This Privacy Policy described how BIMBA Y LOLA, S.L. (hereinafter, “Bimba y Lola”, “us”, “we” and “our”), processes the information collected from you when registering or navigating through the website www.bimbaylola.com/eu.
Please, read carefully this Privacy Policy, as it contains important information concerning your personal data and how we use it.
If you are purchasing Bimba y Lola products from the Website, you will be subject to the Privacy Policy of GLOBAL-E SPAIN S.L. a company incorporated in Spain, N.I.F B66809377 whose registered office is at Calle Diputación, 260 08007 Barcelona, Spain (hereinafter, “Global-e”).
According to the information offered in this Privacy Policy, Global-e will act as the data controller for some of processing activities, and Bimba y Lola as data processor regarding any personal data processed to conclude, manage and perform the purchase contract and the customer support service.
If you are a registered user, your name, surname, e-mail and, in case you have submitted it to Bimba y Lola, telephone and postal address, will be provided by Bimba y Lola to Global-e in order to fill in the transaction forms for ease of completion by you.
In case of discrepancy between Global-e’s Privacy Policy and Bimba y Lola’s Privacy Policy, Bimba y Lola’s Privacy Policy shall prevail.
1.GENERAL INFORMATION
Bimba y Lola dedicates all its efforts to respect the privacy and security of the users and undertakes to use personal data in accordance with the European General Data Protection Regulation ("GDPR”) and other national data protection laws that may be applicable.
Who is the Data Controller?
According to GDPR, data controller is the natural or legal person who collects personal data and determine the purposes for the processing of said data.
Processing means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means.
| DATA CONTROLLER | |
|---|---|
| Corporate name | BIMBA Y LOLA, S.L. ((hereinafter "Bimba y Lola") |
| Registered office | Avenida de Madrid, N.º 133 (36214 – Vigo, Spain) |
| Email: | [email protected] |
Likewise, and as mentioned above, Global-e will be data controller for those purposes related to the sale and purchase of the BIMBA Y LOLA’s products and the customer support service of the purchase.
2.CATEGORIES OF PERSONAL DATA AND PURPOSES OF THE PROCESSING
Which type of personal data we may process?
As user, you may use some functionalities of the Website without having to provide any personal data. However, for certain sections, you may provide personal data in order to register for certain services, receive newsletters or other information of interest.
All the personal data collected through this Website will be dully incorporated in databases under the responsibility of Bimba y Lola, which will be registered in Bimba y Lola’s record of processing activities.
We also inform that fields requested in forms marked with an asterisk are mandatory. In this sense, if the requested information is not provided, we will not be able to carry out the pretended service.
Below, we have specified the categories of personal data we collect:
(1) Registration as Bimba y Lola user: When completing the registry process included in Section “Register”, we process the personal data you provide when creating an account, related to identification and contact information. This information is necessary to be registered as a Bimba y Lola user. Likewise, in this context, Bimba y Lola may collect your express consent for receiving commercial communications.
(2) Order creation: When you order any of the Bimba y Lola’s products, we will process your personal data to fulfil the order. This may include your name, surname, address, telephone number, and delivery post address, and other information that we may need to prepare the shipping label and other international shipping documents. This information will be collected by our merchant of records, Global-e, as data controller, under its respective privacy policy, and terms and conditions. Section 5 contains further information about Global-e. Please, visit Global-e website for more information on how your personal data is processed here.
(3) Gift option: When you order any of the Bimba y Lola’s products as a gift, we will process the personal data you provide to us, in order to wrap your order in a single parcel and send the BIMBA Y LOLA card with the personalised message you want to send to the recipient of the gift. This may include the name, surname, and the message you want to deliver to the recipient of the gift.
(4) Newsletters and commercial communications: If you subscribe to our Newsletter, we will process your personal information to provide the service. Likewise, we can process your contact details to send you information about similar products or services. In both cases, we will delete your email address once you have opted-out, unless it is also used for a purpose listed in this Privacy Policy.
