Privacy Policy

Privacy Policy

"PRIVACY POLICY" 

Treatment responsible: the mercantile "Fontia Suministros, S.L." (From now on, “Bricoandpool”), CIF: B-93349330, registered office: C/ Leda, No. 22, Industrial Polygon Pérez Texeira, CP: 29006-Málaga, informs the users of the Internet portal of their property (hereinafter, the "users" and the "portal") about their personal data protection policy (hereinafter, "personal data") so that users determine free Voluntarily if they wish to facilitate the personal data that may be required or that they can be obtained from users on the occasion of the visit to the web, sending of C. Vitae, subscription or high in any of our news newsletters, request for information on our range of irrigation products and swimming pools, accessories and pumps, as well as events and promotions organized through our website or by our company.

Bricoandpool reserves the right to modify this privacy policy to adapt it to legislative or jurisprudential news as well as industry practices. In these cases, Bricoandpool will announce on this page the changes introduced with reasonable before its implementation. Certain services provided/offered in the portal may contain particular conditions with specific forecasts in personal data protection.

Bricoandpool, as responsible for the processing of the personal data of its users, and rest of affected/holders with which it is related, informs you that these data will be treated in accordance with the provisions of Regulation (EU) 2016/679 of April 27, 2016 (GDPR) regarding the protection of natural persons in regards to the process (LOPD-GDD) regarding the protection of personal data.

Information / data treated: merely identifying data (name + surname) and contact data in your case (address, telephone and email address), necessary data for the drafting of necessary contracts or to access specific services (guarantees, spare parts, and specific technical assistance), registration in our corporate newsletter service, opinions through our blog, C. Vitae received by email, data provided in events or acts of events or acts of events or acts of events or acts of events or acts provided in events or acts provided in events or acts provided in events. Presentation/Demonstration of Bricoandpool products, data provided in the social networks profiles that Bricoandpool is the holder, training activities managed by the company for customers or workers, events, promotional activities or similar.

responsible for treatments:

  • "Fontia Suministros, S.L.", CIF: B-93349330

  • Registered office: C/ Leda, nº 22, Polygon Industrial Pérez Texeira, CP: 29006 - Málaga

  • Contact email: info@bricoandpool.com

  • Contact phone: +34 951 12 53 88

  • DPO designated before the Control Authority: dpo@fontia.es

Planned treatment purposes: 

Management and maintenance of the relationship with our clients, high/low users of our website, technical assistance, supplier management, treatment, control and management of the relationship with employees, high and low, access control and video surveillance of the facilities, use of biometric data for access control and safety, marketing and communication, management of the existing contractual relationship with external collaborators, sponsors and commercial relationship with the commercial relationship with suppliers. Bricoandpool labor staff, candidates in selection processes, followers in RRSS of Bricoandol, users registered on our website, subscribers of our Newsletters, participants in activities and events, including the possibility of training actions where Bricoandpool manages or participates. In this sense, the operations planned to carry out the treatment are:

What personal data we deal with: by filling any of our forms, depending on each case:

In the aforementioned forms/sections, it is allowed to facilitate, among others, the following personal data:

  • Your name and surname and contact data (address, telephone numbers and email), and a space for free text.

  • Other contact data and preferences.

  • In case of formalizing an order, data related to sending and order management.

  • We collect your data if you contact us through the site.

  • When we visit our website we will collect your data, if you fill in any of our data/contact forms, information request, or subscription to present or future newsletter.

  • If the personal data had been facilitated by the users, they must be truthful, and any modification that occurs in them must be notified to Bricoandol, responding in any case of the veracity and accuracy of the data provided at all times.

  • The interested party who facilitates his personal data to Bricoandpool, declares being of legal age being entirely responsible for said declaration.

Other treatments

  • Remission of commercial communications by email, SMS, Wasap, social networks or any other electronic or physical, present or future medium, which makes it possible to make commercial communications. These communications will be carried out by the person responsible and related to the irrigation, garden and swimming pools for which it has been interested, or about events and presentations that our company will perform on them. 

  • Actions requested by the User: Process requests or any type of request that, through the Bricoandol website, is carried out by the user/client through any of the forms of contact that are made available to their disposal, events, competitions, or by subscription to our events and activities organized by/with the participation of Bricoandol.

  • Process registration to promotional events and presentations in which customers or registered. In this case, the images or videos made of the participants in a particular way during their development, and as long as express and unequivocal consent has been obtained, they can be published on the entity's website, in their social networks, in publications and corporate brochures, advertisements and any other means of communication analogous ownership of the company, in order to promote such activities or events. In the case of tournaments or similar activities, the data of the participants (name, surname and age) may be published in the same media, in order to advertise the participations, classifications or results of possible competitions, awards or promotional activities. In the event that this data processing is not expressly consent, these will only be known internally by the participants, so that they know the corresponding classification, necessary requirement for the correct development of the same (legitimate interest).

  • Data stored during your visit: When you visit our website, our web servers generally store, among other data, information about the browser and the operating system you use, the website from which you visit us, the pages you visit on our website and the date of your visit. For security reasons - for example, to be able to detect possible attacks on our website - the IP address that its Internet service provider has assigned it is also stored for a period of seven days. With the exception of the IP address, personal data is only stored if you provide us with such information, for example, on the occasion of an registration, a survey, budget application, user registration, commercial promotion. Bricoandpool uses your personal data for the technical administration of web pages, customer management, surveys and marketing tasks, only as necessary, and always previously informing the user and owner of the data.

  • Newsletin/Newsletters Subscription: In the case of subscription to any of our informative, present or future newsletters, as reported, it gives its consent in the use of their personal data for the sending of advertising or the realization of other marketing actions, these will be stored and continuous Our catalog of irrigation and pool products, guarantees, technical assistance and maintenance, through communication channels such as e-mail, postal mail or any other channel authorized by you. We can use your data to create and keep your customer/user profile updated and thus be able to send personalized information about advertising actions or particularized promotions to your needs. Likewise, we can use the data that you facilitate to analyze and improve the effectiveness of the services of our website, advertising, marketing, market prospecting and sales activities.

  • C. Vitae shipping by candidates: in case of sending C. vitae to the Bricoandpool email: info@bricoandpool.com, Or through the enabled contact form, the applicant authorizes Bricoandpool to analyze the documents to be requested, all the content that is directly accessible through the search engines (Google), the profiles he maintains in professional social networks, such as LinkedIn or analogous, the data obtained in the access tests and the information he reveals in the job interview, with the aim of assessing his candidacy and power. position. In the event that the candidate is not selected, Bricoandol may keep his C. Vitae stored to incorporate it into future calls, unless the candidate manifests itself in the opposite direction, through the RRHH head.

Data conservation criteria: the data provided, in general, will be kept while there is a mutual interest to maintain the end of the treatment and when it is no longer necessary for this purpose, they will be suppressed with adequate safety measures to guarantee the pseudonymization of the data or the total destruction of them.

Given this general rule, the following possible variations are raised:

  • (Yo) Disaggregated data: They will be preserved without suppression period,

  • (II) Data of users, companies and suppliers, etc ... Bricoandol: 4 -year conservation period (art. 66 and following of the General Tax Law), conservation period of 6 years Art. 30 of the Commercial Code on accounting books and invoices)

  • (III) Data provided on the occasion of the subscription to our newsletter: since the user gives his consent, until he withdraws

  • (IV) Documentation of labor or related to Social Security: 4 years Article 21 of Royal Legislative Decree 5/2000, of August 4, which approves the consolidated text of the Law on Infractions and Sanctions in the Social Order, (((v) Data provided by candidates through the sending of its C. Vitae: C. Vitae can keep a maximum of two years for future selection processes unless the candidate manifests the opposite

Data communication: your personal data can be communicated to:

  • Companies and entities and other organizations to which the provision of services, such as: hosting, marketing services, cloud services hired, market analysis and services of the information society have been hired.

  • Collaborating companies /sponsoring with which Bricoandpool has reached a collaboration or sponsorship agreement.

