I. PRIVACY POLICY AND DATA PROTECTION

In compliance with the provisions of current legislation, Becomeyoo (hereinafter, also Website) undertakes to adopt the necessary technical and organisational measures according to the appropriate level of security for the risk surrounding the data collected.

Laws included in this privacy policy

This privacy policy is adapted to current Spanish and European regulations on personal data protection on the Internet. It specifically abides by the following rules:

• Regulation (EU) 2016/679 of the European Parliament and Council, dated 27 April 2016, on the protection of natural persons with regard to the processing of personal data and the free circulation of such data (GDPR).
• Organic Law 15/1999 of 13 December on the protection of personal data (LOPD).
• Royal Decree 1720/2007, of 21 December, which approves the Regulation for carrying out Organic Law 15/1999, of 13 December 1999, on the protection of personal data (RDLOPD).
• Law 34/2002, of 11 July, on e-commerce and information society services (LSSI-CE).

Data controller identity

The person responsible for the processing of personal data collected at Becomeyoo is: BECOMEYOO SL, with ID No. B86408796 and registered in the Mercantile Registry of Madrid with the following registry data: Volume 29635, Page 174, Page Number M-533366, 1st entry, and whose representative is: Juan Antonio Verde Gómez (hereinafter, the Data Controller). Their contact information is below:

Address: Avenida del Talgo 60 Portal 3 3º 2 – 28023 (Madrid)
Contact email: info@becomeyoo.com

Personal Data Records

The personal data collected by Becomeyoo, through the forms provided on its pages, will be entered into an automated file under the responsibility of the Data Controller and duly declared and registered in the General Registry of the Data Protection Agency, which can be consulted on the website of the Spanish Data Protection Agency (http://www.agpd.es), in order to facilitate, expedite and fulfil the commitments established between Becomeyoo and the User, or to maintain the relationship established in the forms that it fills out, or to respond to a request or query from it.

Principles applicable to the processing of personal data

The processing of the User’s personal data will be subject to the following principles contained in Article 5 of the GDPR:

• Principle of lawfulness, fairness and transparency: the consent of the User shall be required at all times after full and transparent information on the purposes for which the personal data is collected.
• Principle of purpose limitation: personal data will be collected for specific, explicit, and legitimate purposes.
• Principle of data minimisation: the personal data collected will be only that which is strictly necessary regarding the purposes for which it is processed.
• Accuracy principle: personal data must be accurate and always up-to-date.
• Storage limitation principle: personal data will be stored in a way that makes identifying the User possible only for the time necessary for the purposes of processing.
• Principle of integrity and confidentiality: personal data will be processed in a way that guarantees its security and confidentiality.
• Principle of proactive accountability: the Data Controller will be responsible for ensuring compliance with the above principles.

Categories of personal information

The categories of data processed by Becomeyoo are solely identification data. Under no circumstances are special categories of personal data processed within the meaning of Article 9 of the GDPR.

Legal basis for the processing of personal data

The legal basis for processing the personal data is consent. Becomeyoo undertakes to obtain the User’s express and verifiable consent for processing their personal data for one or more specific purposes.

The User has the right to withdraw their consent at any time. It will be as easy to withdraw as to give consent. As a general rule, withdrawing consent will not condition use of the Website.

On occasions when the User must or may provide their data through forms to make enquiries, request information or for reasons related to the content of the Website, they will be informed if the completion of any of them is compulsory due to them being essential for the correct development of the operation carried out.

Purposes of the data processing

Personal data is collected and managed by Becomeyoo to facilitate, expedite, and fulfil the commitments established between the Website and the User, or maintain the relationship established in the forms that the latter completes, or respond to a request or query.

Likewise, the data may be used for commercial purposes of personalisation, operational and statistical purposes, and for activities related to the corporate purpose of Becomeyoo, as well as for the extraction, storage of data and marketing studies to adapt the Content offered to the User, as well as to improve the quality, operation and navigation of the Website.

At the time the personal data is collected, the User will be informed about the specific purpose(s) of the processing for which the personal data will be used, i.e. the use(s) to which the collected information will be put.

Retention periods for personal data

Personal data will only be retained for the minimum time necessary for the purposes of its processing and, in any case, only for the following period: 2 years, or until the User requests its deletion.

At the moment the personal data is obtained, the User will be informed about the period for which the personal data will be retained, or, where this is not possible, the criteria used to determine this period.