(5) Marketing: We can collect information about your online searches (clicks and views).
(6) Whistleblowing channel: Bimba y Lola will process any personal data voluntarily provided by the whistleblower within the report. If the personal data contains special categories of data, such as, but not limited to, health, religious or ethnic affiliation, or if it not necessary for the handling of the report, Bima y Lola will refuse from collecting it or, if accidentally collected, Bimba y Lola will ensure its deletion.
(7) Information about the use of our Website: Likewise, we collect certain information when you visit our Website, by means of the use of cookies. The personal data includes the identification of the user’s computer equipment, navigation habits, among others (see section 7 below).
Why do we process your personal data?
In accordance with the provisions of the GDPR, as well as any applicable national legislation, we inform you that, at Bimba y Lola, the previous data is strictly necessary for the following purposes:
(1) To process your registration as a Bimba y Lola user and manage you profile personal details.
(2) To manage the order process.
(3) To wrap your order in a single parcel and send the BIMBA Y LOLA card with the personalised message you want to send to the recipient of the gift.
(4) To send commercial communications about Bimba y Lola's products (emails, phone calls, SMS, PUSH notifications, post, etc.).
(5) To create commercial profiles using information from both internal and external sources, to deliver personalised advertising and analyze your purchasing behaviour. This information allows Bimba y Lola to improve its relations with its customers and to offer better products and services.
(6) The user is free to provide personal data when using the Whistleblowing Channel. Bimba y Lola will only process and use the personal information to contact the user for investigation purposes, and always under strict confidentiality terms. Should you prefer not to provide your contact info, please note that it will be impossible for us to gather any further insights from you or to ultimately inform you about the results of the investigation.
(7) To improve our products and services. See section 7 below.
In addition, Bimba y Lola needs to process your personal data to comply with legal obligations, binding our accepted by us. Likewise, we may need to provide information to and as required by local law enforcement agencies, other government authorities, or otherwise required by law or to protect the rights and safety of our property, company, employees and customers. Among other obligations, we may need to process your personal information for the following purposes:
(8) Abuse and fraud prevention, including fraudulent activities, denial-of-service attacks, and other related threats.
(9) Disclosure of data to public bodies and authorities (administrative or judicial), as required by legal and/or statutory provisions.
3.PERSONAL DATA RETENTION PERIOD
How long will we retain Personal Data?
Your data will be retained for the necessary period, (i) while it is necessary to fulfil the intended purpose for which it was collected, and/or (ii) until you request its deletion (see section 6 below).
Afterward, the data will be securely stored and duly blocked solely for the time required to fulfil our legal obligations. Also, some data may be retained, if requested, in connection with the acknowledge and/or prosecution of administrative, judicial or criminal procedures.
4.LEGITIMATION
What is the legitimation of the processing of Personal Data?
The legal bases for the processing of your personal data corresponding to each of the purposes (1) to (9) included in Section 2 above (“Purposes”) are as follows:
| Purpose (1) | The legal basis for this processing is the consent expressly given to Bimba y Lola at the time your personal data is collected during the registry process. |
| Purpose (2) | The legal basis for this processing is the execution of a contract in relation to your order, and the picking and packing process. |
| Purpose (3) | We use this personal data based on your consent in order to send the personalized message to the recipient of the gift |
| Purpose (4) | (i) The legal basis for this processing is the consent when the user checks the box implemented in the specific forms. (ii) Likewise, Bimba y Lola, based on its legitimate interest, may send information about similar products or services of those contracted by users and customers. |
| Purpose (5) | We use this personal data based on our legitimate interest in order to improve our products and services. |
| Purpose (6) | The legal basis for data processing is compliance with the relevant legal obligations set up by Directive (EU) 2019/1937, its national transposition laws, and any other national applicable laws. |
| Purpose (7) | We use this personal data based on our legitimate interest in order to improve our products and services. |
| Purpose (8) and (9) | The legal basis for data processing is compliance with the relevant legal obligations. |
5.DATA PROCESSORS AND DATA RECIPIENTS
In certain cases, your personal data may be transferred to third parties and accessed by our suppliers when it is necessary for the correct provision of services and fulfilment of the purposes for which the data was collected.