  • Companies or other organizations to which we have requested or accepted that we can share their personal data.

  • If you have authorized the transfer of data to supplier/suppliers and manufacturers of irrigation/garden and pool products, accept that your personal data can be used to prepare an individualized profile, based on automated procedures on your behavior and preferences, whose result has the purpose of sending personalized commercial information about Bricoandpool and its irrigation, garden and pool products.

  • For certain internal activities/services of the company, third parties that provide specific services must be subcontract. These subcontractors can be external suppliers both inside and outside the EU. Bricoandpool guarantees that all subcontractors meet the obligations and requirements assumed by Bricoandpool in their CTO. Of access to data; Specifically, that your data protection level complies with the standard required by relevant data protection laws. If a jurisdiction is outside the EU and is not on the list approved by the European Commission on Satisfactory Data Protection levels under the GDPR, then a specific agreement between Bricoandpool and the subcontractor is established to ensure that it will maintain all personal data according to the requirements of current laws on EU data protection. The subcontractors to whom Bricoandpool goes to certain areas are:

  • The purpose of communication of the data to the referred companies, which make up and integrate with the person responsible, will be the same to those already previously announced, as companies responsible for the treatment of the person responsible.

  • Professional Services providers, such as lawyers, attorneys, notaries, registrars or other similar professionals in certain cases.

  • Public bodies, courts, regulators and other administrative authorities, when we consider that it is necessary to comply with a legal or regulatory obligation, or otherwise to protect us from claims against us or third parties, or the safety of people, as well as to prevent, or in some other way to fight, against fraud or for reasons of security or protection.

  • Any third that bought, or to which we transfer, all or a substantial part of our assets and businesses. In case this sale or transfer occurs, we will make all reasonable efforts to try to ensure that the entity to which we transfer your personal data use them according to this privacy policy.

In such cases, we will ensure that your data is used for adequate purposes in accordance with this Privacy Policy and the corresponding contracts or clauses for data processing (Standard - SCC clauses) will be signed, applying the same or similar security measures to which Bricoandpool applies.

The data will be treated on the legal basis of the express consent of the person who provides them. This consent can be withdrawn at any time, although this will not affect the legality of the treatments carried out previously. The fact of facilitating the data is voluntary, although, in case of not doing so, they cannot be treated for the indicated purposes. If data from third parties are facilitated through this website, who does assume the responsibility of having previously obtained consent, informing them of everything provided for in article 14 of the General Data Protection Regulation.

Legitimation for informed treatments:

As a general rule, prior to the processing of personal data, Bricoandpool obtains express and unequivocal consent from the owner of the same by incorporating consent clauses informed in the different information collection systems, and based on a legitimate interest of the user.

In the event that the consent of the interested party is not required, the legitimizing basis of the treatment in which Bricoandol is protected is the existence of a distribution contract, or formalized supply/order as customer of our company, existence of the ongoing order, or collaboration document with Bricoandpool.

Notwithstanding the foregoing, the bases of legitimation are as follows:

  • When the treatment is necessary for the execution of a contract in which it is part or the data are necessary within the framework of a pre -contractual relationship.

  • When the use of their personal data is necessary for the satisfaction of our legitimate interests or those of the companies with which we have shared their personal data.

  • When the data processing is necessary to comply with the legislation/regulatory regulations of the legal obligations of the sector, RGPD legislation and LOPD-GDD and similar applicable in force at all times, among which are the one related to the setting in the Bricoandpool or third-party service market, defense of consumers and users, ordering of retail trade, and other applicable regulations.

  • In accordance with the provisions of the applicable regulations of services of the Information Society (LSSI-CE), if there is a demonstrable previous relationship, the data may be used for the sending of electronic commercial communications regarding this concrete activity, unless it opposes it in the form provided for the purpose.

  • When we consider that it is necessary to treat your personal data to meet a legal or regulatory obligation, or a vital interest.

  • When we have your consent, to, for example, to collect technical information such as data from cookies and similar technologies as described in: "Information on use of cookies".

  • The acceptance of a contractual relationship in the corresponding social network environment, and according to its privacy policies in each case, when you visit any of our social profiles (Facebook, Instagram, YouTube).

Recognized rights:

And these are your rights as interested or holder of personal data:

RIGHT OF ACCESS: You have the right to obtain confirmation of whether or not personal data is being treated. Bricoandpool, where appropriate, will facilitate a copy of the personal data subject to treatment.

Right of rectification: You have the right to obtain without improper delay the rectification of the inaccurate personal data that concerns you. Taking into account the purposes of treatment, you will have the right to complete the personal data that are incomplete, even through an additional statement.

Right of suppression: you have the right to obtain without improper deletion the elimination of the inaccurate personal data that concerns it. In Bricoandpool we will be obliged to suppress without delay these personal data when any of the following circumstances attend:

  1. Personal data are no longer necessary in relation to the aims for them to be collected or treated otherwise;

  2. You withdraw the consent on which the treatment is based and this is not based on another legal basis;

  3. You oppose treatment and whenever other legitimate motifs for it do not prevail;

  4. Your data has been illicitly treated;

  5. Your data must be suppressed for the fulfillment of a legal obligation;

  6. or if your personal data has been obtained in relation to the offer of services of the Information Society to children (under 16 years).

Right of treatment limitation: When the processing of your personal data has been limited by virtue of a request for your part, such data may only be the object of treatment, with the exception of their conservation, with your consent or for the formulation, exercise or defense of claims, or with a view to the protection of the rights of another natural or legal person, or for reasons of important public interest. You have the right to obtain the limitation of the processing of your personal data when any of these conditions are met:

  1. When you challenge the accuracy of personal data, during a period that allows Bricoandpool to verify the accuracy of these;

  2. The treatment is illicit and as interested you oppose the suppression of personal data and requests, instead, the limitation of use;

  3. Bricoandpool no longer needs personal data for the purposes of treatment, but you need them for the formulation, exercise or defense of claims;

  4. When you have opposed the treatment, while it is verified if the legitimate motifs of Bricoandpool prevail over those of the interested party.

Right to data portability: you have the right to receive personal data that corresponds to a structured format, common use and mechanical reading, and to transmit them to another person responsible for the treatment without preventing Bricoandpool, when:

  1. The treatment is based on your consent, and

  2. The treatment is made by automated means.

Right of opposition: You have the right to oppose at any time, for reasons related to your particular situation, what personal data that concerns you are the subject of treatment based on public interests or legitimate interests of the person in charge of treatment. When the treatment of personal data is aimed at direct marketing, you will have the right to oppose at all times to the processing of personal data that concern you. In the event that you oppose the processing of your data for direct marketing purposes, these personal data will cease to be treated for such purposes.

We remind you that whenever the legal basis of the processing of your data is your consent, you have the right to revoke such consent always and in any case, and as easy as you gave it.

You also have the right to present a claim before the respective control authority, usually the Spanish Agency for Data Protection. For more information, you can go to its website in this link https://www.aepd.es

Finally, you have the right not to be Bricoandpool's decision based solely on automated treatment, including the elaboration of profiles, which produces legal effects or that significantly affects you similarly.

Contact data to exercise their rights: Bricoandpool, in application of Regulation (EU) 2016/679 of April 27, 2016 (RGPD), and recent LOPD-GDD 3/2018 of December 5, it has a designated internal manager, and a data protection delegate (DPO) designated for data protection management and whose contact data is detailed below:

  • Address: C/ LEDA, Nº 22, Polygon Industrial Pérez Texeira, CP: 29006 - Malaga.

  • Electronic contact address: dpo@fontia.es

  • Contact phone: +34 951 12 53 88

If a user/holder considers that there is a problem with the way Bricoandpool is dealing with his data, he can direct his claims to the Data Protection Delegate indicated above, or through the Spanish Control Authority, in this case, the AEPD: https://www.aepd.es/es

Mandatory or optional character of the information provided:

The data collected by any of the contact forms enabled on this website, or even for the supply of information, or those provided by the users on the occasion of their participation in activities/events developed by Bricoandpool, will be incorporated, depending on their purpose, to the Registry of Internal Treatment Activities (Article 30 of Regulation (EU) 2016/679 of April 27, 2016). The treatment activities record is available to the control authority.

Users, by marking the corresponding boxes and data entry in the different fields, marked with an asterisk (*) in the contact form or presented in discharge/hiring forms, expressly and freely accept and unequivocally, that their data is necessary to address their request, by Bricoandol, the inclusion of data in the remaining fields being voluntary. The user guarantees that the facilitated personal data are truthful and is responsible for communicating any modification of them. 

Bricoandpool expressly informs and guarantees users that their personal data will not be given in any case to third parties and that, provided that any assignment in the future is planned, the express, informed and unequivocal consent will be previously requested by the users, informing about the data of the assignee, and the purpose of the transfer. All the data requested through the website are mandatory, since they are necessary for the provision of an optimal user service. In the event that all data is facilitated, it is not guaranteed that the information and services provided are completely adjusted to their needs.

Security measures:

In accordance with the provisions of current regulations on personal data protection, and in particular in Regulation (EU) 2016/679 of April 27, 2016, and the LOPD-GDD 3/2018 for the process relevant and limited to what is necessary in relation to the purposes for which they are treated.

In any case, Bricoandpool has implemented sufficient mechanisms for:

  1. Guarantee the permanent confidentiality, integrity, availability and resilience of treatment systems and services.

  2. Restore availability and access to personal data quickly, in case of physical or technical incident.

  3. Verify, evaluate and assess, on a regular basis, the effectiveness of the technical and organizational measures implemented to guarantee the security of the treatment.

  4. Pseudonymize and encrypt personal data, where appropriate.

Bricoandpool guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR 679/2016 and the LOPD-GDD 3/2018 in order to protect the rights and freedoms of the users and have informed them of the appropriate information so that they can exercise them. Bricoandpool has installed all the means and technical measures at its disposal to avoid the loss, misuse, alteration, unauthorized access and theft of the personal data provided by the holder to Bricoandpool. However, the user must be aware that Internet security measures are not impregnable.

Personal data that are incorporated into the Registry of Internal Treatment Activities, will be treated with the maximum confidentiality and security, the holder may send commercial information related to news and updates on our irrigation and pool products offered by Bricoandpool, in this case, the sender undertakes to indicate its advertising purpose when sending, and to coordinate a simple, clear and free system for the case in which you want to stop receiving them.

The Bricoandpool services contained on the web are destined exclusively at adults, in the case in which Bricoandpool offers any promotional activity, event, contest or similar, in which the collection of personal data of minors can occur, Bricoandpool will always request the paternal conformity so that minors can access them and their personal data can be subject to automated treatment as provided in this notice on the data protection policy.

As reported prior, the collection and automated treatment of personal data is the purpose of maintaining the contractual relationship in their case established with Bricoandpool, the management, administration, provision, expansion and improvement of the services that the user decides to hire, register, or use the adequacy of said services to the preferences and tastes of the users, the study of the use of the use of the services by the use of the users Services, the sending of necessary updates, product circulars (quality), the shipment, by traditional and electronic means, technical, operational and commercial information about our range of irrigation and pool products and others related by Bricoandpool currently and in the future.

Use of public profiles in the different RR.SS.

Bricoandpool has a profile in the main social networks of the Internet knowing in all cases responsible for the processing of their followers, fans, subscribers, commentators and other user profiles (hereinafter, followers). The treatment that Bricoandpool will carry out with these data will be, at most, that the social network allows corporate profiles. Thus, Bricoandpool can inform his followers by any way that the social network allows on their news, activities, promotions. In no case will Bricoandpool extract data from social networks, unless the user's consent was obtained punctually and expressly. When, due to the nature of social networks, the effective exercise of the follower's rights is subject to the modification of his personal profile, Bricoandpool will help him and advise to this end to the extent of his possibilities. The RRSS profiles of which the company is the owner are:

What purposes are we going to treat your personal data?

  • Answer your consultations, requests or requests.

  • Manage the requested service, answer your application, or process your request.

  • Interact with you and in a community of followers.

What is the legitimation for the processing of your data?

  • For more information about Facebook click here.

  • For more information about Instagram Pulse here.

The acceptance of a contractual relationship in the corresponding social network environment, and according to its privacy policies:

Knowing Bricoandpool in all cases responsible for the processing of the data of their followers, fans, subscribers, commentators and other user profiles (hereinafter, followers). The treatment that Bricoandpool will carry out with these data will be, at most, that the social network allows corporate profiles. Thus, Bricoandpool can inform his followers by any way that the social network allows on his news and activities. In no case will Bricoandpool extract data from social networks, unless the user's consent was obtained punctually and expressly. When, due to the nature of social networks, the effective exercise of the follower's rights is subject to the modification of his personal profile, Bricoandpool will help him and advise to this end to the extent of his possibilities.

Information Law.

After the corresponding request, Bricoandpool will immediately communicate in writing, in accordance with the applicable legislation, if we have stored of his personal character, and what are these. In the event that it is registered as a user, we offer you the possibility of personally consulting your data, and, where appropriate, proceed to your elimination, modification and/or update. 

Description of measures taken by Bricoandpool derived from RGPD:

Our users/customers and suppliers of Bricoandpool are informed that, in accordance with the GDPR and LOPD-GDD regulations applicable to the activity carried out by the company, the measures taken to obtain an optimal level of compliance are detailed:

  • Prepare a registration of treatment activities in accordance with article 30 of the GDPR.

  • Identify the legal basis of data processing, according to articles 6 and 9 of the RGPD.

  • Audit the information entry channels and forms/internal documents and inform those interested in relation to the processing of their data, according to articles 13 and 14 of the GDPR.

  • Attend the rights of interested parties, in relation to their rights of: access, rectification and suppression, limitation of treatment, data portability (Article 20 of the RGPD), opposition and automated decisions, establishing a direct channel of attention: dpo@fontia.es

  • Audit and request the guarantees of compliance with the company's treatment managers, and sign a treatment manager contract, in accordance with article 28 of the RGPD. Bricoandpool facilitates the aforementioned procedure making accessible through our DPO: 1) Document of guarantees of compliance and detail of the measures adopted, 2) Model of access contract to Bricoandpool data.

  • Perform a risk analysis and, where appropriate, an impact assessment; To facilitate the fulfillment of these obligations, you can consult the AEPD website: https://www.aepd.es/es/prensa-y-comunicacion/notas-de-prensa/la-aepd-publica-un-modelo-de-informe-para-ayudar-las-empresas .

  • Bricoandpool, as a responsible and aware company with regulatory compliance, recommends its workers, customers, users and interested parties to subscribe the Infibe alert newsletters (www.incibe.es) OSI (www.osi.es) and the cert (www.incibe-cert.es)

Links to subscribe to the different referred portals will allow possible to know possible threats and incidents:

  • Existence of an internal protocol to notify security violations; Data safety violations to data protection authorities (Article 33 of the GDPR) and the subjects whose data has been compromised (Article 34 of the RGPD). For this purpose, before any incident that supposes a risk to the rights and freedoms of those affected, Bricoandpool will notify him as soon as possible to the client, and will assist him to make these notifications.

  • The company has appointed a data protection delegate officially before the registration enabled for this purpose in the AEPD (www.aepd.es) according to articles 37, 38 and 39 of the RGPD. Bricoandpool, makes available to customers/users and interested, the following contact mail of the DPO designated for issues related to data protection/rights exercise: dpo@fontia.es

  • Bricoandpool, in compliance with current regulations, also informs you of the right that assists you to file a claim/request more information before the control authority (www.aepd.es)

Related regulations:

If you want to obtain more information about the regulations that assist, protect and fix your rights, we put available the regulations that have inspired the present privacy policy and that are relevant to you:

Contact: If you need any clarification about this privacy policy, you want to formulate any issues or claim, or exercise exercise, please address our internal security manager in data protection/DPO, through the data shown below, indicating in the subject: "Data protection".

Updated and reviewed privacy policy writing to June 1, 2022.