Privacy policies

This privacy policy of TASTELAB S.L. (hereinafter ‘TASTELAB’) aims to protect and respect the privacy of users and forms part of our General Terms and Conditions. Thus, it applies to the ‘Apps’ provided by TASTELAB, understood as such the app ‘SENSESBIT’ (hereinafter ‘the App’).

Therefore, in accordance with personal data protection regulations, and in accordance with the provisions of EU Regulation 2016/679, General Data Protection Regulation (‘GDPR’) and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (‘LOPD’), by means of this Privacy Policy, the User is hereby informed of the following:

Responsible for the processing of personal data:

TASTELAB, S.L. (hereinafter TASTELAB, or the Responsible Party), with registered office at C/. Vázquez Seijas nº2, entreplanta 5, 27002, Lugo, Spain and Tax ID number B70453402, is Responsible for the Processing of the data provided by users (‘Users’).

Purpose of processing

You can contact TASTELAB by post at the above address, by email at rgpd@sensesbit.com, or by telephone on +34 982 818 019.

Since we reserve the right to modify or adapt this Privacy Policy at any time, we recommend that you periodically review it.

For the sole purposes of this Privacy Policy, the following definitions will be used:

• Client: company that contracts with TASTELAB for the service provided by the SENSESBIT app, committing to use it in accordance with the corresponding contract and in accordance with the Conditions of Use of the WEB and App.
• App user: third party interested party who accesses the SENSESBIT service by registering in the app or through a code provided by the client, proceeding to respond to the survey/s or tasting/s provided by the Client or, where appropriate, directly by TASTELAB.

FUNCTIONALITY OF THE App:

This Privacy Policy shall apply to the processing of personal data carried out by the SENSESBIT App, which is presented as a SaaS solution that allows you to manage and perform a comprehensive sensory analysis, generating the corresponding reports and statistical analysis through the responses obtained. The App has three access modes:

• Administrator Access: provided to the Client, who will be able to manage the performance of the sensory analysis in all aspects provided by the App: send surveys to third parties, view the results, generate new questions, generate reports, etc.
• Registered User Access: provided to those users of the App who access it by creating an individual, personal account, through which they can access their private area and, where appropriate, voluntarily, respond to those surveys that are provided. send them.
• Non-Registered User: provided to certain users by a Client to carry out a specific survey. In this case, the user does not provide any personal data to TASTELAB, only answering the questions asked without the need to provide personal data.

The Registered User hereby undertakes to fill in the access and registration form with true, accurate, complete and updated mandatory data, being informed at the same time of the mandatory data to be filled in and of the impossibility of accessing the App if the corresponding fields are not filled in. Likewise, by accepting this Privacy Policy, you acknowledge that the information and personal data collected with your registration are accurate and truthful. Please inform TASTELAB immediately of any changes to your personal data, so that the information contained in the files is always up to date and does not contain errors or outdated information.

Sending personal data to TASTELAB or to the Client is obligatory in order to contact, form part of the database and carry out future sensory studies with TASTELAB or with the Client. Therefore, if the personal data requested in the different contact and/or registration forms is not provided or this Privacy Policy is not accepted, the activities for which this App has been developed cannot be carried out.

The Admin User, i.e. the Client who formalises the corresponding Order Form with TASTELAB, shall be responsible for the veracity of the data communicated to TASTELAB in the registration process, undertaking to keep them updated at all times and to inform TASTELAB of any changes to them. Furthermore, they shall be responsible for having obtained the corresponding consent with respect to any personal data of third parties that may have been included in the App, acting as Data Controller with respect to them.

Data processed by the App

Our ‘App’ may be aware of the following personal data in the event that you access it in the role of Administrator or Client of TASTELAB:

• Data of the company to which you belong.
• Corporative mail
• Name and surname

Likewise, SENSESBIT may have knowledge of the following personal data in the event that you access the same with the role of registered User:

• Email account and encrypted password with which the user identifies themselves on the platform.
• User name
• Surnames, if the User provides them.
• Age.
• Birth year
• Postal code

Personal data provided by a User registered with a company code will be the property and responsibility of the company linked to said code, without TASTELAB having direct knowledge of the same.