These third parties may process your personal information on behalf of Bimba y Lola (Data Processors) and /or on their own account (Data Recipients).
Which third parties will access to Personal Data?
Data processors: Bimba y Lola’s data processors may access to the collected data, for the following purposes, among others:
(i) technological and analytical service providers, for the improvement of our services.
(ii) digital advertising and marketing providers that, in certain cases, may act as joint controllers.
(iii) other service providers that we may contract with.
In all cases, Bimba y Lola has concluded or will conclude the relevant data processing agreement to protect your personal data.
To which recipients will Personal Data be communicated?
Data recipients:
(i) GLOBAL-E SPAIN, S.L., or “Global-e”, a Spanish based company, with registered office at Calle Diputación, nº260, 08007 Barcelona – Spain, who acts as Bimba y Lola’ merchant of records. Thus, when a registered or non-registered user order a product from our Website, it will be redirect to Global-e site to complete the purchase. Visit Global-e’s Privacy Policy for further information here
Likewise, Global-e as data controller will communicate to Bimba y Lola as data processor your customer data, so we can prepare, picking and packing your purchase order and help answer any customer claims related to Bimba y Lola’s products.
At any time, you can contact Global-e’s DPO at: [email protected], and request to exercise your rights in accordance with the provisions provided by law.
In addition, your data may also be disclosed to public bodies and authorities (administrative or judicial) in those cases in which a legal regulation thus establishes it.
From which parties we receive Personal Data?
In addition, Global-e shall communicate certain personal information relating to the purchase order of our registered users.
This data transfers is based on our legitimate interest, so we can offer the full range of services available at our Website for registered users, like: the tracking follow up feature, and/or access the order history, among other services.
For these purposes, we will process your personal information according to this Privacy Policy.
International data transfers.
Sometimes, your personal data may be transferred to third parties that may be allocated within and outside the European Economic Area (EEA), and who will act, depending on the case, as data controllers (via transfers of data) or data processors (via access to data).
To ensure the security of personal data, any transfer of personal data that may be carried out by Bimba y Lola will be done adopting any of the guarantees provided in articles 44 to 49 GDPR. These safeguards may include:
- Adequacy decisions: the European Commission has recognised some countries and territories as providing an adequate level of protection, according to GDPR standards. This recognition allows for the free flow of personal data from the EEA to these jurisdictions without additional safeguards. Check out the if your place of residence is covered by an adequacy decision here.
- Standard Contractual Clauses (SCC): For countries without an adequacy decision, Bimba y Lola may use the SCC approved by the European Commission. When applicable, Bimba y Lola’s contractors will be bound by specific SCC for any processing of your personal data. Check out the modernised SCC here .
- Additional Safeguards: according to the circumstances, Bimba y Lola will implement additional measures to ensure that the processing of your personal information is processed following the GDPR standards, like the implementation of Binding Corporate Rules, or asking explicitly for your consent to the proposed transfer. In all cases, Bimba y Lola will provide all the information deemed necessary, including the possible risks of such transfers.
If you need additional information about international data transfers, or you want to know whether your personal information may be transferred, and the security measures that we may apply, please contact us on [email protected]
6.RIGHTS
What are your rights when you provide us with your personal data and how can you exercise them?
You have the right to access your personal data, as well as to request the rectification of inaccurate data or, where applicable, to request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
In certain circumstances, you will be able to request the limitation of the processing of your data, in which case we only will keep them for the exercise or defence of claims.
In certain circumstances and for reasons related to your particular situation, you will be able to oppose the processing of your data. Bimba y Lola will cease to process your data, except for imperative legal reasons, or for the exercise or defence of possible claims, as indicated in Section 2 above.
In the same way, you can exercise your right to data portability, as well as to withdraw the consents given at any time, without this affecting the legality of the processing based on the consent given prior to its withdrawal.
If you wish to exercise any of your rights, you can contact us in writing at our email address [email protected] or our postal address Bimba y Lola, Avenida de Madrid, N.º 133 (36214 – Vigo, Spain). In the existence of any reasonable doubts surrounding the identity of the person exercising their rights, we may request additional information in order to verify the applicant's identity.
A cookie is a file that may be stored on your computer or mobile device with the purpose of storing data that may be updated and recovered by Bimba y Lola. This may include pages you have visited, choices you have made from menus, any specific information you have entered forms and the time and date of your visit. Depending on their use and content, Cookies may be used to recognize users.
Web browsing (cookies)
This Website uses own and third-party cookies to collect information on the use of the Website in order to customise the browsing experience and to improve our services.
First party Cookies are set and controlled by Bima y Lola as the Web’s owner. Third party Cookies are those managed by service providers external to Bimba y Lola.
In addition, based on the period for which the cookies are installed, there may be session and persistent cookies.
- Session Cookies: designed to collect and store data while the user accesses the website. They are usually used in the context of the provision of a service requested by the user on a single occasion.
- Persistent Cookies: these Cookies remain in users’ device and browser for a period of time after the browser session. This period is defined by Bimba y Lola.
In compliance with obligations set out in Section Two of Article 22 of Act 34/2002, of 11 July, the Information Society and Electronic Commerce Services Act, the purpose of this Cookie Policy is to provide information on said cookies so that you can decide on their management and use.
Strictly necessary cookies
These cookies are necessary for the Website to function correctly and cannot be disabled on our systems. They are usually configured to respond to actions you have taken to receive services, such as adjusting your privacy preferences, logging in to the Web and/or app, or filling out forms. You can set your browser to block or alert the presence of these cookies, but some parts of the website and/or app will not work.
| Name | Guest | Type | Duration |
|---|---|---|---|
| __cq_uuid | bimbaylola.com | First-party | 1 year |
| __cq_dnt | www.bimbaylola.com | First-party | 1 day |
| dwsid | www.bimbaylola.com | First-party | 1 day |
| _vis_opt_test_cookie | bimbaylola.com | First-party | 1 day |
| cquid | www.bimbaylola.com | First-party | 1 day |
| _dc_gtm_UA-xxxxxxxx | bimbaylola.com | First-party | 1 day |
| cqcid | www.bimbaylola.com | First-party | 1 day |
| dw_dnt | www.bimbaylola.com | First-party | 1 day |
| _ga_xxxxxxxxxx | bimbaylola.com | First-party | 1 year |
| OptanonConsent | bimbaylola.com | First-party | 1 year |
| _gid | bimbaylola.com | First-party | 1 day |
| dwanonymous_xxxxxxxx | www.bimbaylola.com | First-party | 6 months |
| ga | bimbaylola.com | First-party | 2 years |
| dwac_XXXXX | www.bimbaylola.com | First-party | 1 day |
| OptanonAlertBoxClosed | bimbaylola.com | First-party | 1 year |
| dispatcher | www.bimbaylola.com | First-party | 1 day |
| X-Salesforce-CHAT | d.la2-c1-cdg.salesforceliveagent.com | First-party | 1 day |
| test_cookie | doubleclick.net | Third-party | 1 day |
| IDE | doubleclick.net | Third-party | 1 year |
Targeted cookies
These cookies can be placed throughout the website by third parties. These third parties can use them to create a profile of your interests and show you relevant ads on other sites. If you do not allow these cookies, you will have less targeted advertising.
