Additional information on data protection

The data controller is:

Identity: CENTROS INFANTILES BABYWORLD, S.L.

Tax ID: B92417617

Address: C/ Curtidores, 1 – 29006 Málaga (Spain)
Phone numbers: +34 951 022 323 | +34 685 873 532
Email: administracion@babynetonline.com

Data Protection Officer

The DATA CONTROLLER does not have a Data Protection Officer.

Purposes and legal basis of the processing

a) In general:

• Purpose: The DATA CONTROLLER processes the personal data provided by its customers and/or web users for the following purposes: Contact the interested party. Respond to queries and requests for information received. Provide requested socio-educational services. Carry out administrative, accounting, and tax management of the company. Send commercial communications about our socio-educational services that we believe may be of interest to the individual via letter, telephone, email, SMS/MMS, WhatsApp, or other equivalent electronic means, provided that the interested party has consented to the processing of their personal data for this purpose.
• Legal basis for this processing: Execution of the pre-contractual or contractual relationship. Consent of the interested party, which may be revoked at any time.

b) WEBSITE electronic form:

The DATA CONTROLLER processes the personal data provided by customers and/or web users through the existing contact electronic form on the WEBSITE for the purposes identified below:

Regarding the “Contact Form” and other inquiries (those that may be made through the email addresses listed on the WEBSITE):

• Purpose: Contact interested parties and respond to their inquiries. Send commercial communications about our socio-educational services that we believe may be of interest to the individual via letter, telephone, email, SMS/MMS, WhatsApp, or other equivalent electronic means, provided that the interested party has consented to the processing of their personal data for this purpose.
• Legal basis for this processing: Consent of the interested party, which may be revoked at any time.

When the data requested in the electronic form is necessary, the DATA CONTROLLER will indicate its mandatory nature at the time of data collection from customers and/or users, and failure to provide it will mean that the corresponding request cannot be fulfilled.

Processing activity record

We inform you that the personal data obtained from customers and/or web users through the email addresses listed on the WEBSITE are part of the Processing Activity Record (RAT) of the DATA CONTROLLER, which will be periodically updated in accordance with the provisions of GDPR EU 2016/679 and LOPDGDD 3/2018.

Recipients

The personal data of the interested parties will be communicated to the recipients indicated below:

a) In general:

• The DATA CONTROLLER’s service providers as data processors, within the framework of the corresponding provision of services (lawyers, accounting, tax and labor consultancy, consultants, and information technology service providers (Grupo Loading Systems S.L., Tax ID: B53927950, hosting of the WEBSITE and email service).
• Competent authorities and organizations, to the extent necessary to comply with legal obligations.

Data transfers to other countries

• Google Inc., depending on the Privacy Shield Framework
• No data transfers to third countries are foreseen.

Retention periods

Personal data will be retained:

a) In general:

• Data will be retained until the interested party requests their deletion, and in any case, for the years necessary to comply with legal obligations. In such cases, we will keep your data blocked for the legally required periods.

b) Regarding the “Contact Form” and other inquiries (those that may be made through the different email accounts listed on the WEBSITE):

• Until the web user revokes the consent granted at any time, without affecting the legality of the processing based on the consent prior to its withdrawal.

Personal data will be retained until the end of the relationship between the DATA CONTROLLER and the applicant, unless the latter requests their deletion earlier. To this end, the applicant is reminded that they must inform the DATA CONTROLLER as the recipient to whom personal data is communicated of any rectification or deletion of the data of their representatives, authorized persons, and other contact persons.

Once the relationship is concluded, to the extent that the personal data of the interested parties are relevant for the DATA CONTROLLER’s liability purposes with respect to the applicants, this data will be kept, duly blocked, at the disposal of the competent judicial authorities or public administrations, for the enforcement of liabilities arising from the processing for the statutory limitation period.

Rights of the interested parties

Customers and/or web users of the WEBSITE may exercise, to the extent applicable, the following ARSULIPO rights regarding the processing of their personal data: access, rectification, deletion (right to be forgotten), limitation, portability, and objection, as well as not being subject to individual automated decisions and, when the processing is based on consent, the right to withdraw it at any time.

Customers and/or web users may exercise these rights by a written and signed request sent to the postal address of the DATA CONTROLLER at C/ Curtidores, 1 – 29006 Málaga (Spain) or by email to administracion@babynetonline.com, attaching, in both cases, valid proof of identity under the law, such as a photocopy of the ID/NIE or equivalent document, and clearly indicating the right they wish to exercise.

Web users also have the right to lodge a complaint with the competent supervisory authority (Spanish Data Protection Agency) if they believe that the processing does not comply with current regulations or if they consider that their rights regarding the protection of their personal data have been violated, especially when they have not obtained satisfaction in the exercise of their rights, through the website https://www.aepd.es.