Recipients of personal data

The User’s personal data will not be shared with third parties.

In any case, at the time the personal data is obtained, the User will be informed about the recipients or categories of recipients of the personal data.

Personal data of minors

Respecting the provisions of Articles 8 of the GDPR and 13 of the RDLOPD, only those over 14 years of age may give their consent to the processing of their personal data in a lawful manner by Becomeyoo. If it concerns a minor under 14 years of age, the consent of their parents or guardians will be necessary for the processing, and this will only be considered lawful if they have authorised it.

Data protection security and secrecy

Becomeyoo undertakes to adopt the necessary technical and organisational measures, according to the level of security appropriate to the risk of the data collected, to ensure the security of the personal data and to prevent the accidental or unlawful destruction, loss or alteration of the personal data transmitted, stored or otherwise processed, or the unauthorised communication of or access to such data.

The Website has an SSL (Secure Socket Layer) certificate, which ensures that personal data is transmitted securely and confidentially, with the data transmitted between the server and the User, and back, fully encrypted or encoded.

However, as Becomeyoo cannot guarantee the impregnability of the internet or the total absence of hackers or others who fraudulently access personal data, the Data Controller undertakes to notify the User without undue delay when there is a breach of security of personal data that is likely to pose a high risk to the rights and freedoms of natural persons. In accordance with the provisions of Article 4 of the GDPR, a breach of personal data security means any breach of security that causes the accidental or unlawful destruction, loss, or alteration of personal data transmitted, stored, or otherwise processed, or unauthorised communication of or access to such data.

Personal data will be treated as confidential by the Data Controller, who undertakes to inform and ensure by means of a legal or contractual obligation that said confidentiality is respected by its employees, associates, and anyone to whom it makes the information accessible.

Rights derived from the processing of personal data

The User may exercise against the Data Controller the following rights recognised in the GDPR:

• Right of access:The right of the user to obtain confirmation of whether or not Becomeyoo is processing their personal data and, if so, obtain information about their specific personal data and the treatment that becomeyoo has made or is making, as well as, among others, of the information available on the origin of such data and the recipients of communications made or planned thereof.
• Right of rectification: This is the User’s right to have their personal data modified if that data turns out to be inaccurate or, considering the purposes of the processing, incomplete.
• Right to erasure (‘right to be forgotten’):This is the User’s right, unless otherwise provided by law, to obtain the erasure of their personal data when it is no longer necessary for the purposes for which it was collected or processed; the User has withdrawn their consent to the processing and the processing has no other lawful basis; the User objects to the processing and there is no other legitimate reason to continue the processing; the personal data has been processed unlawfully; the personal data must be erased in compliance with a legal obligation; or the personal data has been obtained as a result of a direct offer of information society services to a person under 14 years of age. ilícitamentemente; los datos personales deban suprimirse en cumplimiento de una obligación legal; o los datos personales hayan sido obtenidos producto de una oferta directa de servicios de la sociedad de la información a un menor de 14 años. In addition to erasure, the Data Controller shall, taking into account available technology and the cost of implementation, take reasonable steps to inform controllers who are processing the personal data of the data subject’s request for erasure of any link to the personal data.
• Right to restrict processing: This is the User’s right to restrict the processing of their personal data. The User has the right to obtain the limitation of processing when they challenge the accuracy of their personal data; when the processing is unlawful; when the Data Controller no longer needs the personal data, but the User needs it to make claims; and when the User has opposed the processing.
• Right to data portability: In the event that the processing is carried out by automated means, the User will have the right to receive their personal data from the Data Controller in a structured, commonly used, and machine-readable format, and to transmit them to another data controller. Whenever technically possible, the Data Controller shall transmit the data directly to that other controller.
• Right to object: This is the User’s right to prevent or discontinue Becomeyoo’s processing of their personal data..
• Right not to be subject to a decision based solely on automated processing, including profiling:This is the User’s right not to be subject to an individualised decision based solely on the automated processing of their personal data, including the creation of profiles, unless the current legislation establishes otherwise.

