PRIVACY POLICY FOR BLIVALE LTD USERS - CANARY ISLANDS BLIVALE SL
BLIVALE LT - Canary Islands BLIVALE SL (hereinafter " BLIVALE "), as data controller, wishes to inform users (hereinafter "Users") of the website www.blivale.com (hereinafter " BLIVALE Website ") regarding the processing of personal data provided to BLIVALE , as required by the new General Data Protection Regulation (GDPR) , applicable from 25 May 2018.
1. Owner and data controller
The data controller is BLIVALE LTD - Canary Islands BLIVALE SL with registered office in London (UK) and in Tenerife (Canary Islands - Spain) and can be contacted at the following email address:
2. Personal data collected
BLIVALE processes, in accordance with this privacy policy, the data provided by Users, including
a) personal and contact data provided when creating an account on the Site;
b) data relating to purchases made through the Site;
c) navigation data relating to the use of the services offered through the Site collected through cookies in accordance with the cookie policy available at the following link Information on the use of Cookies ;
d) data provided in the event of a request for information and assistance;
e) data provided and collected for the purposes and in the context of any participation in BLIVALE competitions and/or prize competitions, it being understood that in this case this information will be integrated with the information that regulates the processing of personal data of the related competitions and/or prize competitions.
There are no health data and in general special categories of personal data pursuant to Article 9 of the European Privacy Regulation. The data of minors will be processed in accordance with the methods described in the following paragraph 8.
The above data are processed only to the extent necessary to achieve the purposes described in point 4 of this information.
3. Methods of data processing
The User's personal data are processed with the support of electronic and/or paper means and are protected by appropriate security measures to ensure the confidentiality and security of personal data. In particular, BLIVALE adopts adequate organizational and technical measures to protect the personal data in its possession against loss, theft, as well as unauthorized use, disclosure or modification of personal data.
BLIVALE proceeds to anonymize personal data and remove identifying data if there is no need to process personal data in an identifiable form for the purposes of processing and upon expiry of the retention period indicated in the following paragraph 10.
4. Purpose of processing
The purposes for which the User is required to provide BLIVALE with his/her personal data are the following:
a) to allow the User to register on the Site by creating a personal account and carrying out the activities regulated in the Terms and Conditions of the Site, including purchases on the Site, using the services made available through the Site, including participation in prize competitions and customer support services and to assert and defend rights against the User and third parties (hereinafter “Contractual Purposes”);
b) to comply with any legal and regulatory obligations (hereinafter “Legal Purposes”);
c) subject to the User's consent, for sending newsletters and commercial communications, through traditional and remote means of communication including e-mail, SMS, MMS, social networks, instant messages, mobile applications, banners, fax, post and telephone, for the promotion and/or sale of products and/or services marketed by BLIVALE and for customer satisfaction surveys (“ BLIVALE Marketing Purposes ”);
d) subject to the User's consent, send marketing communications from other companies of the BLIVALE group and/or commercial partners, in relation to their products and services according to the methods referred to in point c) above, the list of which is available upon request of the User (“Third Party Marketing Purposes”);
e) in the event that the User has given his/her consent to the processing of his/her data for the Marketing Purposes of BLIVALE , send newsletters and communications relating to the products and services marketed by BLIVALE via email, SMS with a frequency not exceeding 3 communications per month to Users identified solely on the basis of non-invasive membership categories such as, for example, the age group, any opening of previous newsletters received, the methods with which the User makes his/her purchases ("Legitimate Marketing Interest");
f) carry out activities functional to the sale of companies and branches of companies, acquisitions, mergers, demergers or other transformations and for the execution of such operations ("Legitimate Intent of Commercial Interest").
5. Legal basis for processing
The processing of personal data for Contractual Purposes is mandatory as it is necessary for registration, for carrying out the activities referred to in the Conditions of Sale of the Site, for purchasing products online and for using specific services offered through the Site. The provision of personal data for legal purposes is mandatory as required by current legislation. If the User does not wish his/her personal data to be processed for these purposes, he/she will not be able to use the Website and the services made available through it. The processing of personal data for BLIVALE
Marketing Purposes is optional and subject to the prior consent of the User. Failure to provide consent will make it impossible for BLIVALE, companies of the BLIVALE group and/or selected commercial partners to keep the User updated on new products or services, promotions, personalized offers, as well as to carry out market research and send communications or other informative material that may be in line with their interests. The processing for legitimate marketing interest purposes is functional to the pursuit of a legitimate interest of BLIVALE adequately balanced with the interests of the Users in light of the limits imposed on such processing illustrated in paragraph 4 f) and will be carried out with effect from 25 May 2018, the effective date of the Privacy Regulation. The processing for legitimate business interest purposes is carried out pursuant to art. 24, paragraph 1, letter d) of the Privacy Code and for the pursuit of the legitimate interest of BLIVALE and its counterparties in carrying out the economic operations indicated therein pursuant to article 6, letter f) of the Privacy Regulation, adequately balanced with the interests of the Users as the processing occurs within the limits strictly necessary for the execution of such operations.
6. Scope of communication and dissemination of data
BLIVALE, for the purposes referred to in point 4, may communicate the Users' data, strictly necessary for each type of processing, to the following categories of subjects: a) to BLIVALE
's collaborators, employees and suppliers , within the scope of their duties and/or any contractual obligations with them, in relation to commercial relations with the Users; b) to subcontractors and/or subcontractors engaged in activities related to the execution of the services and products offered by BLIVALE ; c) to other companies of the BLIVALE group , national and foreign, located in countries, better specified in the following paragraph 7; d) to post offices, freight forwarders and couriers for the sending of products purchased by the User and/or other material relating to the performance of BLIVALE's services; e) to legal, administrative and tax consultants to the extent necessary or functional to BLIVALE's activity, with the methods and for the purposes illustrated above; It is f) to banking institutions for the management of collections and payments arising from the execution of contracts with the User. The User's personal data will not be disclosed.