These rights will be addressed by the DATA CONTROLLER within a period of 1 month, which may be extended to 2 months if the complexity of the request or the number of requests received so requires. All of this without prejudice to the obligation to retain certain data in accordance with legal terms and until any liabilities arising from possible processing, or, as the case may be, from a contractual relationship, are time-barred.

In addition to the above, and in relation to data protection regulations, web users who so request have the possibility to arrange the fate of their data after their death.

Sending Commercial Communications

Unless the customer and/or web user objects, they authorize and give their express consent for the sending of commercial communications, by electronic means, related to the products and/or services offered by the DATA CONTROLLER.

In accordance with the provisions of Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSICE), web users are informed that if they do not wish to receive commercial communications, by electronic means, about our services, they may object at any time to the processing of their data for promotional purposes, in a simple and free manner, by sending an email to the address administracion@babynetonline.com, indicating UNSUBSCRIBE in the subject of the message.

The data provided will be retained for as long as the commercial relationship is maintained or for the years necessary to comply with legal obligations.

Social Media Policy

The DATA CONTROLLER has profiles on the Internet social media networks Facebook https://www.facebook.com/ceibilinguebabynet and YouTube https://www.youtube.com/watch?v=B4Rfb_jqoqg In all cases, it is considered responsible for the processing of data of its users, including followers, subscribers, fans, or simply people who make comments or inquiries through these channels.

In this regard, the DATA CONTROLLER may use these profiles to inform its users of news it deems appropriate for the purposes of the services offered, or it may also share information or current articles published by other users of social media networks. In no case will it use personal information of users without their consent for purposes other than those expected in each of the mentioned social media networks, requesting the user’s consent if necessary.

Accuracy of Data Provided by Data Subjects

The customer and/or web user is responsible for ensuring that the information provided by sending emails to the different accounts under the Internet domain babynetonline.com is accurate, and they are responsible for the accuracy of all the data they communicate and will keep it updated to reflect a real situation, being responsible for false or inaccurate information provided and for any damage, inconvenience, and problems that it may cause to the DATA CONTROLLER or third parties.

Security Measures

The DATA CONTROLLER guarantees that it has implemented on the WEBSITE the appropriate technical and organizational policies to apply the security measures established by the GDPR EU 2016/679 and the LOPDGDD 3/2018 in order to protect the rights and freedoms of customers and/or web users and has provided them with the appropriate information so that they can exercise them.

To protect individual rights, especially with regard to automated processing and with the intention of being transparent with customers and/or web users, a policy has been established that includes all such processing, the purposes pursued by the latter, their legitimacy, and also the tools available to customers and/or web users to exercise their rights.

The website has SSL encryption, which allows the secure sending of personal data by the user through the electronic forms on the website, developed with the WordPress Caldera Forms plugin, used for form management.

The website is designed with the content management system (CMS) WordPress and hosted on the servers of the data center of Grupo Loading Systems S.L., N.I.F.: B53927950, which is provided to the DATA CONTROLLER.

All information will be kept and managed with due confidentiality, applying the necessary computer security measures to prevent unauthorized access or use of your data, their manipulation, deterioration, or loss.

However, the customer and/or web user should bear in mind that the security of computer systems is never absolute. When personal data are provided over the Internet, this information may be collected without consent and processed by unauthorized third parties. The DATA CONTROLLER disclaims any responsibility for the consequences of such actions for web users, if they voluntarily published the information.

Acceptance and Consent

The customer and/or web user declares to have been informed of the conditions regarding the protection of personal data, accepting and consenting to the automated processing of these data by the DATA CONTROLLER in the manner and for the purposes indicated in this Privacy Policy. Certain services provided on the WEBSITE may contain particular conditions with specific provisions regarding the protection of personal data.

Changes to this Privacy Policy

The DATA CONTROLLER reserves the right to modify this Privacy Policy to adapt it to legislative, jurisprudential developments, interpretations of the Spanish Data Protection Agency, as well as to industry practices.

In such cases, the DATA CONTROLLER will announce the changes introduced on the websites with reasonable notice before their implementation.

This privacy policy may be supplemented by the Legal Notice, Cookie Policy, and General Contract Conditions that, where appropriate, are collected for certain products or services, if such access involves any special features regarding the protection of personal data.

Applicable regulations

Our Privacy Policy has been designed in accordance with REGULATION (EU) 2016/679 of the EUROPEAN PARLIAMENT and of the COUNCIL, of April 27, 2016, regarding the protection of individuals concerning the processing of personal data and the free movement of this data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter GDPR EU 2016/679, and as long as it does not contradict the aforementioned Regulation, in accordance with the provisions of Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights, hereinafter LOPDGDD 3/2018.

By providing us with your data, the customer and/or web user declares to have read and understood this Privacy Policy, giving their unequivocal and express consent to the processing of their personal data in accordance with the purposes and terms expressed herein.