BASIC PRIVACY INFORMATION.
1. Responsible: Bizum, S.L.
2. Purpose of processing: To manage queries and requests sent to us through the “Contact” channel and the “Bizzi” Virtual Assistant, manage contests, sweepstakes and other activities promoted by Bizum, manage relationships with commercial contacts, manage communication and the sending of information for commercial or advertising purposes and provide the Bizum service to registered users.
3. Legitimation: Consent and legitimate interest (commercial contacts and use of the alias).
4. Recipients: No data will be transferred to third parties unless legally required, as well as to the recipients necessary to provide the Bizum service.
5. Rights: Access, rectify and delete data, as well as other rights, as explained in the additional information.
6. Additional Information: Additional detailed information on data protection and privacy can be found below.
ADDITIONAL PRIVACY INFORMATION
I. PERSON IN CHARGE OF THE TREATMENT
Contact details of the responsible party: Bizum, S.L., with CIF B-87599478 registered office: Francisco Sancha, 12 – 28034 Madrid (hereinafter, Bizum).
II. SCOPE OF THE POLICY
When you access and use https://www.bizum.com/es you agree to accept this Privacy Policy, as well as the provisions contained in the Legal Notice and Cookies Policy.
In Bizum we provide you with information so that, prior to filling in your personal data, you can access the Privacy Policy and any other relevant information regarding Data Protection.
III. PURPOSES OF DATA PROCESSING.
For what purposes do we process your personal data?
Bizum is committed to using your personal data for specified, explicit and legitimate purposes.
In those cases in which it is planned to process your personal data for a purpose other than the one you initially consented to, you will be provided with sufficient information about the new purpose to obtain, once again, your consent.
In cases where your personal data may be used for profiling or automated decision making, you will be provided with sufficient information about the same and the consequences of such decisions.
We collect personal information necessary for the purposes set forth in this Privacy Policy:
In which cases are personal data requested through our website or through other channels?
– To answer any questions you may have through the Contact Us channel and the “Bizzi” Virtual Assistant.
– To manage the contests and sweepstakes promoted by Bizum and whose Legal Bases can be consulted through the website https://www.bizum.com/es.
– To establish business relationships through the contact persons of other companies.
– To manage the communication and sending of information for commercial or advertising purposes by e-mail, if the user has expressly authorized it.
– To register as a user of the Bizum service through the Affiliated Entities published in https://bizum.com and in accordance with its Terms and Conditions.
– To carry out, with the collaboration of registered users, activities to evaluate and improve the operation of the Bizum service.
What use will we make of the personal information we use?
– To answer queries made by users through the Contact Us channel and the “Bizzi” Virtual Assistant.
– To manage the delivery of prizes, to comply with the corresponding tax obligations, as well as to comply with additional purposes contained in the Legal Bases of each contest or sweepstakes and published in https://www.bizum.com/es.
– To manage business relationships with other companies through contact persons.
– To manage the communication and sending of information for commercial or advertising purposes by e-mail, if the user has expressly authorized it.
– To provide the Bizum service to registered users and offer them a secure user experience.
– To carry out, with the collaboration of registered users, activities to evaluate and improve the operation of the Bizum service.
How long will we keep your data?
Contact channel and Virtual Assistant “Bizzi” data: A maximum of 5 years in accordance with Article 1.964 of the Civil Code (limitation period for personal actions).
Contest and Sweepstakes Winners Data:
– During the time necessary to make effective the delivery of the Prize and once delivered for a maximum of 5 years in accordance with Article 1.964 of the Civil Code (limitation period for personal actions);
– For 4 years for data related to the determination of tax debts, except when the particular rules establish other periods of time.
– For 2 years, in relation to the data and purposes of data transfer for publication on the website https://www.bizum.com/es.
Business contact data: For the period necessary to maintain business relationships and, once terminated or, exercise the right of deletion by the person concerned, a maximum of 5 years in accordance with Article 1.964 of the Civil Code (statute of limitations for personal actions).
Data for the communication and sending of information for commercial or advertising purposes: Once you revoke your consent to send these communications, for a maximum of 5 years in accordance with Article 1.964 of the Civil Code (limitation period for personal actions).
Data for the provision of the Bizum service: Once the user unsubscribes from the service for a maximum of 5 years in accordance with Article 1.964 of the Civil Code (limitation period for personal actions).
Data for the performance of activities to evaluate and improve the operation of the Bizum service: Once the registered user’s participation in such activities has ended, for a maximum period of 5 years in accordance with Article 1.964 of the Civil Code (statute of limitations for personal actions).
IV. LEGITIMACY
We process your data on the legal basis of providing you with the information or services you request, as well as to manage the delivery of the prize that may have been awarded for your participation in contests or sweepstakes promoted by Bizum, manage your participation in other activities promoted by Bizum, send you information for commercial and advertising purposes, and based, therefore, on the consent of the affected person.
We may also process personal contact data based on Bizum’s legitimate interest in establishing, managing and maintaining business relationships with other companies.
Also based on the legitimate interest of offering a service with a secure user experience, in which the payer of Bizum transactions can verify the identity of the beneficiary prior to the completion of the transaction, Bizum uses the alias data, consisting of the name together with the initials of the user’s surname.
In any case, you will have full rights over your personal data and their use and may exercise them at any time.