The answers provided by the Registered User to the surveys sent through the SENSESBIT App will be communicated to the Company/Client through which the user has registered with the corresponding company code. Therefore, we hereby inform you that TASTELAB is not responsible for the questions that have been formulated through the App and by the Company/Customer, being the sole responsibility of the Client, as established in the General Conditions of the App. Therefore, the Client and TASTELAB will be aware of the answers provided by the Registered User to each of the questions posed, although TASTELAB will not have direct access to the Registered User's personal data, which will remain pseudo-anonymised and only available directly to the Client.

PURPOSE OF THE PROCESSING OF THE DATA PROVIDED BY THE REGISTERED USER or ADMINISTRATOR IN THE App:

The Data Controller will process the identification and contact data that the registered User or Administrator provides through the registration form of the App or, where appropriate, the contact form of the Website or when contacting the Data Controller by e-mail, as well as other data that the administrator user includes when establishing contact with the aforementioned for the following purposes:

• Registration, access and use of the App in your role as Administrator or Registered User.
• Respond to and manage queries, requests or requests made by the Customer to the support service, as well as provide information by electronic means on a request.
• To provide information to the Client about improvements and updates to the services provided by TASTELAB in the event of subscription to the newsletter.
• Carry out analyses and improvements to the Website or the App on TASTELAB products and services based on the use made by the User.
• Improve the commercial strategy of TasteLab
• Proactive contact by TASTELAB with the purpose of offering technical support or commercial technical advice to the Client.

The data processing has its legal basis in the acceptance and free consent of the interested party as Administrator User or Registered User on the basis of the processing information provided in this Privacy Policy. In those cases where to make a request it is necessary to fill in a form and click on the send button, the completion of this act will necessarily imply that the user has been informed and has expressly given his consent to the processing of the data provided, all on the basis of this privacy policy.

In this way, we inform you that, if you do not tick the checkbox for acceptance of the Privacy Policy, the sending of the information will not be permitted.

In addition to the purposes contemplated in the previous paragraphs, TASTELAB may process the responses made by Registered Users to the tastings it has carried out anonymously and without re-identifying the user, in order to improve the App and make statistical projections.

Should the purpose be changed or should it be necessary to extend or delete such data, the user will be informed at any time so that he/she can give his/her consent to the renewal or, on the contrary, to his/her withdrawal.

PROCESSING OF PERSONAL WEB DATA:

You can freely access our website www.sensesbit.com without your personal data being processed; however, we recommend that you consult our cookies policy in order to find out how they are applied. However, if the user accesses the services provided by the SENSESBIT App, it is possible that their personal data may be communicated to TASTELAB S.L., so we recommend that you review the data processing policy of the aforementioned App. Data collected automatically when you visit our website or personal data entered by the user when using our services will be processed in accordance with the applicable legal provisions for the protection of personal data.

User rights:

Data protection regulations recognise a series of rights for the user:

• To find out if your data is being processed.
• To access the personal data subject to processing.
• To request rectification of data if they are inaccurate.
• To request the deletion of the data if it is no longer necessary for the purposes for which it was collected or if the consent granted is withdrawn.
• To request the limitation of data processing, in some cases, in which case they will only be kept in accordance with current regulations.
• To the portability of the data, which will be provided in a structured, commonly used or machine-readable format; or they may be sent to the new designated manager. It is only valid in certain cases.
• To file a claim with the Spanish Data Protection Agency or competent control authority.
• To revoke consent for any treatment for which you have consented, at any time.

In order to facilitate the process, and to comply with the principle of data accuracy, if any of the data subject's data that is the subject of processing is modified, the Data Controller appreciates the communication of such modification in the terms previously mentioned.

In order to exercise the aforementioned rights, the user may request a form from TASTELAB at the following e-mail address rgpd@sensesbit.com, or use those drawn up by the Spanish Data Protection Agency or third parties. These forms must be signed electronically or be accompanied by a photocopy of the user's DNI; in the case of representation, a copy of the user's DNI must be attached, or the user may sign the form with their electronic signature. The forms can be submitted in person, sent by letter or by mail to the address of the person responsible at the beginning of this text.

Depending on the right exercised, TASTELAB will take a maximum of one month to respond from receipt of the request, unless it is a complex case that requires greater difficulty, in which case the user will be notified as soon as possible. In any case, the Data Controller shall adopt the necessary measures to protect the rights, freedoms and legitimate interests of the interested party.

