"PRIVACY POLICY"

PERSON RESPONSIBLE FOR THE PROCESSING: The Company "FONTIA SUMINISTROS, S.L. "(hereinafter, "BRICOANDPOOL"), CIF: B-93349330, Registered Office: C/ Leda, Nº 22, Polígono industrial Pérez Texeira, CP: 29006 - Málaga, informs the users of the Internet portal of its property (hereinafter, the "Users" and the "Portal") about its personal data protection policy (hereinafter, "the Personal Data") so that the Users can freely and voluntarily determine whether they wish to provide BRICOANDPOOL with the Personal Data that may be required or that may be obtained from the Users on the occasion of visiting the website, sending C. Vitae, subscribing to or registering for any of our informative newsletters, requesting information about our range of irrigation and swimming pool products, accessories and pumps, as well as events and promotions organised through our website or by our company.

BRICOANDPOOL reserves the right to modify this privacy policy to adapt it to new legislation or jurisprudence as well as industry practices. In such cases, BRICOANDPOOL will announce on this page the changes introduced reasonably in advance of their implementation. Certain services provided/offered on the Portal may contain special conditions with specific provisions regarding Personal Data protection.

BRICOANDPOOL, as the party responsible for the processing of the personal data of ITS USERS, and other data subjects with whom it maintains a relationship, informs you that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and the current LOPD-GDD 3/2018 of 5 December (LOPD-GDD) on the protection of personal data.

INFORMATION / DATA PROCESSED: merely identifying data (name + surname) and contact data where applicable (address, telephone and email address), data necessary for the drafting of necessary contracts or to access specific services (warranties, spare parts, and specific technical assistance), registration in our corporate Newsletter service, opinions through our Blog, C. Vitae received by email, data provided in events or acts of presentation/demonstration of BRICOANDPOOL products, data provided in the profiles on social networks of which BRICOANDPOOL is the owner, training activities managed by the company for customers or workers, events, promotional activities or similar.

Responsible for the processing:

"FONTIA SUMINISTROS, S.L.", CIF: B-93349330

Registered Office: C/ Leda, Nº 22, Polígono industrial Pérez Texeira, CP: 29006 - Málaga

Contact email: info@bricoandpool.com

Contact telephone number: +34 670 26 95 74

DPO appointed before the Control Authority: dpo@fontia.es

Intended purposes of processing: 

MANAGEMENT AND MAINTENANCE OF THE RELATIONSHIP WITH OUR CLIENTS, registration/cancellation of users of our website, technical assistance, management of suppliers, processing managers, control and management of the relationship with employees, registrations and cancellations, access control and video surveillance of the facilities, use of biometric data for access control and security, marketing and communication, management of the existing contractual relationship with external collaborators, sponsors and the commercial relationship with suppliers, selection of BRICOANDPOOL staff, candidates in selection processes, followers of BRICOANDPOOL in RRSS, registered users of our website, subscribers to our newsletters, participants in activities and events, including the possibility of training activities in which BRICOANDPOOL manages or participates. In this sense, the operations envisaged for the processing are as follows:

WHAT PERSONAL DATA WE PROCESS: When filling in any of our forms, depending on each case:

Contact Form: https://bricoandpool.com/es/contactenos

Create Account: https://bricoandpool.com/es/iniciar-sesion?create_account=1

Contact via WhatsApp, applicable privacy policy: https://www.whatsapp.com/privacy

In the aforementioned forms/sections, you are allowed to provide, among others, the following personal data:

Your first and last name and contact details (address, telephone numbers and email), and a space for free text.

Other contact details and preferences.

In the case of placing an order, data relating to the shipment and management of the order.

We collect your data if you contact us through the Site.

When you visit our website, we will collect your data if you fill in any of our current or future data/contact forms, information request forms or newsletter subscription forms.

If the personal data have been provided by users, they must be truthful, and BRICOANDPOOL must be notified of any changes that occur in them, being responsible in any case for the truthfulness and accuracy of the data provided at all times.

The interested party who provides their personal data to BRICOANDPOOL declares that they are of legal age and is fully responsible for this declaration.

Other processing

Sending of commercial advertising communications by email, SMS, Wasap, social networks or any other electronic or physical means, present or future, that makes commercial communications possible. These communications will be carried out by the RESPONSIBLE and related to the irrigation, garden and swimming pool products in which you are interested, or about events and presentations that our company is going to carry out about them. 

