This privacy policy of TASTELAB S.L. (hereinafter "TASTELAB") aims to protect and respect the privacy of users and is part of our General Conditions. Thus, it applies to the "Apps" provided by TASTELAB, being understood as such the app "SENSESBIT" (hereinafter "the App").
Therefore, in accordance with the regulations on the protection of personal data, and in accordance with the provisions of EU Regulation 2016/679, General Data Protection Regulation (“GDPR”) and the Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (“LOPD”), by means of this Privacy Policy, the User is informed of the following:
Responsible for the processing of personal data:
TASTELAB, S.L. (hereinafter TASTELAB, or the Responsible Party), with registered office at C/. Vázquez Seijas nº2, entreplanta 5, 27002, Lugo, Spain and Tax ID number B70453402, is Responsible for the Processing of the data provided by users ("Users").
Purpose of treatment
You can contact TASTELAB by mail at the above address, by email at rgpd@sensesbit.com, or by phone at +34 982 818 019.
As we reserve the right to modify or adapt this Privacy Policy at any time, we encourage you to periodically review this Privacy Policy.
For the sole purposes of this Privacy Policy, the following definitions shall be used:
- Client: company that contracts with TASTELAB for the service provided by the SENSESBIT app, committing to use it in accordance with the corresponding contract and in accordance with the Terms of Use of the WEB and App.
- App User: third party interested party who accesses the SENSESBIT service through registration or in the app or through a code provided by the client, proceeding to respond to the survey/s or tasting/s provided by the Client or, if applicable, directly by TASTELAB.
FUNCTIONALITY OF THE App:
This Privacy Policy shall apply to the processing of personal data carried out by the SENSESBIT App, which is presented as a SaaS solution that allows you to manage and perform a comprehensive sensory analysis, generating the corresponding reports and statistical analysis through the responses obtained. The App has three access modes:
- Administrator Access: provided to the Client, who will be able to manage the sensory analysis in all aspects provided by the App: send surveys to third parties, view results, generate new questions, generate reports, etc.
- Registered User Access: provided to those App users who access the App by creating an individual account, of a personal nature, through which they can access their private area and, where appropriate, voluntarily respond to those surveys that are sent to them.
- Non-Registered User: provided to certain users by a Client, for the completion of a specific survey. In this case the user does not provide any personal data to TASTELAB, responding only to the questions asked without the need to provide personal data.
The Registered User hereby undertakes to fill in the access and registration form with true, accurate, complete and updated mandatory data, being informed at the same time of the mandatory data to be filled in and of the impossibility of accessing the App in case of not filling in the corresponding fields. Also, with the acceptance of this Privacy Policy, you acknowledge that the information and personal data collected with your registration are accurate and truthful. Please inform TASTELAB immediately of any changes to your personal data, so that the information contained in the files is always updated and does not contain errors or inaccuracies.
Sending personal data to TASTELAB or the Client is mandatory to contact, be part of the database and perform future sensory studies with TASTELAB or the Client. Therefore, if you do not provide the personal data requested in the different contact and/or registration forms or do not accept this Privacy Policy, the activities for which this App has been developed cannot be carried out.
The Admin User, i.e. the Client who formalizes the corresponding Order Form with TASTELAB, shall be responsible for the accuracy of the data communicated to TASTELAB in the registration process, undertaking to keep them updated at all times and to inform, likewise, of any changes to them. In addition, it will be responsible for having obtained the corresponding consent with respect to those personal data of third parties that may have been included in the App, acting with respect to these as Data Controller.
Data processed by the App:
Our "App" may have knowledge of the following personal data in the event that you access it with the role of Administrator or Client of TASTELAB:
- Data of the company to which it belongs.
- Corporate mail.
- First and last name.
Likewise, SENSESBIT may have knowledge of the following personal data in the event that you access the same with the role of registered User:
- E-mail account and encrypted password with which the user identifies himself/herself on the platform.
- User Name.
- Surnames, in case the User provides them
- Age
- Birth year
- Postal code
Personal data provided by a User registered with a company code will be the property and responsibility of the company linked to said code, without TASTELAB having direct knowledge of the same.
The answers provided by the Registered User to the surveys sent through the SENSESBIT App will be communicated to the Company/Client through which the user has registered with the corresponding company code. Therefore, we hereby inform you that TASTELAB is not responsible for the questions that have been formulated through the App and by the Company/Customer, being the sole responsibility of the Client, as established in the General Conditions of the App. Therefore, the Client and TASTELAB will be aware of the answers that have been provided by the Registered User to each of the questions posed, although TASTELAB will not have access to the personal data of the Registered User directly, remaining these pseudo-anonymized and only at the direct disposal of the Client.