7. Personal data are transferred abroad
Personal data may be freely transferred outside the national territory to countries located in the European Union, but may also be transferred outside the European Union and in particular to the United Kingdom, Asia, the Americas and Oceania. Any transfer of the User's personal data to countries located outside the European Union will, in any case, take place in compliance with the suitable and appropriate guarantees for the purposes of the transfer pursuant to the applicable legislation and in particular art. of the Privacy Code and arts. 45 and 46 of the Privacy Regulation.
The User will have the right to obtain a copy of the data held abroad and to obtain information about the place where such data is stored by making an express request to the Data Controller at the address indicated in point 9 of this information notice.
8. Minors aged 16 and 18
The site offers services that can also be used by minors aged 16 and 18. In these cases BLIVALE collects and processes personal data of minors exclusively for the purposes and in the manner indicated in this information notice in compliance with the rules on the processing of personal data of minors pursuant to art. 8 of the Privacy Regulation with the prior consent of the parent and/or guardian and/or legal guardian whose data may be collected only to obtain such consent in the manner indicated on the Site.
Our site is not designed for children under the age of 13. We do not intentionally collect personal data on visitors of that age group.
9. User Rights
The User may, at any time and free of charge
(a) obtain confirmation of the existence or otherwise of data concerning him/her and their communication;
(b) know the origin of the data, the purposes and methods of processing, as well as the logic applied to the processing carried out using electronic tools;
(c) request the updating, rectification or - if interested - the integration of the data;
(d) obtain the cancellation, transformation into anonymous form or blocking of data possibly processed in violation of the law, as well as to oppose, for legitimate reasons, the processing;
(e) oppose, in whole or in part, the processing of data concerning him/her for direct marketing purposes carried out using automated methods and/or traditional methods;
(f) revoke, at any time, consent to the processing of data, without prejudice in any way to the lawfulness of the processing based on the consent given before the revocation.
In addition to the rights listed above, the User may benefit from the rights referred to in paragraph 10, letter a) starting from 25 May 2018. b) of this information.
At any time the User may exercise the rights listed above, change contact details, communicate to BLIVALE any updates to their data, request the cancellation of their personal data communicated by third parties, or obtain more information about the use by BLIVALE of their personal data, by contacting BLIVALE at the address
10. Third Party Websites
The BLIVALE Site provides links to external websites, which are not under the control of BLIVALE . BLIVALE does not represent third party websites. When you access non-BLIVALE websites, you do so at your own risk. BLIVALE is not responsible for the reliability of data, opinions, advice or statements made on third party websites. BLIVALE provides these links for convenience only. The inclusion of such links does not imply that BLIVALE approves, recommends or assumes any responsibility for the content of such sites.
11. Provisions applicable from 25 May 2018
The following provisions will come into force from 25 May 2018, as a result of the entry into force of the Privacy Regulation.
a) Period of retention of personal data: BLIVALE will retain personal data for the period necessary to fulfil the purposes for which they were collected in accordance with paragraph 2 above. In any case, the following retention periods apply to the processing of personal data for the following purposes:
- the data collected for the Contractual Purposes referred to in paragraph 4, letter a) are retained for the entire duration of the contract and for 10 years following its expiry for defense purposes and/or to assert a right of BLIVALE in court and/or out of court in the event of disputes relating to the execution of the contract;
- the data collected for the legal purposes referred to in paragraph 4, letter b) are retained for a period equal to the duration prescribed for each type of data by law;
- the data collected for the Marketing Purposes of BLIVALE referred to in paragraph 4, letter c) are retained for a period equal to the entire duration of the User's registration on the Site through their account and/or participation in the competition and/or collection, as well as for 2 years following the termination, deactivation and/or cancellation of the same;
- the data collected for the Marketing Purposes of Third Parties referred to in paragraph 4, letter d) are retained for a period of 12 months from collection;
- the data collected for the purposes of legitimate marketing interest pursuant to paragraph 4, letter e) are retained for a period equal to the entire duration of the User's registration on the Site, through their account and/or participation in the competition and/or collection, and for a period of 2 years following the termination, deactivation and/or cancellation of the same;
- the data collected for the purposes of legitimate commercial interest pursuant to paragraph 4, letter f) are retained for a period of 10 years from the time of collection.
After the above-mentioned terms have elapsed, the User's data may be deleted, anonymized and/or aggregated.
b) Further rights: the User may at any time, according to the methods set out in the previous paragraph 9,
(a) request the restriction of the processing of personal data in the event that (i) you contest the accuracy of the personal data, for the period necessary to verify the accuracy of such personal data; (ii) the processing is unlawful and the User opposes the erasure of personal data and requests instead that their use be limited; (iii) although BLIVALE no longer needs them for the purposes of the processing, the personal data are necessary for the User to ascertain, exercise or defend a right in court; (iv) the User has objected to the processing pursuant to art. 21, paragraph 1, of the Privacy Regulation pending the verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party;
(b) object at any time to the processing of personal data;
(c) request the erasure of personal data concerning him/her without undue delay;
(d) obtain the portability of personal data concerning him/her;
(e) lodge a complaint with the Data Protection Authority where the conditions exist.
12. Changes and updates
This information is valid from the date indicated in its header. BLIVALE may also make changes and/or additions to this information, also as a consequence of any subsequent changes and/or regulatory additions to the Privacy Regulation.
If the User has doubts, observations or complaints about the methods of collection or use of their personal data, please contact BLIVALE through the Contact section of the Site.