Actions requested by the User: To process requests or any type of request that, through the BRICOANDPOOL website, is made by the user/customer through any of the forms of contact made available to them, events, competitions, or by subscribing to our events and activities organised by/with the participation of BRICOANDPOOL.

To process registrations for events and PROMOTIONAL PRESENTATIONS in which customers or registered users wish to participate. In this case, the images or videos taken of the participants in particular during the development of the same, and provided that express and unequivocal consent has been obtained, may be published on the website of the entity, on its social networks, in corporate publications and brochures, notice boards and any other similar media owned by the company, in order to promote such activities or events. In the case of tournaments or similar activities, the details of the participants (name, surname and age) may be published in the same media, in order to publicise the participations, classifications or results of possible competitions, prizes or promotional activities. In the event that this data processing is not expressly consented to, these will only be known internally by the participants, so that they are aware of the corresponding classification, a necessary requirement for the correct development of the same (legitimate interest).

DATA STORED DURING YOUR VISIT: When you visit our website, our web servers generally store, among other things, information about the browser and operating system you use, the website from which you visit us, the pages you visit on our website and the date of your visit. For security reasons - for example, in order to be able to detect possible attacks on our website - the IP address assigned to you by your Internet service provider is also stored for a period of seven days. With the exception of the IP address, personal data is only stored if you provide us with this information, e.g. in connection with a registration, survey, request for quotation, user registration, commercial promotion. BRICOANDPOOL uses your personal data for the technical administration of the web pages, customer management, carrying out surveys and for marketing purposes only to the extent necessary and only after informing the user and owner of the data in advance.

NEWSLETTER/NEWSLETTERS SUBSCRIPTION: In the case of subscription to any of our informative Newsletters, present or future, as informed, you consent to the use of your personal data for sending advertising or carrying out other marketing actions, these will be stored and used continuously for such uses, such as sending newsletters already mentioned, news in our catalogue of irrigation and pool products, guarantees, technical assistance and maintenance, through the communication channels such as e-mail, post or any other channel authorised by you. We may use your data to create and keep your customer/user profile up to date so that we can send you personalised information about advertising actions or promotions tailored to your needs. We may also use the information you provide to us to analyse and improve the effectiveness of our website services, advertising, marketing, market research and sales activities.

SENDING OF C. VITAE BY CANDIDATES: In the case of sending C. Vitae to the BRICOANDPOOL email address: info@bricoandpool.com, or by means of the contact form provided, the applicant authorises BRICOANDPOOL to analyse the documents sent, all the content that is directly accessible through search engines (Google), the profiles maintained in professional social networks, such as Linkedin or similar, the data obtained in the entrance tests and the information revealed in the job interview, with the aim of assessing their candidacy and being able, if necessary, to offer them a position. In the event that the candidate is not selected, BRICOANDPOOL may keep his/her C. VITAE stored in order to incorporate it in future vacancies, unless the candidate states otherwise, through the HR manager.

DATA RETENTION CRITERIA: The data provided will, in general, be kept for as long as there is a mutual interest in maintaining the purpose of the processing and when it is no longer necessary for that purpose, it will be deleted with appropriate security measures to ensure the pseudonymisation of the data or the total destruction of the data.

In view of this general rule, the following possible variations arise:

(i) Disaggregated Data: shall be retained without a deletion deadline,

(ii) Data of users, companies and suppliers, etc... BRICOANDPOOL: 4-year retention period (Art. 66 et seq. of the General Tax Law), 6-year retention period Art. 30 of the Commercial Code on accounting books and invoices).

(iii) Data supplied when subscribing to our newsletter: from the moment the User gives his/her consent until he/she withdraws it.

(iv) Documentation of an employment or social security nature: 4 years Article 21 of Royal Legislative Decree 5/2000, of 4 August, which approves the revised text of the Law on Infractions and Penalties in the Social Order, (v) data supplied by candidates by sending their C. Vitae: the C. Vitae may be kept for a maximum of two years for future selection processes unless the candidate states otherwise.

Communication of data: Your personal data may be communicated to:

Companies and entities and other organisations to which the provision of services has been contracted, such as: hosting, marketing services, contracted cloud services, market analysis and information society services.

Collaborating/sponsoring companies with which BRICOANDPOOL has reached a collaboration or sponsorship agreement.

Companies or other organisations to whom you have asked us or agreed that we may share your personal data.

If you have consented to the transfer of data to suppliers/suppliers and manufacturers of irrigation/garden and pool products, you agree that your personal data may be used to create an individualised profile, based on automated procedures about your behaviour and preferences, the result of which is intended to send you personalised commercial information about BRICOANDPOOL and its irrigation, garden and pool products.