PURPOSE PURPOSE OF THE PROCESSING OF THE DATA PROVIDED BY THE REGISTERED USER or ADMINISTRATOR IN THE App:
The Responsible will process the identification and contact data that the registered User or Administrator provides through the registration form of the App or, where appropriate, the contact form of the Web or when contacting the Responsible by email, as well as other data that the user administrator includes when establishing contact with the same referenced above for the following purposes:
- Registration, access and use of the App in your role as Administrator or Registered User.
- Respond to and manage inquiries, requests or requests made by the Customer to the support service, as well as provide information by electronic means on a request.
- To provide information to the Client about improvements and updates to the services provided by TASTELAB in the case of subscription to the newsletter.
- Perform analysis and improvements on the Web or App about TASTELAB's products and services based on the use made by the User.
- Improve TASTELAB's commercial strategy.
- Proactive contact by TASTELAB for the purpose of providing technical support or technical business advice to the Customer.
The data processing has its legal basis in the acceptance and free consent of the interested party as an Administrator User or Registered User based on the processing information provided in this Privacy Policy. In those cases where to make a request it is necessary to fill out a form and “click” on the submit button, the completion of this act will necessarily imply that the user has been informed and has expressly consented to the processing of the data provided, all based on this privacy policy.
In this way, we inform you that, if you do not check the acceptance checkbox of the Privacy Policy, the sending of the information will not be allowed.
In addition to the purposes contemplated in the preceding paragraphs, TASTELAB may process the responses made by Registered Users to the tastings it has carried out anonymously and without re-identifying the user, in order to improve the App and make statistical projections.
Should the purpose be modified or should it be necessary to extend or delete such data, the user will be informed at any time so that he/she can give his/her consent to the renewal or, on the contrary, to the cancellation of such data.
PROCESSING OF PERSONAL WEB DATA:
You can freely access our website www.sensesbit.com without the processing of your personal data, however, we recommend that you consult our cookies policy in order to know the application of the same. However, if the user accesses the services provided by the App SENSESBIT it is possible that your personal data will be communicated to TASTELAB S.L., so we recommend you to review the data processing policy of the mentioned App. The data collected automatically when you visit our website or the personal data entered by the user when using our services will be processed in accordance with the legal provisions in force for the protection of personal data.
User's rights:
Data protection regulations recognize a series of rights for the user:
- To know if your data is being processed.
- To have access to the personal data being processed.
- To request the rectification of the data if they are inaccurate.
- To request the deletion of the data if they are no longer necessary for the purposes for which they were collected or if you withdraw the consent given.
- To request the limitation of data processing, in some cases, in which case the data will only be kept in accordance with the regulations in force.
- To the portability of the data, which will be provided in a structured, commonly used or machine-readable format; or may be sent to the new designated data controller. Only valid in certain cases.
- To file a complaint with the Spanish Data Protection Agency or competent supervisory authority.
- To revoke consent to any processing for which you have consented, at any time..
In order to facilitate the process, and to comply with the principle of data accuracy, if any data of the data subject that is the object of processing is modified, the Data Controller appreciates the communication of such modification in the terms previously mentioned.
In order to exercise the aforementioned rights, the user may request a form from TASTELAB at the following email address rgpd@sensesbit.com, or use those prepared by the Spanish Data Protection Agency or third parties. These forms must be signed electronically or be accompanied by a photocopy of the DNI; in case of representation, a copy of the user's DNI must be attached, or the user will be allowed to sign it with his/her electronic signature. The forms can be submitted in person, sent by letter or by mail to the address of the Responsible at the beginning of this text.
Depending on the right exercised, TASTELAB will take a maximum of one month to respond from receipt of the request, unless it is a complex case that requires greater difficulty, in which case the user will be notified as soon as possible. In any case, the Data Controller will take the necessary measures to protect the rights, freedoms and legitimate interests of the interested party.
Processing of third party data:
As a general rule, the Data Controller will only process the data provided by its owners. In the event of receiving data from third parties, the User must, in advance, inform and request the consent of the owners of the data provided. In the case of not having the same, TASTELAB will be exempt from any liability for failure to comply with this requirement.
Data of minors:
TASTELAB will not process data of minors under 16 years of age. Therefore, the user must refrain from providing them if they are not of that age or, if applicable, from providing data of third parties who are not of the aforementioned age. TASTELAB disclaims any liability for failure to comply with this provision.
Commercial communications by electronic means:
If the User Administrator gives express consent to do so by checking the corresponding checkbox. TASTELAB will send commercial communications to the email address provided by the Client. The Responsible will store the email in the database, and will send emails periodically, until the user requests the cancellation of this service, option that will be available in any communication. We may keep the data provided for the period necessary to comply with current legal obligations to which TASTELAB may be subject. We do not foresee the communication of your data to third parties, except those indicated as Data Processors in Annex I, nor the international transfer of the same.
