Privacy policy
The Privacy Policy is part of the Legal Notice that governs the Website, together with the Cookies Usage Regulations.
The Website is owned by Ambasaguas 2013, S.L. and complies with the requirements derived from Law 34/2002, of July 11, on Information Society Services and Electronic Commerce, and current regulations regarding the protection of personal data and, in particular, Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free movement of such data.
Ambasaguas 2013, S.L. reserves the right to modify or adapt this Privacy Policy at any time. Therefore, we recommend that you review it each time you access the Website. In the event that the user has registered on the website and accesses their account or profile, they will be informed upon access if there have been substantial modifications in relation to the processing of their personal data.
Who is the DATA CONTROLLER?
The data collected or voluntarily provided by you through the Website, either by browsing it, as well as all those that you may provide to us in contact forms, via email, or by phone, will be collected and processed by the Data Controller, whose details are indicated below:
| Identity | Ambasaguas 2013, S.L. |
| VAT ID: | B99385593 |
| Postal address | Carretera de Valencia, Km. 6,300. Nave 116 D-E. - 50410 – Cuarte de Huerva (ZARAGOZA) |
| DPO Contact: (if applicable) | hello@bloomandyoubrand.com |
| URL: | www.bloomandyoubrand.com |
If, for any reason, you wish to contact us regarding any matter related to the processing of your personal data or privacy (with our Data Protection Officer), you can do so through any of the means indicated above.
When, why, who, how, for what purpose, and for how long do we process your personal data?
When and why?
You can browse most of our websites without providing any personal information, but in some cases, this information is necessary to provide you with the electronic services you request.
If we need to collect personal data to provide you with the service, we will process the information according to the policy set out in this document and the specific conditions of the service in question (if any), which contain specific privacy statements about data use and inform you why, for what purpose, how, for how long we process your personal data, and what security measures we implement.
Who collects your data?
The collection and processing of personal data that you may provide to us are carried out by our entity or, where appropriate, its data processors. In the latter case, these processors are third parties who are contractually required to comply with the law and implement appropriate security measures to protect such data.
For what purpose?
The personal data we request from you, or that you provide to us as a result of your browsing, serves to manage, provide, and improve the services you have requested.
For example, we will process your personal data to manage inquiries you send us, to manage your participation in personnel selection processes, to send you electronic communications if you request them, and/or to compile statistics.
In this sense, we request an email when you use our contact forms on the web. We only collect the sender's personal data necessary to respond to you.
When you subscribe to our newsletters, we also request an email to provide you with the service; in any case, you can unsubscribe from the service whenever you wish, and we provide you with means to do so.
How do we process your data?
We only collect personal information to the extent necessary to achieve a specific purpose. The information will not be used for a purpose incompatible with that described.
We only disclose information to third parties if it is necessary for the fulfillment of the service's purpose and only to those who need to know it. All of this is so that the service can be provided by processing your personal data with confidentiality and reserve, in accordance with current legislation.
In any case, our entity adopts security measures to protect data against possible abuse or unauthorized access, alteration, or loss.
How long do we store your data?
We store data only for the time necessary to fulfill the purpose for which it was collected or for its subsequent processing. The data retention period will depend on the service, and the duration of personal data processing will be indicated for each service.
At the end of this document, we provide a table with specific retention periods.
For what purposes will we process your personal data?
- Customers:
We process your personal data for the purpose of (i) managing your purchase or service provided; (ii) maintaining the contractual and pre-contractual relationship for invoicing, preparing quotes, and monitoring them, as well as sending you information by electronic means related to your request; (iii) sending you commercial information by electronic means that may be of interest to you, provided that there is express authorization; (iv) we may create a commercial profile based on the information you provide us in order to offer you products and services in accordance with your interests. No automated decisions will be made based on such a profile.
- Suppliers:
We process your personal data for the purpose of (i) invoicing and (ii) maintaining commercial contact, (iii) as well as sending you information by electronic means about our products or services.
- Website or email contacts:
We process your personal data for the purpose of (i) answering your inquiries and requests; (ii) managing the requested service or processing your order; (iii) sending you commercial information by electronic means that may be of interest to you, provided that there is express authorization; (iv) we may create a commercial profile based on the information you provide us in order to offer you products and services in accordance with your interests. No automated decisions will be made based on such a profile.
