1. Identity of the data controller
The controller responsible for processing your personal data is HOMELY GROUP PROGRAM SYSTEM SL, in accordance with the applicable data protection legislation (EU Regulation 679/2016 and Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights of the Kingdom of Spain).
Our contact details are:
- HOMELY GROUP PROGRAM SYSTEM SL
- C/ Pablo Iglesias 63, Baixos 13, 08302 - Mataró .
- Email: info@bedloop.com
2. Contact details of the Data Protection Officer
To make inquiries and obtain any information related to the processing of your personal data, contact the Data Protection team at Cartañá Abogados y Consultores at any time.
The email address where you can reach us is: abogados@cartana.es
3. Collection and processing of the data you provide: type, purpose, and legal basis
We collect and process your data in order to establish a contractual relationship and manage the services we provide to you. The data stored includes your name, addresses provided, contact details, and any information of your own or of third parties that you provide to us or that we may add to your file in order to provide you with the contracted services in defense of your interests. The legal basis for processing your data is (Art. 6(1)(b) GDPR) (necessary for the performance of a contract or pre-contract).
In addition, we use your contact details to keep you permanently informed about the progress of your files. This is done to fulfill a contractual obligation in accordance with (Art. 6(1)(b) GDPR) or to safeguard our legitimate interests in accordance with (Art. 6(1)(f) GDPR). This legitimate interest lies in the interest of upholding contractual data protection duties, as well as ensuring your awareness in order to build trust in our services.
If necessary, we process your data, such as technical data associated with the device you use and data about your browsing behavior, beyond the purposes of the contract in order to protect legitimate interests in accordance with (Art. 6(1)(f) GDPR), to develop and improve our offerings and manage business activities, especially when we use cookies or other service management systems within the user area of the website.
In addition, there is a legitimate interest in maintaining risk management and compliance within HOMELY GROUP PROGRAM SYSTEM SL. In the context of the legitimate interest under (Art. 6(1)(f) GDPR), we also use your data to inform you about legislative developments and updates on our new and similar services and products. In exceptional cases, we will process your personal data for direct marketing purposes based on our legitimate interest under (Art. 6(1)(f) GDPR), and if you are not our client, we will request your consent under (Art. 6(1)(a) GDPR).
When you make use of free services, such as downloading a report or publication provided as legal-update newsletters, we also obtain your consent under (Art. 6(1)(a) GDPR) (consent), for advertising purposes.
You therefore agree that we may inform you by post, telephone, or email about the services provided by HOMELY GROUP PROGRAM SYSTEM SL.
In addition, any associated company that has contributed to the creation of the free service (technical document/publication) may also advertise through the aforementioned advertising channels. You may withdraw your advertising consent at any time at info@bedloop.com.
If you do not wish to receive further advertising from an associated company, please send your revocation directly to that company.
In addition to the personal data we receive directly from you, we also process and collect data to supplement and validate it through our own research in accordance with (Art. 14 GDPR). The legal basis for this is the principle of data accuracy under (Art. 5(1)(d) GDPR), as well as the protection of our legitimate interests in order to verify and manage your files in accordance with (Art. 6(1)(f) GDPR). The data is used exclusively within the scope of the purposes set out herein.
If you register for an event or webinar produced or managed by us, or in which we participate as a sponsor or one of our professionals is a speaker, the data you provide will be used for the purpose of participating in the event.
The data you provide allows us to register you for the event according to your own specifications, contact you for this purpose, and thus enable the event to run smoothly.
The aim is to make your participation as enjoyable as possible, to enable exchanges between participants during and after the event, and to provide you with information about products and services (considering Art. 47 GDPR).
For some events, we may contact you afterward for promotional purposes. We may use your data for advertising purposes, to inform you about similar offers and products, which is a legitimate interest under (Art. 6(1)(f) GDPR).
In this regard, we have carried out the balancing exercise required by data protection law and comply with the general obligations under the GDPR accountability principle.
We will process your data to inform you about HOMELY GROUP PROGRAM SYSTEM SL's services by post, telephone, or email. The legal basis for this data processing is Art. 6.1(a) (consent), Art. 6(1)(b) GDPR (performance of a contract), Art. 21 of Spanish Law 24/2002 on Information Society Services, and, in any case, the existence of a legitimate interest under (Art. 6(1)(f) GDPR).
In order to prevent corruption and money laundering, we collect and document your personal data as required by the Anti-Money Laundering Law, which specifies the type of data collected and the retention period.
The processing of your personal data is carried out due to a legal obligation in accordance with (Art. 6.1(c) GDPR) and in our legitimate interest in accordance with (Art. 6.1(f) GDPR).
Our legitimate interest lies in the need for detailed documentation and compliance with the relevant transactions.
4. Recipients
HOMELY GROUP PROGRAM SYSTEM SL contracts specialized technical service providers for the technical processing of your personal data in order to manage services. These service providers are carefully selected and are legally and contractually obligated to guarantee a high level of data protection. Order processing is carried out in accordance with (Art. 28 GDPR).
Except where the Law expressly provides otherwise, and solely to the extent it does so, the Portal does not guarantee or assume any liability for any damages caused by the use of the information, data, and services of the Portal.
In any case, the Portal excludes any liability for damages that may arise from information and/or services provided or supplied by third parties other than the Company. All liability shall rest with the third party, whether a supplier or collaborator.
5. Data security
The personal data collected and stored by us will be treated confidentially and protected by appropriate technical and organizational measures against loss and alteration, as well as unauthorized access by third parties.
6. Storage duration
We store your personal data for as long as necessary to fulfill our contractual obligations and achieve the contractual purpose. In addition, the obligations and retention periods stipulated by applicable law or data protection authorities also remain in force.
Once these obligations and retention periods expire, it is standard procedure to delete your data. If any data is not subject to the aforementioned obligation, it will be deleted as soon as its storage is no longer necessary for its intended purpose. It should be noted that the business relationship may become an ongoing obligation that can last several years.
Even after fulfilling the contractual or legal obligation, a retention obligation may remain in force as follows:
Commercial and tax retention periods
The prescribed retention and/or documentation periods are up to 10 years after termination of the business or contractual relationship or completion of a service.
7. Your rights
You have the right to withdraw your consent, to request access to your personal data or processing data (Art. 15 GDPR), and to rectification, erasure, and restriction of your personal data or data processing (Art. 16 to 18 GDPR), as well as the portability of your personal data (Art. 20 GDPR).
In addition, you have the right to object to the processing of your data under (Art. 21 GDPR), which is based on a "legitimate interest" pursued by the controller under (Art. 6(1)(f) GDPR).
If you wish to exercise these rights, or if you wish to revoke your consent to the processing of personal data, in whole or in part, with effect for the future, please send an email to info@bedloop.com, or send a letter to the address indicated in Section 1.
In addition, under (Art. 77(1) GDPR), you also have the right to lodge a complaint with a supervisory authority, in particular in the Member State where you reside or work, or where the alleged infringement occurred, if you believe that the processing of your personal data infringes the GDPR.