Privace policy

In compliance with Data Protection Regulation, and in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), and Organic Law 3/2018 of 5 December, on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD), FOOD SOURCING SPECIALISTS, S.L. (hereinafter, “FSS”) provides you with the relevant information regarding the processing of your personal data. 

1.       Who is the Data Controller?

2.       When do we collect your personal data?

Your personal data may be collected at the following moments:  

·         Through the different forms available. Our website has different forms through which we obtain information for different purposes, for example, contacting us and/or subscribe to our newsletter.

·         Through Cookies: our website installs cookies which collect information about your browsing. Please, for more information about our cookies, read our cookies policy. [DWF1] 

3.       What are the main purposes for processing your data?

Your personal data shall be processed for the following purposes:

·         Your data shall be processed to assist, manage and attend to possible requests, comments and/or consultations made by you.

·         The data provided during registration will be processed to create your user account from which you can consult and manage your activity with us.

·         The data provided at the time of contracting the subscription will be processed to manage the formalization of your purchase as indicated in the Terms and Conditions, process your orders and their delivery, as well as accounting and administrative management of the order placed.

·         In case you have given your consent, we will keep you informed by sending you our newsletter, whose content is mainly about our services, activities, projects and other relevant information.

·         Whenever we have your consent, we will disclose your personal data to ULTRA UX, S.L. with the purpose to send you offers, promotions and information regarding its services and products that may be of interest to you. Such communications may be made by the means that you have provided (phone, email, SMS and/or messaging system, among others).

·         Provided that we have the legitimacy to do so, we will process your data to send you offers, promotions and information about the services and products offered and marketed by FSS, which may be of interest to you, through the means that you have provided us for this purpose (telephone, email, SMS and/or messaging system, among others).

·         The information shall be processed in order to comply with our legal obligations, possible court and other authorities’ decisions. Whenever we have suspicions or indications of an action that may constitute an illicit/criminal offence, we will communicate your personal data to law enforcement agencies.

4.       What is the legal basis for processing your data?

The processing activities are made with the following legal basis:

·         When your personal data is processed to assist, manage and attend to possible requests, comments and/or consultations, the processing is carried out on the basis of your consent when you send us your query and/or request (Article 6.1.a) GDPR).

·         When your data is processed to create and manage your user account, as well as to formalize your purchase, process orders and their delivery, the processing is carried out on the basis of the performance of a contract to which you are a party or for the application of pre-contractual measures (Article 6.1.b) GDPR).

·         When your information is processed to send you our newsletter, the processing is carried out on the basis of your consent given through the pertinent checkbox and/or form enabled for this purpose (Article 6.1.a) GDPR). We remind you that the sending of our newsletter can be withdrawn at any time in each of the communications received via the mechanism provided for this purpose.

·         When your personal data is disclosed and processed to send you offers, promotions and information from ULTRA UX, S.L., the processing is done on the basis of your consent given through the pertinent enabled checkbox (article 6.1.a) GDPR).

·         When your data is processed to keep you informed about our services, promotions and products, the processing is carried out on the basis of the legal authorization provided for in article 21.2 LSSICE due to the existence of a prior contractual relationship with us, or on the basis of your consent (article 21.1 LSSICE). We remind you that the sending of such communications can be withdrawn at any time in each of the communications received via the mechanism enabled for this purpose.

·         When the information is processed in order to comply with our legal obligations, possible court and other authorities’ decisions, including any disclosure, the processing is done on the basis of compliance with our legal obligations (Article 6.1.c) GDPR). 

5.       How long do we store your data?

Your personal data shall be processed for the period necessary to comply with the purposes set out in this Privacy Policy, as well as to keep your personal information in compliance with the provision of the applicable law and regulations, especially in relation to the legal statute of limitations, and for the exercise or defense of claims.

Our criteria for doing so are determined by the purpose of the data collected and the fulfillment of that purpose (e.g. in the event of consent, you may withdraw it at any time); and the retention periods required by contractual and regulatory requirements.

Please note that, in some cases, we may retain your data for the time necessary to exercise or defend claims, requirements, liabilities and legal and/or contractual obligations arising from the processing, always being dully blocked.

6.       Who could be the recipients of your data?

Depending on the purposes for which the personal information is collected, such information may be accessed by the following persons:

·         Public administrations, Organisms and/or competent Authorities and, law enforcement authorities, in cases where there is a requirement, a legal obligation exists or we consider that there are indications and/or sufficient suspicions to be before an illicit or criminal offense.

·         Partners and third-party service providers that process information as data processors. We’ve entered into the relevant data processing agreement as required by personal data protection regulations. The relevant data processing agreement has been concluded with all our providers in compliance with data protection regulation.

·         Employees and/or collaborators authorized by FSS, always subject to the applicable data protection regulations;

·         If you have authorized it, to ULTRA UX, S.L. which is a company of our corporate group.

Please note that FSS may transfer certain personal information to a country outside the European Economic Area (EEA.), particularly to the United States. Such transfers are always carried out ensuring that we have adequate protection of personal data using safeguards permitted by law, in particular, the use of standard contractual clauses approved by the European Commission

7.       What are your rights when you provide us your data?

If we process your personal data, you’ve the following rights:

•              Right to request access to personal data: you may ask FSS if it is processing your data, and if it is, you may have access to the same.

•              Right to request the rectification of your data in case they are inaccurate or to request data to be completed if they are incomplete.

•              Right to request the erasure of your data.

•              Right to request the restriction of processing: in this case, FSS will only keep data for exercising or defending against claims.

•              Right to object to processing: we will cease to process personal data, unless they must continue to be processed for legitimate reasons or for exercising or defending against possible claims.

•              Right to the portability of data: in the event that a user would like for their data to be processed by another data controller, we will facilitate the transfer of their data to the new controller, if technically possible.

•              Right to not be the object of automated decision-making regarding your personal data.

If you had given your consent for any specific purpose, you may withdraw that consent whenever you wish, without affecting the lawfulness of the processing based on the consent prior to withdrawal.

To exercise your rights, please send us an e-mail to hola@verybluebox.com or write us to our postal address in Section 1 of this policy.

Whenever you consider it appropriate, you can lodge a complaint with a supervisory authority, in this case, the Spanish Data Protection Agency (https://www.aepd.es).

8.       Additional information

Minors: Our services are aimed exclusively at adults. Therefore, we do not knowingly collect information from minors. If parents or legal guardians believe that they children have submitted us personal data, please contact us by sending us an e-mail to hola@verybluebox.com.

Special categories of personal data. FSS does not collect or process data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic or biometric data, data concerning a natural person’s health, sex life or sexual orientation

Personal data of third parties. If the personal data provided belong to a third party, you guarantee that you have informed said third party of the aspects contained in this Privacy Policy, and have obtained their consent to provide us with their data for the purposes indicated in said Policy.

Links. On the FSS website there may be links to other websites that we consider potentially useful and informative to you. However, please note that we do not endorse or recommend the content or services of such websites, nor are we responsible for the privacy policies of such websites. We recommend that you consider and read the privacy policies of all sites you visit. Remember that what is stated in this Privacy Policy only applies to the data that FSS collects and/or processes.

Updates. We will only use your personal data as set out in this document, which is in force at the time, we collect your information. If any revision or update is done that affects the processing of your personal data, we will inform you.

Contact us: If at any time you believe that we have not complied with the provisions set forth in this Privacy Policy, please let us know by sending an email to hola@verybluebox.com. If you want to inform about a problem regarding the privacy of your data or have any questions regarding this Privacy Policy, do not hesitate and contact us by the email address above. We will be happy to help you.

Last updated: April 2021.