This Privacy Policy outlines how BIMBA Y LOLA, S.L. (hereinafter, "Bimba y Lola" or “us” or “our”) processes the information collected from you when you register or browse the website (hereinafter, the “Website”).
Please read this Privacy Policy thoroughly as it contains important information on your personal data and how we use it.
If you wish to buy any Bimba y Lola products from our Website, your personal data will be processed in line with the Privacy Policy of GLOBAL-E SPAIN, S.L., a company established in accordance with the laws of Spain, with Tax ID B66809377 and registered address at Calle Diputación, 260, 08007 in Barcelona (Spain) (hereinafter, “Global-e”).
In accordance with the information in this Privacy Policy, Global-e will act as the data controller, entering into, managing and executing the purchase contract for our products and customer service.
If you are a registered user, your name, surname, email address and (if provided to Bimba y Lola), your phone number and postal address, will be provided to Global-e by Bimba y Lola in order to complete transaction forms and facilitate the process.
In the event of a discrepancy between the Global-e Privacy Policy and Bimba y Lola Privacy Policy, the Bimba y Lola Privacy Policy will prevail.
1. GENERAL INFORMATION
Bimba y Lola dedicates all its efforts to respecting the privacy and security of users and undertakes to process personal data in accordance with the General Data Protection Regulation ("GDPR"), Law 81 of 26 March 2019 on Personal Data Protection in Panama and other national data protection laws that may be applicable.
Who is the Data Controller?
The data controller is the individual or legal entity that collects personal data and determines the purposes of processing such data.
Processing is understood as any operation or set of operations carried out or not via automated procedures involving personal data or personal data sets.
| DATA CONTROLLER | |
|---|---|
| Corporate name | BIMBA Y LOLA, S.L. ((hereinafter "Bimba y Lola") |
| Registered address | Avenida de Madrid, N.º 133 (36214 – Vigo, Spain) |
| Email: | [email protected] |
Similarly, and in accordance with the aforementioned, Global-e will act as the data controller of your personal data for the purposes of selling and shipping our products and post-sales and customer service.
2. PERSONAL DATA CATEGORIES AND PROCESSING PURPOSES
What type of personal data can we process?
As a user, you can use some of the website features without providing any personal information. However, in certain sections you may need to provide personal data to subscribe to or access certain services, or receive newsletters or other useful information.
All personal data collected via the Website will be duly added to databases supervised by Bimba y Lola, which will be recorded in our data processing activities record.
Please note that all fields marked with an asterisk in forms are mandatory. As such, if the information requested is not provided, we will not be able to carry out the intended service.
The categories of personal data we collect are outlined below:
(1) Registration as a Bimba y Lola user: When you complete the registration process on our
website, your personal data is processed to create your user account. Here, Bimba y Lola may
obtain your explicit consent to receive commercial communications.
(2) Order creation: When you order any products from Bimba y Lola your data will be processed
so that we can prepare it. This may include your full name, address, telephone number and
shipping address, as well as any other information we may need to prepare the shipping label
and other international shipping documents. This information will be collected by our authorized
seller, Global-e, under its respective Privacy Policy, and Terms and Conditions of Sale. See
Section 5 for more information on Global-e. See the
Global-e Privacy Policy
for further information on the processing of your personal data.
(3) Gift option: When you order Bimba y Lola's products as a gift, your personal data will be
processed in order to package and prepare your order and send the BIMBA Y LOLA card with a
personalized message to your chosen gift recipient.
(4) Marketing communications and newsletters: If you subscribe to our Newsletter, your
personal data will be processed in order to provide you this service. Similarly, we may process
your contact details to send you information on similar products or services. In both cases, we
will delete your email address if and when you decide not to receive such communications,
unless it is also required for one of the purposes outlined in this Privacy Policy.
(5) Marketing: We can collect information on your online searches (clicks and visualizations).
(6) Complaints channel: Bimba y Lola will process personal data provided voluntarily by the
complainant in their communication. If the personal data contains special data categories or
data relating to health, religious beliefs or ethnic origin that are not necessary for managing
your complaint, Bimba y Lola will refrain from collecting such data or, if accidentally collected,
delete it.
(7) Information on the use of our Website: We also use cookies to collect certain data when you
visit our website. Personal data includes the identification of the user's device and browsing
habits, among others (see section 7).
Why do we process your personal data?
In accordance with GDPR and Law 81 of 26 March 2019, please note that at Bimba y Lola, the aforementioned data is strictly necessary for the following purposes:
(1) To process your registration as a Bimba y Lola user and manage your profile.
(2) To manage the product shipping process.
(3) To manage the gift option as one package and send a customized BIMBA Y LOLA card.
(4) To send marketing communications about Bimba y Lola products (emails, phone calls, SMS,
PUSH notifications, post, etc.).
(5) To create commercial profiles using information from internal and external sources, with the aim
of sending you personalized advertising and analyzing your purchasing behavior. This
information allows Bimba y Lola to improve the customer relationship and offer better products
and services.
(6) Users are free to provide their personal data when using the Complaints Channel. Bimba y Lola
will only process and use personal data to contact the customer for the purposes of the
investigation, and always under the strictest confidentiality. If you prefer not to provide your
contact details, we will be unable to collect more of your data or, ultimately, inform you of the
results of the investigation.
(7) To improve our products and services. See Section 7 below.
Bimba y Lola may also process your personal data to fulfill legal obligations we are required to comply with, or have agreed to. Similarly, we may need to provide information to local security forces and bodies or other government authorities, or to protect the rights and security of our property, company, employees and customers. Among other obligations, we may need to process your personal data for one of the following purposes:
(8) Abuse and fraud prevention, including fraudulent activities, denial-of-service attacks and other
threats.
(9) Disclosure of data to public bodies and authorities (administrative or judicial), as required by
legal and/or statutory provisions.
3. PERSONAL DATA RETENTION PERIOD
How long will we keep Personal Data?
Your data will be held for the period required (i) to fulfil the purpose for which it was collected, and/or (ii) until you request its erasure (see section 6 below).
Subsequently, data will be stored securely and duly blocked only for the time required to comply with our legal obligations. Furthermore, some data may be retained (if requested) in relation to the recognition and/or prosecution of administrative, judicial or criminal proceedings
4. LAWFUL BASIS
What is the lawful basis of the processing of Personal Data?
The legal bases for processing your personal data corresponding to each of the purposes (1) to (9) included in Section 2 above (“Purposes”) are as follows:
| Purpose (1) | The legal basis for processing is the explicit consent provided to Bimba y Lola when entering your personal data during the registration process. |
| Purpose (2) | The legal basis for this processing is to execute a contract relating to your order and prepare it prior to shipping. |
| Purpose (3) | The legal basis for processing is the explicit consent provided to Bimba y Lola to prepare your gift order. |
| Purpose (4) | (i) The legal basis for this processing is consent given by the user, marking a box in specific forms. (ii) Similarly Bimba y Lola, based on their legitimate interest, may send information on products or services similar to those contracted by users and customers. |
| Purpose (5) | We use this personal data based on our legitimate interest to improve our products and services. |
| Purpose (6) | The legal basis for data processing is compliance with the relevant legal obligations established by Directive (EU) 2019/1937, national transposition laws and any other applicable national law. |
| Purpose (7) | We use this personal data based on our legitimate interest to improve our products and services. |
| Purpose (8) and (9) | The legal basis for data processing is compliance with legal obligations. |
5. DATA PROCESSORS AND RECIPIENTS
In some cases, your personal data may be transferred to third parties and/or accessed by our service providers when necessary for the correct provision of services and fulfillment of the purposes for which the data was obtained.
These third parties may process your personal data on behalf of Bimba y Lola (Data Processors) and/or on their own behalf (Data Recipients).
Which third parties will have access to Personal Data?
Data Processors: Bimba y Lola's data processors may access the data collected for the following purposes (among others):
(i) technology and analytics service providers, to improve our services.
(ii) digital marketing and advertising providers that, in certain cases, may act as joint controllers.
(iii) other third parties that we may contract for the proper provision of our services.
In all cases, Bimba y Lola will already have, or will have in place, a data processing agreement to protect your personal data.
To which recipients will Personal Data be communicated?
Data recipients:
(i) Global-e Spain, S.L., or "Global-e," a Spanish company, with registered office at Calle
Diputación, Nº 260, 08007 Barcelona, Spain, acting as an authorized seller of Bimba y Lola.
Thus, when a registered user or unregistered guest orders an item from our website, they will
be redirected to the Global-e website to complete the purchase.
Similarly, Global-e will send their customer details to Bimba y Lola, so that the order can be
prepared and packed.
You can, at any time, contact the Global-e data protection or privacy officer at:
[email protected] and ask to exercise your rights in accordance with the provisions
set out by law.
In addition, your data may also be disclosed to public bodies and authorities (administrative or judicial) in those cases in which a legal regulation thus establishes it.
From whom do we receive personal data?
In addition, Global-e may send us information on our registered users relating to orders and purchase orders. We have a legitimate interest for this transfer of data: it means we can offer all functionalities to our registered users including the order tracking option and viewing their purchasing history, among others.
International data transfers.
Your personal data may sometimes be transferred to third parties that may be within or outside the territory of the Republic of Panama, the European Economic Area (EEA), and that will act as data controllers (through data transfers) or data processors (through access to data).
To guarantee the security of personal data, any potential transfer of personal data by Bimba y Lola will be carried out in line with certain guarantees provided for in Articles 44 to 49 GDPR. These guarantees may include:
- Adequacy decisions: the European Commission has acknowledged that some countries and territories offer an adequate level of protection in accordance with GDPR standards. This recognition allows the free flow of personal data from the EEA to these jurisdictions without additional safeguards. Check whether your place of residence is covered by an adequacy decision: :
- Standard Contractual Clauses (SCC): For countries without an adequacy decision, Bimba y Lola can use the SCCs approved by the European Commission. Where applicable, Bimba y Lola suppliers will be subject to standard contractual clauses for the processing of personal data. Check the latest updated SCC.
- Additional safeguards: depending on the circumstances, Bimba y Lola will implement additional measures to ensure personal data is processed in accordance with GDPR standards, such as the implementation of Binding Corporate Rules or requesting explicit consent for the proposed transfer. In all cases, Bimba y Lola will provide all information deemed necessary, including any potential risks of such transfers.
Similarly, the transfer of original or stored confidential, sensitive or restricted personal data within the Republic of Panama subjected to cross-border processing will be carried out in accordance with Article 5 of Law 81 of 2019 and Articles 51 to 53 of the Executive Decree No. 285 of 2021, regulating Law 81 of 2019.
If you need further information on international data transfers or would like to know whether your personal information may be transferred and which security measures may apply, please contact us at [email protected]
6. RIGHTS
What are your rights when you provide us with your personal data, and how can you exercise them?
You have the right to access your personal data, as well as to request the rectification of inaccurate data or, where applicable, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, you will be able to request the limitation of the processing of your data, in which case we only will keep it for the exercise or defense of claims.
In certain circumstances and for reasons related to your particular situation you may oppose the processing of your data. Bimba y Lola will cease to process your data, except for imperative legal reasons or the exercise or defense of potential claims, as outlined in Section 2.
Similarly, you can exercise your right to data portability, as well as to withdraw the consents given at any time, without this affecting the legality of the processing based on the consent granted prior to its withdrawal.
Bimba y Lola processes your personal data confidentially and guarantees the exercise of your rights.
If you wish to exercise any of your rights, please contact us at [email protected] or by post to Bimba y Lola, Avenida de Madrid, No. 133 (36214 – Vigo, Spain). If there are any reasonable doubts surrounding the identity of the person exercising their rights we may request additional information in order to verify the applicant's identity.
As part of your rights, you may visit the authority regulating Personal Data Protection, the National Transparency and Access to Information Authority “ANTAI” and file your claims in accordance with the provisions of Law 81 of 2019.
7. THIRD PARTY DATA
When you provide us with a third party's information for a gift order you confirm that you are authorized to process such personal data and guarantee that you have informed the third party of the purposes of, and how we process, your personal data, in accordance with the provisions of this Privacy Policy and, where applicable, the Global-e Privacy Policy.
A cookie is a file that can be stored on your computer or mobile device in order to store data that may be updated and retrieved by Bimba y Lola. This may include the pages you have visited, the choices you have made, any specific information you have entered on forms, and the time and date of your visit. Depending on their use and content, Cookies may be used to recognize users.
Web browsing (cookies)
This Website uses first and third-party cookies to obtain information on your use of the Website, in order to personalize your browsing experience and improve our services.
First-party cookies are those established and controlled by Bimba y Lola as the website owner. Third- party cookies are those managed by service providers outside Bimba y Lola.
Based on the duration the cookies are installed, there may also be session cookies and persistent cookies.
- Session Cookies: designed to collect and store data while the user accesses the website. They are generally used to provide a service requested by the user on a single visit.
- Persistent Cookies: these Cookies remain on the user's device and browser for a period of time after the browsing session has ended. This period is defined by Bimba y Lola.
In compliance with obligations set out in Section Two of Article 22 of Act 34/2002, of 11 July, the Information Society and Electronic Commerce Services Act, the purpose of this Cookie Policy is to provide information on said cookies so that you can decide on their management and use.
Strictly necessary cookies
These cookies are necessary for the website to function correctly and cannot be disabled on our systems. They are usually configured to respond to actions you have taken to receive services, such as adjusting your privacy preferences, logging in to the website, or filling out forms. You can set your browser to block or alert you to the presence of these cookies, but some parts of the website and/or app will not work.
| Name | Guest | Type | Duration |
|---|---|---|---|
| __cq_uuid | bimbaylola.com | First-party | 1 year |
| __cq_dnt | www.bimbaylola.com | First-party | 1 day |
| dwsid | www.bimbaylola.com | First-party | 1 day |
| _vis_opt_test_cookie | bimbaylola.com | First-party | 1 day |
| cquid | www.bimbaylola.com | First-party | 1 day |
| _dc_gtm_UA-xxxxxxxx | bimbaylola.com | First-party | 1 day |
| cqcid | www.bimbaylola.com | First-party | 1 day |
| dw_dnt | www.bimbaylola.com | First-party | 1 day |
| _ga_xxxxxxxxxx | bimbaylola.com | First-party | 1 year |
| OptanonConsent | bimbaylola.com | First-party | 1 year |
| _gid | bimbaylola.com | First-party | 1 day |
| dwanonymous_xxxxxxxx | www.bimbaylola.com | First-party | 6 months |
| ga | bimbaylola.com | First-party | 2 years |
| dwac_XXXXX | www.bimbaylola.com | First-party | 1 day |
| OptanonAlertBoxClosed | bimbaylola.com | First-party | 1 year |
| dispatcher | www.bimbaylola.com | First-party | 1 day |
| X-Salesforce-CHAT | d.la2-c1-cdg.salesforceliveagent.com | First-party | 1 day |
| test_cookie | doubleclick.net | Third-party | 1 day |
| IDE | doubleclick.net | Third-party | 1 year |
Specific cookies
These cookies can be placed throughout the website by third parties. These third parties can use them to create a profile of your interests and show you relevant advertisements on other sites. If you do not allow these cookies, your advertising will be less targeted.
| Name | Guest | Type | Duration |
|---|---|---|---|
| _fbp | bimbaylola.com | First-party | 3 months |
| _gcl_au | bimbaylola.com | First-party | 2 months |
| _pin_unauth | bimbaylola.com | First-party | 1 year |
| _ttp | bimbaylola.com | First-party | 1 year |
| _tt_enable_cookie | bimbaylola.com | First-party | 1 year |
| sid | www.bimbaylola.com | First-party | 1 day |
| cee | fbapi.bimbaylola.com | First-party | 2 months |
| eupubconsent-v2 | bimbaylola.com | First-party | 1 year |
| __cq_seg | bimbaylola.com | First-party | 1 month |
| uuid | cquotient.com | Third-party | 1 year |
| ar_debug | pinterest.com | Third-party | 1 year |
| _ttp | tiktok.com | Third-party | 1 year |
Performance Cookies
These cookies allow us to count the visits and sources of traffic in order to measure and improve our Website and app performance. They help us to know which pages are the most or least popular, and see how many people visit the site. If you do not allow these cookies, we will not know when you visited our website and/or app.
| Name | Guest | Type | Duration |
|---|---|---|---|
| _vwo_ds | bimbaylola.com | First-party | 3 months |
| _vwo_sn | bimbaylola.com | First-party | 1 day |
| _vwo_uuid_v2 | bimbaylola.com | First-party | 1 year |
| _vwo_referrer | bimbaylola.com | First-party | 1 year |
| _vwo_uuid | bimbaylola.com | First-party | 10 years |
| _vis_opt_s | bimbaylola.com | First-party | 3 months |
| BrowserId_sec | force.com | Third-party | 1 year |
| CookieConsentPolicy | service.force.com | Third-party | 1 year |
| BrowserId | force.com | Third-party | 1 year |
| LSKey-c$CookieConsentPolicy | service.force.com | Third-party | 1 year |
Functionality cookies
These cookies allow the site to offer better functionality and customization. They can be established by us or by third parties whose services we have added to our Website and app. If you do not allow these cookies, some of our services will not work correctly.
| Name | Guest | Type | Duration |
|---|---|---|---|
| weird_get_top_level_domain | bimbaylola.com | First-party | 1 day |
User consent
Before you start browsing the www.bimbaylola.com/pa_es/ website you will be warned about the use of cookies via a pop-up notification. You can accept, reject and/or manage the use of cookies, and visit the Bimba y Lola's Cookie Policy for further information.
Managing cookie settings and withdrawing cookies consent
You can configure your browser at any time to block and delete cookies if necessary. However, if you choose such settings you may not be able to access certain parts of our website or enjoy one or several Bimba y Lola services. Unless browser settings have been configured to reject cookies, the system will produce cookies whenever you access the website.
You can, at any time, restrict, block or delete the cookies on this Website. To do so, you can change your web browser cookie settings via the 'Preferences', 'Options' or 'Tools' menu (the names of menus and access to cookie options may vary depending on your web browser). For more information on how to set up cookies in the main web browsers, check the following links:
- Internet Explorer: Link
- Mozilla Firefox: delete cookies and block cookies
- Google Chrome: Link
- Opera: Link
- Safari: Link
Bimba y Lola reserves the right to amend or replace, at its discretion, this Cookie Policy in response to a regulatory change or technological developments. We therefore recommend that you periodically review this policy in order to be duly informed about how and why we use cookies.
If you have any other questions about the use of cookies you can email us at the aforementioned address.
9. CHANGES TO THIS PRIVACY POLICY
This Privacy Policy may be amended, updated or replaced at any time by Bimba y Lola in response to a regulatory change or technological developments. We therefore recommend that you periodically review the content in order to be duly informed about how and why we use cookies.