| Name | Guest | Type | Duration |
|---|---|---|---|
| _fbp | bimbaylola.com | First-party | 3 months |
| _gcl_au | bimbaylola.com | First-party | 2 months |
| _pin_unauth | bimbaylola.com | First-party | 1 year |
| _ttp | bimbaylola.com | First-party | 1 year |
| _tt_enable_cookie | bimbaylola.com | First-party | 1 year |
| sid | www.bimbaylola.com | First-party | 1 day |
| cee | fbapi.bimbaylola.com | First-party | 2 months |
| eupubconsent-v2 | bimbaylola.com | First-party | 1 year |
| __cq_seg | bimbaylola.com | First-party | 1 month |
| uuid | cquotient.com | Third-party | 1 year |
| ar_debug | pinterest.com | Third-party | 1 year |
| _ttp | tiktok.com | Third-party | 1 year |
Performance Cookies
These cookies allow us to count the visits and sources of traffic in order to measure and improve the performance of our website and app. They help us to know which pages are the most or least popular and see how many people visit the Web. If you do not allow these cookies, we will not know when you visited our website and/or app.
| Name | Guest | Type | Duration |
|---|---|---|---|
| _vwo_ds | bimbaylola.com | First-party | 3 months |
| _vwo_sn | bimbaylola.com | First-party | 1 day |
| _vwo_uuid_v2 | bimbaylola.com | First-party | 1 year |
| _vwo_referrer | bimbaylola.com | First-party | 1 year |
| _vwo_uuid | bimbaylola.com | First-party | 10 years |
| _vis_opt_s | bimbaylola.com | First-party | 3 months |
| BrowserId_sec | force.com | Third-party | 1 year |
| CookieConsentPolicy | service.force.com | Third-party | 1 year |
| BrowserId | force.com | Third-party | 1 year |
| LSKey-c$CookieConsentPolicy | service.force.com | Third-party | 1 year |
Functionality cookies
These cookies allow the Web to offer better functionality and customization. They can be established by us or by third parties whose services we have added to our website and app. If you do not allow these cookies, some of our services will not work correctly.
| Name | Guest | Type | Duration |
|---|---|---|---|
| weird_get_top_level_domain | bimbaylola.com | First-party | 1 day |
User consent
When visiting bimbaylola.com, and before starting navigations, you will be warned about the use of cookies, by means of a cookie pop-up notice. In this context, you may accept, refuse and/or manage the use of cookies, as well as visit the Bimba y Lola cookie policy to obtain further information.
Managing cookies setting and withdraw cookie consent
At any time, you can configure your browser to block cookies and delete them, if necessary. However, by opting for this configuration, you may not be able to access certain parts of bimbaylola.com or may not be able to enjoy one or more of Bimba y Lola's services. Unless the browser settings have been configured to reject cookies, the system will produce cookies whenever you access to bimbaylola.com.
Likewise, you may restrict, block or delete the cookies from bimbaylola.com at any time. To do so, you need to must modify the browser settings regarding the use of cookies via the “Preferences”, “Options” or “Tools” menu (the menu names or the method of accessing the cookie options may vary depending on the browser). For more information on how to configure cookies in the most common browsers, we recommend consulting the following links:
- Internet Explorer: Link
- Mozilla Firefox: erase cookies and block cookies
- Google Chrome: Link
- Opera: Link
- Safari: Link
Bimba y Lola reserves the right, at its sole discretion, to modify or replace this Cookies Policy as a result of a regulatory change or technical development. For this reason, we recommend our users to periodically review this policy in order to be properly informed on how we use cookies and what we use them for.
If you have any further question about the use of cookies, you can contact us by email, on the email address indicated above.
9.CHANGES TO THIS PRIVACY POLICY
This Privacy Policy may be modified, updated and replace, at any time, by Bima y Lola, as a result of a regulatory change or technical development. For this reason, we recommend to visit its content periodically, in order to be properly informed on how we process your personal information.