*(Google+ and Youtube)

How long do we keep personal data?
We can only lookup or cancel your data in a restricted way if you have a specific profile. We will process the data as long as you follow us, being friends or clicking on “Like”, “Follow” or similar buttons.
You must perform any rectification of your data or restriction of information or publications through your profile or username on the social network.

+ JOB APPLICANTS

What are the purposes for which we are processing your personal data?
Organization of the selection processes for hiring employees.
Making appointments for job interviews and assessing your candidacy.
If you have given us your consent, we may transfer it to collaborating or related companies with the sole aim of helping you find employment.
If you mark the check box accepting the Privacy Policy, you give us your consent to transfer your job application to the entities that form our group of companies in order to include you in their staff selection processes.
Likewise, we inform you that after one year from the reception of your curriculum vitae, we will proceed to safety delete it.

What is the legitimacy for the processing of your data?
The legal basis is your unequivocal consent by sending us your CV.

Do we include personal data of third parties?
No, as a general rule we only process the data provided by the owners. If you provide us with data of third parties, you must first inform them and request their consent. Otherwise, we do not accept any responsibility for the breach of this requirement.

What about the data of minors?
We do not process data of children under 14 years. Therefore, do not provide us with data if they are under age or, where applicable, do not provide data of third parties who are under age. BOMBON BOSS disclaims any responsibility if you breach of this provision.

Do we communicate by electronic means?
This is only done to manage your request if this is one of the means of contact that you have given.
If we send commercial communications, they will have been previously and expressly authorised by you.

What security measures do we apply?
You can rest at ease: We have adopted an optimal level of protection for the personal data that we process, and we have installed all the means and technical measures at our disposal according to the state of the technology to prevent loss, misuse, alteration, unauthorized access and theft of the personal data.

Who will your personal data be communicated to?
Your data will not be transferred to third parties unless we are legally required to do so. Specifically, they will be communicated to the State Tax Administration Agency and to banks and financial entities for collection for the service provided or products acquired as well as to those data processors necessary for the execution of the agreement.
In case of purchase or payment, if you choose an application, website, platform, bank card or some other online service, your data will be transferred to that platform or will be processed in that environment, always with maximum security.
When we so order it, the website development and maintenance company, or the hosting company, will have access. These companies will have signed a contract for the provision of services that requires them to maintain the same level of privacy as ourselves.
Any international transfer of data when using American applications will adhere to the Policy Shield agreement that guarantees that the American software companies comply with the European data protection policies regarding privacy.

What rights do you have?
Knowing if we are processing your data or not.
Accessing your personal data.
Requesting rectification of your data if they are inaccurate.
Requesting the deletion of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw the consent you granted.
Requesting the limitation of the processing of your data, in some circumstances, in which we will only keep them in accordance with current legislation.
Portability of your data, which will be supplied to you in a structured format in common use or machine readable. If you prefer, we can send them to the new Controller that you designate. This is only valid in certain cases.
Filing a claim with the Spanish Data Protection Agency or competent control authority, if you believe we have not processed your data properly.
Revoking your consent for any processing for which you consented, at any time.
If you modify any personal data, we would appreciate it if you would communicate it to us so we can keep it updated.

Do you want a form for the exercise of rights?
We have forms for the exercise of your rights. Ask us by email or, if you prefer, you can use those prepared by the Spanish Data Protection Agency or those of third parties.
The forms must be signed electronically or be accompanied by a photocopy of your Spanish Id.
If someone represents you, you must attach a copy of your National Id, or sign it with their electronic signature.
The forms can be presented in person, or sent by email to the Data Protection Delegate: dpo@bombonboss.com

How long does it take us to respond to the Exercise of Rights?
It depends on the right but a maximum of one month from your request and two months if the subject is very complex and we notify you that we need more time.

Do we process cookies?
If we use types of cookies that are not necessary, you can consult our Cookies Policy in the corresponding link at the start of our website.

How long do we keep personal data?
Personal data will be kept as long as you are linked with us.
Once you dissociate yourself, your personal data will be processed for each purpose and maintained for the legally established periods, including the period in which a judge or court may require, taking into account the statute of limitations for legal actions.
The processed data will be kept as long as the legal terms mentioned above do not expire, if there were any legal obligation to keep them or, in the absence of a legal term, until the interested party requests their deletion or revoke the consent granted.
We will maintain all the information and communications regarding your purchase or provision of our service while the warranties of the product or services last, in order to respond to any possible claims.