Canary Islands BLIVALE S.L. (hereinafter "BLIVALE") as the data controller wishes to inform users (hereinafter "Users") of the www.blivale.com website (hereinafter "SitoBLIVALE") about the processing of personal data provided to BLIVALE, as required by the new European Regulation n. 679/2016 concerning the protection of personal data (the "European Privacy Regulation"), applicable from 25 May 2018.
1. Owner and responsible for processing
2. Personal data collected
BLIVALE treats, in accordance with this privacy statement, the data provided by Users, including
a) the personal and contact data provided when creating an account on the Site;
b) data relating to purchases made through the Website;
c) the navigation data relating to the use of the services offered through the Site collected through cookies in accordance with the information on cookies available at the following link https://www.blivale.com/en/information-on-the-use-of-cookies ;
d) the data provided in case of request for information and assistance; is
e) the data provided and collected for the purposes and in the context of any participation in BLIVALE competitions and / or prize operations, provided that in this case this information will be integrated with the information that regulates the processing of personal data of related competitions and / or prize operations.
There are no data on health and in general particular categories of personal data pursuant to Article 9 of the European Privacy Regulation. The data of minors will be processed according to the procedures described in paragraph 8 below.
The above data are processed only to the extent to which they are necessary to achieve the purposes described in paragraph 4 of this statement.
3. Methods of data processing
The User's personal data are processed with the support of electronic and / or paper means and are protected by appropriate security measures to guarantee the confidentiality and security of personal data. In particular, BLIVALE adopts appropriate organizational and technical measures to protect the personal data in its possession against loss, theft, as well as the use, disclosure or unauthorized modification of personal data.
BLIVALE proceeds to the anonymization of personal data and the removal of identification data if there is no need to process personal data in an identifiable form for the purposes of treatment and at the expiry of the retention period indicated in paragraph 10 below.
4. Purposes of the treatment
The purposes for which the User is requested to provide BLIVALE with their personal data are as follows:
a) to allow the User to register on the Site by creating a personal account and carrying out the activities regulated in the Terms and Conditions of the Website, including purchases on the Website, using the services made available through the Website, including the activities of participation in competitions with prizes and customer support services and to assert and defend the rights towards the User and third parties (hereafter referred to as "Contractual Purposes");
b) comply with any legal and regulatory obligations (hereinafter referred to as "Purpose of the Law");
c) with the prior consent of the User, to send newsletters and commercial communications, through traditional and remote means of communication including emails, SMS, MMS, social networks, instant messages, mobile applications, banners, fax, mail and telephone, for the promotion and / or sale of products and / or services marketed by BLIVALE and for surveys of customer satisfaction ("BLIVALE Marketing Purpose");
d) with the prior consent of the User, to send marketing communications from other BLIVALE group companies and / or commercial partners, in relation to their products and services in accordance with the procedures referred to in point c) above, the list of which is available at the request of the User ("Third Party Marketing Purposes");
e) in the event that the User has given his consent to the processing of his data for BLIVALE's Marketing Purposes, send newsletters and communications relating to the products and services marketed by BLIVALE through email, SMS with a frequency not exceeding 3 communications per month to Users identified solely on the basis of non-invasive categories to which they belong, such as, the age group, the possible opening of previous newsletters received, the manner in which the User makes his purchases ("Legitimate Interest Interests of Marketing "); is
f) carry out activities that are functional to the sale of companies and business units, acquisitions, mergers, demergers or other transformations and for the execution of such transactions ("Legitimate Business Interest Intent").
5. Legal basis of the processing
The processing of personal data for Contractual Purposes is mandatory as necessary for the purposes of registration, the performance of the activities referred to in the Conditions of Sale of the Site, the purchase of products online and for the use of specific services offered through the Site. The provision of personal data for the purposes of the law is mandatory as required under applicable laws. In the event that the User does not want his personal data to be processed for these purposes it will not be possible for him / herself to use the Website and the services made available through it.
The processing of personal data for BLIVALE's Marketing Purposes is optional and subject to prior consent by the User. Failure to provide the consent will make it impossible for BLIVALE, BLIVALE group companies and / or selected business partners to keep the User updated on new products or services, promotions, customized offers, as well as to carry out market surveys and send communications or other information material that could be in line with their interests.
The treatment for the purposes of legitimate marketing interests is functional to the pursuit of a legitimate interest of BLIVALE adequately balanced with the interests of the Users in light of the limits imposed on this treatment illustrated in paragraph 4 f) and will be executed with effect from 25 May 2018 , starting date of the effectiveness of the Privacy Regulations.
The treatment for the purposes of legitimate business interests is carried out pursuant to Article 24, paragraph 1, letter d) of the Privacy Code and for the pursuit of the legitimate interest of BLIVALE and its counterparties to the performance of the economic operations indicated therein pursuant to of article 6, letter f) of the Privacy Regulation, adequately balanced with the interests of the Users as the processing takes place within the limits strictly necessary for the execution of these operations.
6. Scope of communication and dissemination of data
BLIVALE, for the purposes referred to in paragraph 4, may communicate the data of the Users, strictly necessary for each type of treatment, to the following categories of subjects:
a) to BLIVALE's collaborators, employees and suppliers, as part of their duties and / or any contractual obligations with them, regarding the commercial relationships with the Users;
b) to subcontractors and / or subcontractors engaged in activities related to the execution of the services and products offered by BLIVALE;
c) to other BLIVALE group companies, national and international, located in countries, better specified in paragraph 7 below;
d) to post offices, shippers and couriers for sending the products purchased by the User and / or other material relating to the performance of BLIVALE services;
e) to legal, administrative and fiscal consultants within the limits necessary or functional to the activity of BLIVALE, in the manner and for the purposes illustrated above; is
f) to banks for the management of collections and payments deriving from the execution of contracts with the User.
