Data protection policy

Who is the data controller in charge of processing your data?

What is our purpose and lawfulness for processing the data?

Contact. We answer the queries of the people who contact us by email, the contact form on our website or by telephone. We only use the data for that purpose.

Customers. We record the customers and additional data that may be generated as the result of the commercial relationship with those customers. The commercial relationship involves data being entered for the accounting system, billing or to provide information for the tax authorities.

Distributors. We record the essential data of the distributors of our products for the purpose of the contractual relationships. The data may be of people working as self-employed or representatives of legal entities. We process those data for the performance of the contractual relationship. We only use the data for the established purpose and we use this type of relationship for our own end.

Supplier management. We record and process the data of our suppliers. The data may be of people working as self-employed or representatives of legal entities. We obtain the essential data for the contractual relationship.

Information on our products and services. While the contractual relationship with our customers exists, we use their contact data to communicate information inherent to this relationship.

Other information on our products and services. Always with the prior and explicit authorisation of the people interested in receiving information, we will record their data to send them advertising, both general and adapted to the individual characteristics.

What is the lawfulness of the data processing?

The data processing that we conduct is on different legal grounds, depending on the nature of the processing.

The performance of a pre-contractual relationship. That is the case of data of possible customers or suppliers with whom we have a relationship prior to the formalisation of the contractual relationship, such as preparing a study or quote.

The performance of a contractual relationship. That is the case of the relationships with our customers and suppliers and all the actions and uses involved in those relationships.

In compliance with legal obligations. Communications to the tax authorities are established by the regulatory standards of commercial relationships.Data may have to be communicated to judicial authorities or to security forces and law enforcement, and also to comply with legislation that requires cooperation with those public bodies.

Based on consent. When we send information on our products or services, we process the contact data of the recipients with their explicit authorisation or consent. The browsing data that can be gathered using cookies is obtained with the consent of the person who visits our website and consent that can be revoked at any time by uninstalling those cookies.

To whom are the data communicated?

As a general criterion, we only disclose data to public administrations and authorities and always to comply with legal obligations. We can disclose them to banks when invoicing.

There are no data transfers outside the scope of the European Union (international transfer).

For how long do we store the data?

We comply with the legal obligation to limit the data storage period as far as possible. The data are therefore only stored for the necessary time and which is justified for the purpose for which they were obtained. In certain cases, such as the data that appear in accounting and invoicing documents, tax legislation requires those data to be kept until the end of the limitation period in that regard. In the case of the data to be processed based on the consent of the data subject, they are kept until that person withdraws their consent.

What rights do people have with regard to the data that we process?

The people whose data we process have the following rights:

To access. Right to know which personal data are being processed, what is the purpose for which they are processed, communications to other people, the right to obtain a copy and to know the envisaged storage period.

To ask for the data to be rectified. Right for inaccurate data to be rectified. To ask for the data to be deleted. Right to ask for the data to be deleted when, among others reasons, they are not necessary for the purposes for which they were gathered and which justified the processing.

To ask for the processing to be limited. Under certain circumstances there is the right to ask for the processing of the data to be limited; they will no longer be processed and they will only be kept to lodge or defend claims.

To portability. Right to obtain the personal data in a common machine-readable format and to transfer them to another data controller, should the data subject so decide.

To object to the processing. By citing reasons related to your specific situation, you can ask us to stop processing their data if that can be to your detriment.

How can the rights be exercised or defended?

The above rights can be exercised by sending a written request to BRAVO DEAL, SL, at our postal address or by sending an email to info@bravosnorkel.com. You should always indicate “Personal Data Protection”. If you do not obtain a satisfactory response in the exercising of the rights, you can file a claim with the Spanish Data Protection Agency, using the forms or other channels accessible from your www.aeped.es website.

Security measures

That pursuant to what is envisaged in the current personal data protection legislation, BRAVO DEAL, SL complies with all the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and the Personal Data Protection and Guarantee of Digital Rights Act 3/2018, of 5 December, (LOPDGDD) concerning the processing of the personal data of their responsibility. It likewise clearly with the principles described in Article 5 of the GDPR, meaning that any data are to be processed in a lawful, fair and transparent manner in relation to the data subject and in a way that is adequate, pertinent and limited to what is necessary with regard to the purposes for which they are processed.

BRAVO DEAL, SL guarantees that it has implemented the appropriate organisational and technical policies to apply the security measures established by the GDPR in order to protect the rights and liberties of the Users and has provided them with the appropriate information so that they can exercise those rights.