For certain internal company activities/services, third parties providing specific services must be subcontracted. These subcontractors can be external suppliers both within and outside the EU. BRICOANDPOOL ensures that all subcontractors comply with the obligations and requirements assumed by BRICOANDPOOL in its Data Access Agreement; specifically, that their level of data protection meets the standard required by the relevant data protection laws. If a jurisdiction falls outside the EU and is not on the European Commission's approved list of satisfactory levels of data protection under the GDPR, then a specific agreement is put in place between BRICOANDPOOL and the subcontractor to ensure that it will maintain all personal data in accordance with the requirements of the applicable EU data protection laws. The sub-contractors that BRICOANDPOOL uses for certain areas are:

WhatsApp Ireland Limited: https://www.whatsapp.com/legal/privacy-policy-eea

Google Analytics: Google web analytics https://www.cookiebot.com/es/google-analytics-rgpd/

Masalbe Servicios Globales, S.L.: External DPO designated. https://masalbe.com/privacidad

Presta Shop, SA: Ecommerce Platform https://www.prestashop.com/en/privacy-policy

Payment Platform: PayPal (Europe) S.à.r.l. et Cie, S.C.A. https://www.paypal.com/es/webapps/mpp/ua/privacy-full?locale.x=es_ES

Transport Service SEUR, S.A. https://www.seur.com/es/politica-de-privacidad-y-cookies/

The purpose of the communication of the data to the aforementioned companies, which compose and are integrated with the data controller, will be the same as those already announced previously, as companies in charge of the data processing of the data controller.

Providers of professional services, such as lawyers, solicitors, notaries, registrars or other similar professionals in certain cases.

Public bodies, courts, courts, regulators and other administrative authorities, where we believe it is necessary to comply with a legal or regulatory obligation, or otherwise to protect against claims against us or third parties, or the safety of individuals, as well as to prevent, or otherwise combat, fraud or for security or safety reasons.

Any third party who purchases, or to whom we transfer, all or substantially all of our assets and business. In the event of such a sale or transfer, we will use reasonable efforts to try to ensure that the entity to which we transfer your personal data uses it in accordance with this Privacy Policy.

In such cases, we will ensure that your data is used for appropriate purposes in accordance with this Privacy Policy and will enter into appropriate contracts or clauses for the processing of the data (Standard Clauses - SCC), applying the same or similar security measures to those applied by BRICOANDPOOL.

The data will be processed on the legal basis of the express consent of the person providing the data. This consent may be withdrawn at any time, although this shall not affect the lawfulness of the processing previously carried out. The provision of the data is voluntary, although, in the event of failure to do so, the data may not be processed for the purposes indicated. If third party data is provided through this website, whoever does so assumes responsibility for having obtained prior consent, informing them of all the provisions of Article 14 of the General Data Protection Regulation.

Legitimation FOR INFORMED PROCESSING:

As a general rule, prior to the processing of personal data, BRICOANDPOOL obtains express and unequivocal consent from the owner of the data by incorporating informed consent clauses in the different information collection systems, and on the basis of a legitimate interest of the User.

In the event that the consent of the interested party is not required, the legitimate basis for the processing on which BRICOANDPOOL relies is the existence of a DISTRIBUTION CONTRACT, OR FORMALISED SUPPLY ORDER as a customer of our company, Existence of an Order in progress, or collaboration document with BRICOANDPOOL.

Notwithstanding the above, the bases of legitimacy are as follows:

Where the processing is necessary for the performance of a contract to which you are a party or the data is necessary within the framework of a pre-contractual relationship.

Where the use of your personal data is necessary for the fulfilment of our legitimate interests or those of the companies with which we have shared your personal data.

When the processing of the data is necessary in order to comply with the legislation/regulations regulating the legal obligations of the sector, RGPD and LOPD-GDD legislation and similar applicable legislation in force at any given time, among which are those relating to the marketing of BRICOANDPOOL's own services or those of third parties, consumer and user protection, retail trade regulations, and other applicable regulations.

In accordance with the provisions of the applicable regulations on Information Society Services (LSSI-CE), if there is a demonstrable prior relationship, the data may be used to send electronic commercial communications relating to that specific activity, unless you object to this in the manner provided for that purpose.

Where we believe it is necessary to process your personal data in order to comply with a legal or regulatory obligation or a vital interest.