- Social media contacts:
We process your personal data for the purpose of (i) answering your inquiries and requests, (ii) managing the requested service, answering your request or processing your order, and (iii) interacting with you and creating a community of followers.
- Job applicants:
We process your personal data for the purpose of (i) including you in recruitment selection processes, (ii) inviting you for job interviews and evaluating your application, (iii) communicating your resume to group companies, collaborators, or affiliates with the sole objective of involving you in their selection processes, provided you have given us your consent.
- Participants in our contests:
We process your personal data for the purpose of managing your participation in the contests we organize, as well as publicizing the contest winners and the award ceremony.
Award-winning participants may be photographed or video-recorded and disseminated through any media, our website, or other communication channels. Consequently, it is possible that the image of participants may be captured, recorded, and/or reproduced as an accessory to the main activity.
- Website users:
By browsing our website, we collect information about your browser, your device, and your use of our website, as well as any information you provide us when using our website. Anonymously or in aggregated form, we may record the IP address (the identification number of the device's Internet access, which allows devices, systems, and servers to recognize and communicate with each other).
The purpose of the processing is (i) to gain practical knowledge of how users use our website to allow us to improve it; (ii) to perform statistical analyses that help us improve our commercial strategy; (iii) to perform website performance analytics, and (iv) for technical security and system diagnostics.
The data we obtain is not related to a specific user and will be stored in our databases.
The aforementioned data, as well as any personal data you may provide to us, are stored through cookies collected in a pseudonymized format and are subject to objections to the processing of this personal data, as detailed in the Cookie Policy.
You can consult the Cookie Policy in the corresponding section.
Your browsing information may be stored by Google Analytics, so we refer to Google's Privacy Policy, as it collects and processes such information. Policies privacy.
Likewise, our website may provide the utility of Google Maps, which could access your location, if you allow it, in order to provide you with greater specificity about the distance and/or routes to our locations. In this regard, we refer to the privacy policy used by Google Maps to understand the use and processing of such data Policies privacy.
In order to offer information or services of interest based on the user's location, we may access data related to the geolocation of the user's device in cases where the user's settings allow it.
The Portal may offer functionalities to share content through third-party applications, such as Facebook or Twitter. These applications may collect and process information related to the user's browsing on different websites. Any personal information collected through these applications may be used by other users of the same. Your interactions are subject to the privacy policies of the companies that provide the applications.
The Portal may host blogs, forums, and other social media applications or services to facilitate the exchange of knowledge and content. Any personal information provided by the user may be shared with other users of that service, over whom we have no control.
What is the legal basis for processing your data?
- Customers:
We process your personal data for the purpose of (i) managing your purchase or service provided; (ii) maintaining the contractual and pre-contractual relationship for invoicing, preparing quotes, and monitoring them, as well as sending you information by electronic means related to your request; (iii) sending you commercial information by electronic means that may be of interest to you, provided that there is express authorization; (iv) we may create a commercial profile based on the information you provide us in order to offer you products and services in accordance with your interests. No automated decisions will be made based on such a profile.
- Suppliers:
We process your personal data for the purpose of (i) invoicing and (ii) maintaining commercial contact, (iii) as well as sending you information by electronic means about our products or services.
- Website or email contacts:
We process your personal data for the purpose of (i) answering your inquiries and requests; (ii) managing the requested service or processing your order; (iii) sending you commercial information by electronic means that may be of interest to you, provided that there is express authorization; (iv) we may create a commercial profile based on the information you provide us in order to offer you products and services in accordance with your interests. No automated decisions will be made based on such a profile.
- Social media contacts:
We process your personal data for the purpose of (i) answering your inquiries and requests, (ii) managing the requested service, answering your request or processing your order, and (iii) interacting with you and creating a community of followers.
- Job applicants:
We process your personal data for the purpose of (i) including you in recruitment selection processes, (ii) inviting you for job interviews and evaluating your application, (iii) communicating your resume to group companies, collaborators, or affiliates with the sole objective of involving you in their selection processes, provided you have given us your consent.
- Participants in our contests:
We process your personal data for the purpose of managing your participation in the contests we organize, as well as publicizing the contest winners and the award ceremony.
Award-winning participants may be photographed or video-recorded and disseminated through any media, our website, or other communication channels. Consequently, it is possible that the image of participants may be captured, recorded, and/or reproduced as an accessory to the main activity.