In no case we will transfer your data to third parties without previously informing you and requesting your consent.
In connection with the use of the services of the Web or the use of any other channel through which data is collected, sending your personal data is mandatory to contact you, and to meet the request that you send us. Likewise, failure to provide the personal data requested or not accepting this data protection policy means the impossibility of processing requests made on this website or any other channel.
V. TARGET AUDIENCE
To whom do we give your data?
Your personal data may be transferred to the Bizum service member entities in order to provide such service to the users registered in it. In addition, in compliance with the tax obligations arising from the holding of contests and sweepstakes promoted by Bizum, your data may be transferred to the Tax Agency.
Additionally and for the purpose of managing the newsletter available on the website, your data may be transferred to the provider Mailchimp, a company of The Rocket Science Group, LLC, which may involve international transfers by appropriate safeguards of your data to the United States in accordance with the provisions of art. 46.3 a) of the General Data Protection Regulation.
Regarding your alias data, which is intended to identify you to the other users of the Bizum service, thus providing a secure user experience to the transactions carried out through the service, we inform you that they will be accessible by all users of the service who, knowing your cell phone number, initiate a transaction in which you are a counterparty.
Apart from the above assumptions, Bizum will only transfer your data in case of legal obligation and in no case your personal data will be shared with third parties without obtaining your prior consent, unless the transfer of your data is necessary for the maintenance of the relationship with you, as well as in the cases provided for by the data protection regulations in force at any time.
VI. PROVENANCE
All personal data that we process through our website and our channels comes directly from the data subject.
In the event that the personal data were not obtained directly from the interested party, because they come from a legitimate transfer, or from sources of public access, it will be duly informed in this Privacy Policy or by any means that allows accrediting that the duty to inform has been fulfilled.
VII. DATA PROTECTION RIGHTS
How can rights be exercised? You can send a written communication to the registered office of Bizum, including in any case a photocopy of your ID card or other similar identification document, to request the exercise of the following rights:
– Right to request access to personal data: you may ask Bizum if this company is processing your data.
– The right to request the rectification of inaccurate or incomplete data, or the deletion of such data.
– In certain circumstances and for reasons related to your particular situation, you will have the right to object to the processing, in which case, Bizum will stop processing the data, except for compelling legitimate reasons or for the exercise or defense of possible claims.
– In certain circumstances, you may exercise your right to data portability: in case you want your data to be processed by another entity, Bizum will facilitate the portability of your data to the new controller if applicable.
– In certain circumstances, you may request the right to limit the processing of your data, in which case they will only be kept by Bizum for the defense of possible claims.
– In certain circumstances, there is the possibility to withdraw consent: where consent has been given for a specific purpose, you have the right to withdraw consent at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.
How can I exercise these rights? In any case, we provide you with forms that will allow you to exercise the aforementioned rights in an easier and faster way by sending it to the Bizum contact address, which are available at https://www.bizum.es.
How can I complain to the Supervisory Authority: If a user considers that there is a problem with the way Bizum is handling their data, they can address their complaints to Bizum or to the data protection supervisory authority authority, being the Spanish Data Protection Agency(www.agpd.es) in the case of Spain.
VIII. SECURITY
At Bizum, we maintain the highest levels of security to protect your personal information from loss, destruction, accidental damage, and unauthorized or unlawful access, processing or disclosure. When we receive your data, we use rigorous procedures and security features to prevent unauthorized access.
To this end, Bizum will assess the risks inherent to the processing (their likelihood and severity), and implement measures to mitigate them, which will ensure an appropriate level of security, including confidentiality, taking into account the state of the art, the cost of implementation and the nature, scope, context and purposes of the processing. with respect to the risks and the nature of the personal data to be protected.
The actions described in this section and appropriate to ensure an adequate level of security for the identified risk shall include, where appropriate, among others, the following measures:
1. Pseudonymization and encryption of personal data, where appropriate.
2. Measures capable of guaranteeing the confidentiality, integrity, availability and permanent resilience of the processing systems and services.
3. Measures capable of restoring availability and access to personal data quickly in the event of a physical or technical incident.
4. Existence of a process of regular verification, evaluation and assessment of the effectiveness of technical and organizational measures to ensure the security of processing.
5. Periodic assessment of the risk of accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or unauthorized communication or access to such data.
6. Measures to ensure that any person acting under the authority of Bizum who has access to personal data may only process such data on instructions from Bizum.
IX. CONFIDENTIALITY
The personal data that may be collected will be treated with absolute confidentiality, committing ourselves to keep them secret and guaranteeing the duty to keep them by adopting all necessary measures to prevent their alteration, loss and unauthorized access or treatment, in accordance with the provisions of the applicable legislation.
X. MINORS
Minors under 18 years of age may not use the services available through https://www.bizum.com/es, or other channels, without the prior authorization of their parents, guardians or legal representatives, who will be responsible for all acts performed by minors in their care.
XI. RESPONSIBILITY
The user will be solely responsible for the completion of the forms with false, inaccurate, incomplete or outdated data.
XII. COOKIES
Some of the pages of the portal https://www.bizum.com/es have “cookies”, which are small data files that are generated in the User’s computer and that allow our systems to remember some characteristics or navigation preferences of the User. For more information you can read our Cookies Policy.