Where we have your consent, for example, to collect technical information such as cookie data and similar technologies as described in: "Information on Use of Cookies".

The acceptance of a contractual relationship in the relevant social network environment, and in accordance with its Privacy policies in each case, when you visit any of our social profiles (Facebook, Instagram, YouTube).

RECOGNISED Rights:

And these are your rights as a data subject or holder of personal data:

Right of access: you have the right to obtain from the company confirmation of whether or not personal data concerning you are being processed. BRICOANDPOOL will, where appropriate, provide a copy of the personal data being processed.

Right of rectification: you have the right to obtain without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of an additional statement.

Right of erasure: you have the right to obtain without undue delay the erasure of inaccurate personal data concerning you. BRICOANDPOOL shall be obliged to delete such personal data without undue delay in the following circumstances:

1. the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;

2. you withdraw the consent on which the processing is based and the processing is not based on another legal basis;

3. you object to the processing and provided that no other legitimate grounds for the processing prevail;

4. your data have been processed unlawfully;

5. your data must be erased in order to comply with a legal obligation;

6. or if your personal data have been obtained in connection with the provision of information society services to children (under 16 years of age).

Right to restriction of processing: where the processing of your personal data has been restricted pursuant to a request from you, such data may only be processed, with the exception of their retention, with your consent or for the purpose of making, exercising or defending claims, or for the protection of the rights of another natural or legal person, or for reasons of substantial public interest. You have the right to obtain a restriction on the processing of your personal data where one of these conditions is met:

1. When you contest the accuracy of the personal data, for a period of time that allows BRICOANDPOOL to verify the accuracy of the personal data;

2. the processing is unlawful and as a data subject you object to the deletion of the personal data and request instead the restriction of use;

3. BRICOANDPOOL no longer needs the personal data for the purposes of the processing, but you need them for the formulation, exercise or defence of claims;

4. Where you have objected to the processing, while we check whether BRICOANDPOOL's legitimate grounds override those of the data subject.

Right to data portability: you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format, and to transmit it to another data controller without being prevented from doing so by BRICOANDPOOL, when:

1. the processing is based on your consent, and

2. the processing is carried out by automated means.

Right to object: you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you on the basis of public interests or legitimate interests of the controller. Where personal data are processed for the purposes of direct marketing, you have the right to object at any time to the processing of personal data concerning you. In the event that you object to the processing of your data for direct marketing purposes, such personal data will no longer be processed for such purposes.

We remind you that insofar as the legal basis for the processing of your data is your consent, you have the right to revoke this consent at any time and in any case, and as easily as you gave it.

You also have the right to lodge a complaint with the respective supervisory authority, usually the Spanish Data Protection Agency. For more information, you can go to their website at the following link https://www.aepd.es.

Finally, you have the right not to be subject to a decision by BRICOANDPOOL based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.

Contact details for exercising your rights: BRICOANDPOOL, in application of Regulation (EU) 2016/679 of 27 April 2016 (RGPD), and recent LOPD-GDD 3/2018 of 5 December, has a designated internal manager, and a Data Protection Officer (DPO) appointed for the management of Data Protection and whose contact details are detailed below:

Address: C/ Leda, Nº 22, Polígono industrial Pérez Texeira, CP: 29006 - Málaga.

Contact e-mail address: dpo@fontia.es

Contact telephone number: +34 670 26 95 74

If a user/owner considers that there is a problem with the way in which BRICOANDPOOL is treating his/her data, he/she can address his/her complaints to the Data Protection Delegate indicated above, or through the Spanish Control Authority, in this case, the AEPD: https://www.aepd.es/es

OBLIGATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED:

The data collected by any of the contact forms enabled on this Website, or even for the provision of information, or those provided by Users on the occasion of their participation in activities/events developed by BRICOANDPOOL, will be incorporated, depending on their purpose, into the Internal Processing Activities Register (Article 30 of Regulation (EU) 2016/679 of 27 April 2016). The Register of Processing Activities is available to the Supervisory Authority.

Users, by ticking the corresponding boxes and entering data in the various fields marked with an asterisk (*) in the contact form or submitted in download/contract forms, expressly and freely and unequivocally accept that their data are necessary for BRICOANDPOOL to deal with their request, with the inclusion of data in the remaining fields being voluntary. The User guarantees that the personal data provided are truthful and is responsible for communicating any changes to them. 