The purposes of this specific treatment consist of:
- Manage the requested service.
- Information by electronic means related to the request.
- Commercial or event information by electronic means, provided there is express authorization.
- Perform analysis and improvements in the mailing, to improve the commercial strategy.
In any case, you may exercise your rights of access, rectification, deletion, opposition, limitation of processing and portability in the manner mentioned above. Likewise, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing previously carried out. You have the right to file a complaint with the Spanish Data Protection Agency through its website www.aepd.es.
Security measures we apply
In relation to security measures, TASTELAB will adopt all necessary security measures, in accordance with the provisions of Article 32 of the GDPR. In this sense TASTELAB, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing, as well as the risks of varying likelihood and severity to the rights and freedoms of natural persons, will establish the appropriate technical and organizational measures to ensure the level of security appropriate to the existing risk.
In any case, it shall implement mechanisms to:
- Ensure the ongoing confidentiality, integrity, availability and resilience of treatment systems and services.
- Restore availability and access to personal data quickly in the event of a physical or technical incident.
- Verify, evaluate and assess, on a regular basis, the effectiveness of the technical and organizational measures implemented to ensure the security of the processing.
- Pseudonomize and encrypt personal data, if applicable.
Communication to third parties:
We inform you that the personal data of users may be transferred to:
- The Customer whose company code has been linked by the Registered User when accessing the App. In this case, TASTELAB will not have direct knowledge of the Registered User's personal data and only of the answers provided.
- The public authorities when necessary, to banks and financial institutions for the collection of the service provided or product purchased, and in all those cases where it is necessary by virtue of legal obligation or court order.
- Data processors necessary for the provision of the contracted service, who will ensure that they maintain the same level of privacy as the responsible in compliance with the RGPD and LOPD. You can find a list of the Data Processors used by TASTELAB in APPENDIX I of this Privacy Policy.
Cookies
The TASTELAB website uses Cookies, if you wish to get more information, you can do so by accessing our Cookies Policy.
Retention of personal data
- Personal data will be kept in TASTELAB's systems and facilities as long as the User remains linked to the Responsible and has not requested its deletion..
- Once disassociated, the data processed for each purpose will be kept anonymized for the legally stipulated periods, including the legal period in which a judge or court may require them in accordance with the statute of limitations for legal actions.
- The data processed will be kept until the expiration of the aforementioned legal terms, if there is a legal obligation to maintain them. If there is no such legal term, until the interested party requests its deletion or revokes the consent given.
- TASTELAB will maintain all information and communications relating to the provision of the service, for the duration of the guarantees with respect to the products or services to meet possible claims.
Data retention:
TASTELAB informs you that, as a data hosting service provider and in accordance with the provisions of Law 34/2002 of July 11, 2002 on Information Society Services and Electronic Commerce (LSSI), will retain for a maximum period of 12 months the information necessary to identify the origin of the data hosted and the time at which the service was initiated. The retention practiced in this context is intended to comply with possible legal and judicial obligations that may arise in relation to the User and this information may only be communicated by court order safeguarding the utmost respect for the secrecy of communications and the rules of protection of personal data.
ANNEX I: PROCESSORS:
OVH HISPANO SL | |
---|---|
CONTACT DETAILS: | Registered address: C/ Alcalá 21, 5.ª planta, 28014 Madrid, España. NIF: B-83834747, Contacto: 91 758 34 77 - soporte@ovh.es |
PURPOSE OF THE PROCESSING: | Storage of backup copies of the SENSESBIT Platform. |
DATA SUBJECT TO PROCESSING: | Data stored in the SENSESBIT Platform, which may include personal data provided by the Client. |
INTERNATIONAL DATA TRANSFERS: | There are no international data transfers. |
RGPD COMPLIANCE: | OVH HISPANO S.L. guarantees compliance with the RGPD, in accordance with the provisions of the Personal Data Processing Agreement signed between the parties in accordance with the provisions of art. 28 of the RGPD. |
CPC COMPUTER SERVICES SL | |
CONTACT DETAILS: | Address: C/ Nardo, 12 28250 - Torrelodones - Madrid. info@mailrelay.com |
PURPOSE OF THE PROCESSING: | Provider used by the SENSESBIT Platform to send e-mails to the client/stakeholder, whose commercial name is “MAILRELAY”. |
DATA SUBJECT TO PROCESSING: | The e-mail addresses provided by the customer for sending communications will be communicated. |
INTERNATIONAL DATA TRANSFERS: | No international data transfers are made. |
RGPD COMPLIANCE: | They guarantee compliance with RGPD |