Processing of data of third parties:

As a general rule, the Controller will only process the data provided by its owners. In the event of receiving data from third parties, the User must, in advance, inform and request the consent of the owners of the data provided. In the event that it does not have it, TASTELAB will be exempt from any responsibility for non-compliance with this requirement.

Minors data:

TASTELAB will not process data of minors under 16 years of age. Therefore, users must refrain from providing such data if they are not of that age or, where appropriate, from providing data of third parties who are not of that age. TASTELAB disclaims any liability for failure to comply with this provision.

Commercial communications by electronic means:

If the Administrator User gives their express consent to do so by checking the corresponding checkbox. TASTELAB will send commercial communications to the email address provided by the Client. The Responsible will store the email address in the database, and will send emails periodically, until the user requests to unsubscribe from this service, an option that will be available in any communication. We may keep the data provided for the period necessary to comply with current legal obligations to which TASTELAB may be subject. There are no plans to communicate your data to third parties, except those indicated as Data Processors in Annex I, or to transfer it internationally.

The purposes of this specific processing are as follows:

• Manage the requested service
• The TASTELAB website uses cookies. If you wish to receive more information by electronic means regarding the request for information, you can do so by accessing our Cookies Policy.
• Commercial or event information by electronic means, subject to express authorisation.
• Carry out analysis and improvements in mailing, in order to improve the commercial strategy.

In any case, you may exercise your rights of access, rectification, erasure, opposition, limitation of processing and portability in the manner mentioned above. Likewise, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing previously carried out. You have the right to lodge a complaint with the Spanish Data Protection Agency through its website www.aepd.es.

Security measures we apply

In relation to security measures, TASTELAB shall adopt all necessary security measures, in accordance with the provisions of article 32 of the GDPR. In this regard, TASTELAB, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing, as well as the risks of varying likelihood and severity for the rights and freedoms of natural persons, shall establish the appropriate technical and organisational measures to ensure the level of security appropriate to the existing risk.

In any case, it should put in place mechanisms to:

• Ensure the continued confidentiality, integrity, availability and resilience of processing systems and services.
• Restore availability and access to personal data quickly, in the event of a physical or technical incident.
• Regularly verify, evaluate and assess the effectiveness of the technical and organisational measures implemented to ensure the security of the processing.
• Pseudonymise and encrypt personal data, where appropriate.

Communication to third parties:

We inform you that the personal data of users may be transferred to:

• The Client whose company code has been linked by the Registered User when accessing the App. In this case, TASTELAB will not have direct knowledge of the Registered User's personal data and only of the answers provided.
• The public authorities when necessary, to banks and financial institutions for the collection of the service provided or product purchased, and in all those cases in which it is necessary by virtue of legal obligation or court order.
• Data processors necessary for the provision of the contracted service, who will guarantee that they maintain the same level of privacy as the data controller in compliance with the RGPD and LOPD. A list of the data processors used by TASTELAB can be found in APPENDIX I of this Privacy Policy.

Cookies

The TASTELAB website uses cookies. If you would like more information, you can do so by accessing our Cookies Policy.

Conservation of personal data

• Personal data will be kept in TASTELAB's systems and facilities for as long as the User remains linked to the Data Controller and has not requested its deletion.
• Once unlinked, the data processed for each purpose will be kept anonymised for the legally stipulated periods, including the legal period in which a judge or court may require them in accordance with the statute of limitations for legal actions.
• The data processed will be kept for as long as the aforementioned legal deadlines do not expire, if there is a legal obligation to keep them. If there is no such legal period, until the data subject requests their deletion or revokes the consent granted.
• TASTELAB will keep all information and communications relating to the provision of the service for the duration of the guarantees with respect to the products or services in order to attend to possible claims.

Data retention:

TASTELAB informs you that, as a data hosting service provider and by virtue of the provisions of Law 34/2002 of 11 July 2002 on Information Society Services and Electronic Commerce (LSSI), it will retain for a maximum period of 12 months the information necessary to identify the origin of the data hosted and the time at which the service was initiated. The purpose of the retention practised in this context is to comply with possible legal and judicial obligations that may arise in relation to the User and this information may only be communicated by court order, safeguarding the utmost respect for the secrecy of communications and the regulations on the protection of personal data.

APPENDIX I: RESPONSIBLE FOR THE TREATMENT: