In compliance with current legislation on the protection of personal data, this document (hereinafter, the “Privacy Policy”) establishes the terms and conditions governing the processing of personal data provided by users in connection with the contracting of online services.

The Privacy Policy may change over time or be updated due to changes in the services we offer or legislative amendments.

Data Controller and Contact Details

The data provided will be incorporated into a file whose controller is BSIDE, S.L., with registered address at Cristobal de Moura, 49 – 08019 – Poblenou – Barcelona, Spain, holding Tax ID (NIF) B67304543, registered with the Barcelona Commercial Registry, volume 46734, folio 13, section 8, page B-529185, info@bside.com (hereinafter, “BSIDE”).

Exercise of Rights

You may exercise your data protection rights at any time by writing to the postal or email address indicated above. In order to protect your privacy and security, we will take reasonable steps to verify your identity before granting access or making corrections.

• Any person has the right to obtain information as to whether BSIDE is processing personal data concerning them, or not.
• Data subjects have the right to access their data, as well as to request the correction of inaccurate data or, where applicable, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
• Under certain circumstances, data subjects may request that the processing of their data be restricted, in which case it will only be retained for the exercise or defense of claims.
• Under certain circumstances, and for reasons related to their particular situation, data subjects may object to the processing of their data. BSIDE will stop processing the data, except for compelling legitimate reasons or the exercise of possible claims.
• Consent-based processing may be withdrawn at any time.
• Data subjects may request data portability where applicable.

In accordance with Article 77 of Regulation (EU) 2016/679 and Articles 60 et seq. of Organic Law 3/2018, of December 5, on the Protection of Personal Data and the guarantee of digital rights, you may file a complaint regarding the processing of your personal data with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) if you believe that such processing infringes the aforementioned Regulation or any other applicable legal provision.

Data We Process

• Identification and billing information: Name, surname(s), nationality, national ID/NIE/passport number, address.
• Other contact information: Email address and phone number.

Purpose of Processing

• The provision and management of the services offered on the BSIDE portal. BSIDE archives the electronic service contracting documents, which are accessible to clients.
• Where applicable, and when express and unambiguous consent authorizing it has been given, the sending of commercial communications.
• The sending and receiving of contact communications.
• Insurance management.
• Compliance with legal, tax, and accounting obligations, as well as judicial or administrative obligations.
• Claims in the event of breach of contractual obligations.

Collection of Data

The data processed by BSIDE is that provided by the data subject at the time of formalizing the contracting of any service (whether in person, through our online service contracting forms, or by phone), as well as through our website contact form.

Legal Basis

• Contractual: Provision, control, and maintenance of the service.
• Compliance with legal and tax obligations.
• Consent of data subjects for commercial purposes, when express and unambiguous consent has been given.

Recipients

• Authorized BSIDE personnel for the purposes described in this Privacy Policy.
• Third-party IT service providers for technical purposes, to help BSIDE provide you with its services.
• Insurance companies contracted by BSIDE.
• Judicial or administrative bodies.

Data Retention

Personal data is retained for different periods, depending on the purposes of the processing:

Purpose and Retention Period

Registration and provision of services: For the duration of the business relationship. However, information that may serve as evidence of a right or that must be retained in compliance with a legal requirement may be subject to an interim archiving policy for a period not exceeding the time necessary for the purposes for which it is retained, in accordance with applicable legislation.

Payment – Payment card information: After the effective completion of payment.

However, payment card information (excluding the visual cryptogram):

• That may serve as proof of payment (i.e., the card number and expiration date) is subject to an interim archiving policy for a period of 13 months from the effective payment for a credit card and 15 months for a deferred debit card, to be used only if the transaction is disputed;
• May be retained for a longer period, subject to your express consent, to facilitate future payments.

In any case, when the payment card expires, the related information will be deleted.

Promotional and marketing activities: 3 years from the end of the relationship with BSIDE.

Contact communications: 1 year after the last communication, provided it is not related to disputes or claims, in which case it may be retained for the corresponding legal statute of limitations period.

Billing: For the periods required to comply with the corresponding legal, tax, and accounting obligations, plus the statute of limitations period for any possible claim, penalty, inspection, or action.