- Website users:
By browsing our website, we collect information about your browser, your device, and your use of our website, as well as any information you provide us when using our website. Anonymously or in aggregated form, we may record the IP address (the identification number of the device's Internet access, which allows devices, systems, and servers to recognize and communicate with each other).
The purpose of the processing is (i) to gain practical knowledge of how users use our website to allow us to improve it; (ii) to perform statistical analyses that help us improve our commercial strategy; (iii) to perform website performance analytics, and (iv) for technical security and system diagnostics.
The data we obtain is not related to a specific user and will be stored in our databases.
The aforementioned data, as well as any personal data you may provide to us, are stored through cookies collected in a pseudonymized format and are subject to objections to the processing of this personal data, as detailed in the Cookie Policy.
You can consult the Cookie Policy in the corresponding section.
Your browsing information may be stored by Google Analytics, so we refer to Google's Privacy Policy, as it collects and processes such information. Policies privacy.
Likewise, our website may provide the utility of Google Maps, which could access your location, if you allow it, in order to provide you with greater specificity about the distance and/or routes to our locations. In this regard, we refer to the privacy policy used by Google Maps to understand the use and processing of such data Policies privacy.
In order to offer information or services of interest based on the user's location, we may access data related to the geolocation of the user's device in cases where the user's settings allow it.
The Portal may offer functionalities to share content through third-party applications, such as Facebook or Twitter. These applications may collect and process information related to the user's browsing on different websites. Any personal information collected through these applications may be used by other users of the same. Your interactions are subject to the privacy policies of the companies that provide the applications.
The Portal may host blogs, forums, and other social media applications or services to facilitate the exchange of knowledge and content. Any personal information provided by the user may be shared with other users of that service, over whom we have no control.
What is the legal basis for processing your data?
- Customers:
The legal basis for processing your data is (i) the execution of a contract and maintenance of the contractual relationship and (ii) your consent, which is requested for sending offers of products and services through electronic means, without the withdrawal of this consent in any case conditioning the execution of the contract.
- Suppliers:
The legal basis for processing your data is (i) the execution of a contract to which the data subject is a party or for the application of pre-contractual measures.
- Website or email contacts:
The legal basis for processing your data is (i) the consent of the data subject.
In cases where it is necessary to complete a form and click on the "send" button to make a request, doing so necessarily implies that you have been informed and have expressly given your consent to the content of the clause annexed to said form or acceptance of the privacy policy.
All our forms have a checkbox that must be ticked to access the services offered.
The purposes of the processing will be the following:
a) To manage inquiries or requests for information that you send us through the Website, email, or telephone.
b) Sending communications, special promotions, news, or actions that may be of interest to you or that you request, including by electronic means. As this is an ancillary purpose to the main one, you must check the box provided for this purpose.
The personal data you provide us through this means will not be communicated to third parties, and Ambasaguas 2013, S.L. will directly respond to these types of inquiries.
- Social media contacts:
The legal basis for processing your data is the acceptance of the contractual relationship with the corresponding social network provider, expressed by registering on their application and according to their privacy policies, which are external to us.
- Work with us:
In the event that you provide us with your curriculum vitae, either through the Website, email, or physically at the address or any location of Ambasaguas 2013, S.L., it will be incorporated into its database. The curriculum will be stored for a period of 1 year, after which, if we have not contacted you, it will be deleted.
The legal basis for processing will be based on the express consent granted by the interested party for the processing of the data contained in the curriculum by submitting it and checking the box enabled for this purpose.
The purpose of the processing is to include you in current and future selection processes of Ambasaguas 2013, S.L. or any entity belonging to the business group.
In the event that, ultimately, the interested party joins Ambasaguas 2013, S.L. or any of the entities belonging to the business group as an employee, their data will be incorporated into a database owned by the same, in order to internally manage the employee-employer relationship.
- Newsletter Subscription:
The Website allows the option to subscribe to the Ambasaguas 2013, S.L. Newsletter. To do this, you must provide us with an email address to which it will be sent.
This information will be stored in a database of Ambasaguas 2013, S.L. where it will remain registered until the interested party requests its unsubscription or, where appropriate, Ambasaguas 2013, S.L. ceases to send it.
The legal basis for processing these personal data is the express consent given by all interested parties who subscribe to this service by checking the box intended for this purpose.
Email data will only be processed and stored for the purpose of managing the sending of the Newsletter by users who request it.
- Participants in our contests:
The legal basis for processing your data is your consent when registering for the contest and accepting the privacy policy and the contest rules.
The personal data collected will not be transferred to third parties.
- Website users:
The legal basis for data processing is our (i) legitimate interest in understanding our users' browsing habits to adapt to their interests and improve our relationship with them; as well as (ii) your consent when browsing our website and accepting the terms of use of cookies.
To whom will your data be communicated?
Your data will not be transferred to third parties unrelated to the service we provide, except where legally required. Specifically, it will be communicated to the State Tax Administration Agency and to banks and financial institutions for the collection of the service provided or product acquired.
Your data may also be communicated to our service providers when necessary for the execution of the contract. In these cases, the data processor has contractually committed to use the data only for the purpose that justifies the processing and to maintain adequate security measures.
What security measures do we apply?
You can rest assured, we have adopted appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability in the processing of your personal data that we carry out, specifically those that prevent the loss, misuse, alteration, unauthorized access, and theft of personal data.
What are your rights when you provide us with your data?
You can exercise your rights of access, rectification, erasure, portability, restriction, or opposition to the processing of your data, including the right to withdraw your consent, as detailed below:
Right of access: You can ask us if we are processing your data and how.
Right of rectification: You can ask us to update your personal data if it is incorrect, and delete it if you so wish.
Right to restriction of processing: In this case, it will only be retained by us for the exercise or defense of claims.
Right to object: Following your request to object to the processing, we will stop processing the data in the manner you indicate, unless there are compelling legitimate reasons or the exercise or defense of possible claims requires continued processing.
Right to data portability: If you want your data to be processed by another company, we will facilitate the portability of your data to the new controller.
Right to erasure: You can request that we delete your data when it is no longer necessary for processing, you withdraw your consent, the processing is unlawful, or there is a legal obligation to do so. We will analyze the situation and apply the law.
If you need more information about your recognized rights under the law and how to exercise them, we recommend that you contact the Spanish Data Protection Agency, which is the supervisory authority for data protection.
You can contact the Data Protection Officer before filing a complaint against the data controller with the AEPD.
In the event that we have not addressed the exercise of your rights, you can file a complaint with the Spanish Data Protection Agency.
We have forms for exercising rights that can be requested by email at the address mentioned above; you can also use those prepared by the Spanish Data Protection Agency or third parties. These forms must be electronically signed or accompanied by a photocopy of your ID. If acting through a representative, the same must be accompanied by a copy of their ID or with an electronic signature.
The forms must be submitted in person or sent by postal mail or email to the addresses listed in the "Controller" section.
The maximum period for resolution is one month from the receipt of your request.
How long will we keep your data?
Personal data will be kept as long as you maintain a connection with us.
Upon termination, the personal data processed for each of the indicated purposes will be kept for the legally established periods. If there is no such legal period, until the interested party requests its deletion or revokes the granted consent, or for the period that a judge or court may require them, taking into account the statute of limitations for judicial actions.
For each processing or data type, we provide a specific period, which you can consult in the following table:
Clients
| Document | Retention |
| Invoices | 10 years |
| Contracts | 5 years |
Human Resources
| Document | Retention |
| Payroll, TC1, TC2, etc. | 10 years |
| Resumes | Until the end of the selection process, and 1 more year with your consent. |
|
Contracts Temporary worker data |
4 years |
| Employee file | Up to 5 years after leaving. |
Marketing
| Document | Retention |
| Databases or website visitors. | For the duration of the processing. |
Suppliers
| Document | Retention |
| Invoices | 10 years |
| Contracts | 5 years |
Access control and video surveillance
| Document | Retention |
| Visitor list | 30 days |
| Videos |
30 days blocking 3 years destruction |
Accounting
| Document | Retention |
| Books and Accounting Documents. | 6 years |
Tax
| Document | Retention |
| Management of company administration, rights and obligations related to tax payment. | 10 years |
Health and Safety
| Document | Retention |
| Employee Medical Records | 5 years |
Insurance
| Document |
Retention |
| Insurance policies |
6 years (general rule) 2 years (damages) |
Purchases
| Document | Retention |
| Record of all deliveries of goods or provision of services, intra-community acquisitions, imports and exports for VAT purposes. | 5 years |
LOPD
| Document | Retention |
| Processing of personal data | 3 years |
| Personal data of employees stored on networks, computers, and communication equipment used by them, access controls, and internal management/administration systems |