BRICOANDPOOL expressly informs and guarantees users that their personal data will not be transferred under any circumstances to third parties and that, whenever it plans to make any transfer in the future, express, informed and unequivocal consent will be requested beforehand from the Users, informing them of the details of the transferee and the purpose of the transfer. All the data requested through the website are obligatory, as they are necessary for the provision of an optimum service to the User. In the event that all the data is not provided, there is no guarantee that the information and services provided will be completely tailored to your needs.

SECURITY MEASURES:

In accordance with the provisions of current regulations on personal data protection, and in particular Regulation (EU) 2016/679 of 27 April 2016, and the LOPD-GDD 3/2018 for the processing of personal data under its responsibility, and manifestly with the principles described in Article 5 of the RGPD, whereby they are processed lawfully, fairly and transparently in relation to the data subject and are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

In any case, BRICOANDPOOL has implemented sufficient mechanisms to:

1. Guarantee the permanent confidentiality, integrity, availability and resilience of the processing systems and services.

2. Restore availability and access to personal data quickly in the event of a physical or technical incident.

3. Regularly verify, evaluate and assess the effectiveness of the technical and organisational measures implemented to ensure the security of the processing.

4. Pseudonymise and encrypt personal data, if necessary.

BRICOANDPOOL guarantees that it has implemented appropriate technical and organisational policies to apply the security measures established by the RGPD 679/2016 and the LOPD-GDD 3/2018 in order to protect the rights and freedoms of Users and has communicated the appropriate information to them so that they can exercise them. BRICOANDPOOL has installed all the technical means and measures at its disposal to prevent the loss, misuse, alteration, unauthorised access and theft of the Personal Data provided by the holder to BRICOANDPOOL. However, the User must be aware that Internet security measures are not impregnable.

The personal data included in the Register of Internal Processing Activities will be treated with the utmost confidentiality and security, the Holder may send you commercial information relating to NEWS and UPDATES on our irrigation and swimming pool products OFFERED BY BRICOANDPOOL, in this case, the sender undertakes to indicate its advertising purpose when sending, and to coordinate a simple, clear and free system in the event that you wish to stop receiving them.

The BRICOANDPOOL Services contained in the web are exclusively for adults, in the event that BRICOANDPOOL offers any promotional activity, event, competition or similar, in which the collection of Personal Data of minors may occur, BRICOANDPOOL will always request parental consent so that minors can access them and their Personal Data can be subject to automated processing as provided in this notice on the Data Protection Policy.

As previously informed, the purpose of the collection and automated processing of Personal Data is to maintain the contractual relationship established with BRICOANDPOOL, the management, administration, provision, extension and improvement of the services that the User decides to contract, register or use, and the adaptation of these services to the preferences and tastes of the Users, the study of the use of the services by the Users, the design of new services, the sending of necessary updates, product circulars (quality), the sending, by traditional and electronic means, of technical, operational and commercial information about our range of irrigation and swimming pool products and other related products offered by BRICOANDPOOL at present and in the future.

USE OF PUBLIC PROFILES IN THE DIFFERENT RR.SS.:

BRICOANDPOOL has a profile on the main social networks on the Internet knowing itself in all cases responsible for the processing of the data of its followers, fans, subscribers, commentators and other user profiles (hereinafter, followers). The treatment that BRICOANDPOOL will carry out with such data will be, at most, the one that the social network allows to the corporate profiles. Thus, BRICOANDPOOL will be able to inform its followers by any means that the social network allows about its news, activities, promotions. Under no circumstances will BRICOANDPOOL extract data from the social networks, unless the user's consent to do so has been specifically and expressly obtained. When, due to the very nature of social networks, the effective exercise of the rights of the follower is subject to the modification of the personal profile of the latter, BRICOANDPOOL will help and advise the user to this end to the extent of its possibilities. The profiles in RRSS of which the company is the owner are:

Instagram: https://www.instagram.com/bricoandpool/

Facebook: https://www.facebook.com/BricoandPool

For what purposes will we process your personal data?

To answer your queries, requests or petitions.

To manage the requested service, answer your request, or process your request.

To interact with you and in a community of followers.

What is the legitimacy for the processing of your data?

For more information about Facebook click here.

For more information on Instagram click here.

The acceptance of a contractual relationship in the corresponding social network environment, and in accordance with its privacy policies:

Knowing BRICOANDPOOL in all cases responsible for the processing of the data of its followers, fans, subscribers, commentators and other user profiles (hereinafter followers). The treatment that BRICOANDPOOL will carry out with such data will be, at most, the one that the social network allows to the corporate profiles. Thus, BRICOANDPOOL will be able to inform its followers by any means that the social network allows about its news and activities. Under no circumstances will BRICOANDPOOL extract data from the social networks, unless the user's consent to do so has been specifically and expressly obtained. When, due to the very nature of the social networks, the effective exercise of the follower's rights is subject to the modification of the follower's personal profile, BRICOANDPOOL will help and advise the follower to this end to the best of its ability.

Right to Information.

Upon request, BRICOANDPOOL will immediately inform you in writing, in accordance with the applicable legislation, whether and what personal data we have stored about you. If you are registered as a user, we offer you the opportunity to personally check your data and, if necessary, to delete, modify and/or update them. 

DESCRIPTION OF MEASURES ADOPTED BY BRICOANDPOOL derived from the RGPD:

Our Users/Customers and suppliers of BRICOANDPOOL are informed that, in accordance with the RGPD and LOPD-GDD regulations applicable to the activity carried out by the company, the measures adopted to obtain an optimum level of compliance are detailed:

Draw up a register of processing activities in accordance with article 30 of the RGPD.

Identify the legal bases for data processing, in accordance with articles 6 and 9 of the GDPR.

Audit incoming information channels and internal forms/documents and inform data subjects in relation to the processing of their data, in accordance with Articles 13 and 14 of the GDPR.

Attend to the rights of data subjects in relation to their rights of: access, rectification and erasure, limitation of processing, data portability (article 20 of the GDPR), objection and automated decisions, establishing a direct channel of attention: dpo@fontia.es.

Auditing and requesting guarantees of compliance from the company's data processors, and signing a data processor contract, in accordance with article 28 of the GDPR. BRICOANDPOOL facilitates the aforementioned procedure by making available through our DPO: 1) document of guarantees of compliance and details of the measures adopted, 2) model contract for access to BRICOANDPOOL data.

Carry out a risk analysis and, where appropriate, an impact assessment; to facilitate compliance with these obligations, you can consult the AEPD website: https://www.aepd.es/es/prensa-y-comunicacion/notas-de-prensa/la-aepd-publica-un-modelo-de-informe-para-ayudar-las-empresas .

BRICOANDPOOL, as a responsible company and aware of regulatory compliance, recommends its employees, customers, users and interested parties to subscribe to the INCIBE (www.incibe.es) OSI (www.osi.es) and CERT (www.incibe-cert.es) alert bulletins.

The links to subscribe to the different portals mentioned above will allow you to be aware of possible threats and incidents in advance:

INCIBE ALERTS: https://www.incibe.es/newsletter/subscriptions

OSI ALERTS: https://www.osi.es/es/boletines/suscribirse

incibe-cert ALERTS: https://www.incibe-cert.es/newsletter/subscriptions

Existence of an internal protocol for notifying security breaches; data security breaches to the data protection authorities (article 33 of the GDPR) and to data subjects whose data have been compromised (article 34 of the GDPR). To this end, BRICOANDPOOL shall notify the CUSTOMER as soon as possible of any incident involving a risk to the rights and freedoms of the data subjects concerned, and shall assist the CUSTOMER in making such notifications.

The company has officially appointed a Data Protection Delegate before the register set up for this purpose at the AEPD (www.aepd.es) in accordance with articles 37, 38 and 39 of the RGPD. BRICOANDPOOL, makes available to CUSTOMERS/users and interested parties, the following e-mail contact of the DPO appointed for issues related to data protection/exercise of rights: dpo@fontia.es

BRICOANDPOOL, in compliance with current regulations, also informs you of your right to lodge a complaint/request further information from the supervisory authority (www.aepd.es).

Related regulations:

If you would like more information about the regulations that assist you, protect you and set your rights, we make available to you the regulations that have inspired this privacy policy and are relevant to you:

Regulation (EU) 2016/679 (GDPR).

Organic Law 3/2018, of 28 December, on data protection and guarantee of digital rights

Law 34/2002, of 11 July, on information society services and electronic commerce.

CONTACT: Should you require any clarification of this Privacy Policy, wish to make a question or complaint, or exercise your rights, please write to our internal Data Protection Security Officer/DPO, using the details shown below, indicating in the subject line: "Data Protection".

Address: C/ Leda, Nº 22, Polígono industrial Pérez Texeira, CP: 29006 - Málaga.

Contact e-mail address: info@bricoandpool.com

Contact telephone number: +34 670 26 95 74

Privacy Policy updated and revised as of 1 June 2022.