The User's personal data will not be disclosed.
7. Personal data are transferred abroad
Personal data may be freely transferred outside the national territory to countries located in the European Union, but could also be transferred outside the European Union and in particular in the United Kingdom, Asia, the Americas and Oceania. Any transfer of the User's personal data in countries located outside the European Union will, in any case, take place in compliance with the appropriate and appropriate guarantees for the purpose of the transfer in accordance with the applicable legislation and in particular with Article 44 of the Privacy Code and articles 45 and 46 of the Privacy Regulation.
The User will have the right to obtain a copy of the data held abroad and to obtain information about the place where such data is stored by expressly requesting it to the Data Controller at the address referred to in paragraph 9 of this statement.
8. Minors of 16 and 18 years
The site offers services that can also be used by individuals under the age of 16 and 18. In these cases BLIVALE collects and processes the personal data of minors exclusively for the purposes and with the methods set out in this statement in compliance with the rules on the processing of personal data of minors pursuant to art. 8 of the Privacy Regulation with the prior consent of the parent and / or guardian and / or the person acting on his behalf whose data can be collected only to obtain this consent in accordance with the procedures provided by the Site.
Our site is not designed for children under the age of 13. We do not intentionally collect personal data about visitors of that age group.
9. Rights of Users
The User can, at any time and for free
(a) obtain confirmation of the existence or not of data concerning him and of communication;
(b) know the origin of the data, the purposes of the processing and its methods, as well as the logic applied to the processing carried out through electronic tools;
(c) request the updating, correction or - if interested - integration of data;
(d) obtain cancellation, transformation into anonymous form or blocking of data that may be processed in violation of the law, as well as to oppose, for legitimate reasons, processing;
(e) object, in whole or in part, to the processing of data concerning him for the purposes of direct marketing carried out through automated methods and / or traditional methods;
(f) revoke, at any time, the consent to the processing of data, without prejudice in any way to the lawfulness of the treatment based on the consent given prior to the revocation.
In addition to the rights listed above, the User will be able to benefit with effect from 25 May 2018 of the rights referred to in paragraph 10, lett. b) of this information.
10. Third party websites
The SitoBLIVALE provides links to external websites, which do not fall within the sphere of BLIVALE control. BLIVALE does not represent third party websites. When you access sites that are not BLIVALE, you do so at your own risk. BLIVALE is not responsible for the reliability of data, opinions, advice or statements made on third party websites. BLIVALE provides these links for mere convenience. The inclusion of such links does not imply that BLIVALE endorses, recommends or assumes any responsibility for the content of such sites.
11. Provisions applicable from 25 May 2018
The following provisions will become effective as of May 25, 2018, as a consequence of the beginning of the effectiveness of the Privacy Regulations.
a) Term of retention of personal data: BLIVALE will retain personal data for the period necessary to satisfy the purposes for which they were collected in accordance with paragraph 2 above. In any case, the following retention periods apply to the processing of personal data for the following purposes:
- the data collected for the Contractual Purposes referred to in paragraph 4, lett. a) are kept for the entire duration of the contract and for the 10 years following the expiration of the same for defense purposes and / or to claim a right to BLIVALE in court and / or out-of-court in case of disputes related to the execution of the contract ;
- the data collected for the purposes of the law referred to in paragraph 4, lett. b) are kept for a period equal to the duration prescribed for each type of data by law;
- the data collected for the BLIVALE Marketing Purposes referred to in paragraph 4, lett. c) are kept for a period equal to the entire duration of the User's registration to the Site through their account and / or participation in the competition and / or collection as well as for the 2 years following the end, deactivation and / or cancellation of the same;
- the data collected for the Third Party Marketing Purposes referred to in paragraph 4, lett. d) are kept for a period of 12 months from collection;
- the data collected for the purposes of legitimate marketing interest pursuant to paragraph 4, lett. e) are kept for a period equal to the entire duration of the User's registration to the Site, through their account and / or to participation in the competition and / or collection, and for a period of 2 years following termination, deactivation and / or cancellation of the same;
- the data collected for the purpose of legitimate business interest pursuant to paragraph 4, lett. f) are kept for a period of 10 years from the time of collection.
Once the terms indicated above have elapsed, the User's data may be deleted, anonymised and / or aggregated.
b) Additional rights: the User may at any time, according to the procedures referred to in paragraph 9 above,
(a) request the limitation of the processing of personal data in the event that (i) contexts the accuracy of personal data, for the period necessary to verify the accuracy of such personal data; (ii) the processing is unlawful and the User opposes the deletion of personal data and requests instead that its use be limited; (iii) although BLIVALE no longer needs it for processing purposes, personal data are necessary for the User to ascertain, exercise or defend a right in court; (iv) the User has opposed the treatment pursuant to art. 21, paragraph 1, of the Privacy Regulation pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party;
(b) oppose at any time the processing of personal data;
(c) request cancellation of personal data concerning him without undue delay;
(d) obtain the portability of personal data concerning him;
(e) propose a complaint to the Data Protection Authority where the conditions exist.
12. Changes and updates
This information is valid from the date indicated in its header. BLIVALE could also make changes and / or additions to this information, also as a consequence of any subsequent amendments and / or regulatory additions to the Privacy Regulations.
If the User has doubts, comments or complaints about the methods of collection or use of his personal data, please contact BLIVALE through the Contact section of the Website.