Therefore, the User may exercise their rights by means of a written communication addressed to the Data Controller with the reference “GDPR-www.becomeyoo.com”, specifying:

• The User’s first and last name and a copy of their ID. In those cases, in which representation is permitted, identification by the same means of the person representing the User will also be necessary, as well as the document accrediting the representation The photocopy of the ID may be substituted by any other legally valid means of certifying one’s identity.
• A request with the specific reasons for the request or the information whose access is requested.
• Address for notification purposes.
• Date and the applicant’s signature.
• Any document supporting the request made.

This request and any other attached document should be sent to the following postal address and/or email address:

Postal address:
Avenida del Talgo 60 Portal 3 3º 2 – 28023 (Madrid)
Email: info@becomeyoo.com

Links to third-party websites

The Website may include hyperlinks or links that allow access to third party websites other than becomeyoo, and which are therefore not operated by becomeyoo. The owners of these websites will have their own data protection policies; in each case, they are responsible for their own files and their own privacy practices.

Complaints to the supervisory authority

In the event that the User considers that there is a problem or a breach of the regulations in force in the way in which their personal data is being processed, they shall have the right to effective judicial protection and to lodge a complaint with a supervisory authority, in particular in the State in which they have their habitual residence, place of work or place of the alleged breach. In the case of Spain, the supervisory authority is the Spanish Data Protection Agency (http://www.agpd.es).

II. COOKIES POLICY

Access to this website may entail the use of cookies. Cookies are small amounts of information stored in the browser used by each user — on the different devices they may use to browse — so that the server can remember certain information. Only the server that implemented it will later read this information. Cookies make browsing easier, more user-friendly, and do not damage the browsing device.

Cookies are automatic procedures for the collection of information related to the preferences expressed by the User during their visit to the Website, in order to recognise him as a User, and to personalise their experience and use of the Website. They may also be used, for example, to help identify and resolve errors.

The information collected through cookies may include the date and time of visits to the Website, the pages viewed, the time spent on the Website, and the sites visited just before and after. However, no cookie allows the User to be contacted by phone, or by any other means of personal contact. No cookie can extract information from the User’s hard drive or steal personal information. The only way for the User’s private information to form part of the Cookie is for the user to personally provide that information to the server.

Cookies that allow a person to be identified are considered personal data. The Privacy Policy described above will therefore apply to them. For this reason, User consent is required for their use. This consent shall be communicated, on the basis of genuine choice, offered by an affirmative and positive decision, prior to initial processing, and be retractable and documented.

First-party cookies

These are cookies that are sent to the User’s computer or device and managed exclusively by Becomeyoo for the optimal functioning of the Website. The information that is collected is used to improve the quality of the Website and its Content, and one’s experience as a User. These cookies make it possible to recognise the User as a regular visitor to the Website, and to adapt the content so that it suits their preferences.

The entity/entities responsible for supplying the cookies may transfer this information to third parties if required by law or it is a third party that processes the information for these entities.

Social media cookies

Becomeyoo uses social media plugins, which allow access to social networks from the Website. For this reason, social network cookies may be stored in the User’s browser. The owners of these social networks have their own data protection and cookie policies, and are, in each case, responsible for their own files and privacy practices. The User must refer to them to find out about said cookies and, where appropriate, the processing of their personal data. For informational purposes only, the links where these privacy and/or cookie policies can be consulted are indicated below:

Facebook: https://www.facebook.com/policies/cookies/

Twitter: https://twitter.com/es/privacy

Instagram: https://help.instagram.com/1896641480634370?ref=ig

Youtube: https://policies.google.com/privacy?hl=es-419&gl=mx

Google+: https://policies.google.com/technologies/cookies?hl=es

Pinterest: https://policy.pinterest.com/es/privacy-policy

LinkedIn: https://www.linkedin.com/legal/cookie-policy?trk=hp-cookies

Disabling, rejecting and deleting cookies

Users may disable, reject and delete the cookies installed on their device — totally or partially — through the configuration of their browser (including, for example, Chrome, Firefox, Safari, and Explorer). The procedures for rejecting and deleting cookies may differ from one internet browser to another. Consequently, the User must follow the instructions provided by the specific internet browser they use If they reject the use of cookies — totally or partially — they may continue to use the Website, although they may have only limited use of some of its features.

III. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

The User must read and agree to the terms and conditions on the protection of personal data contained in this Privacy and Cookies Policy, as well as accept the processing of their personal data so that the Data Controller can proceed in the manner, for the periods and for the purposes indicated. Use of the Website will imply the acceptance of its Privacy and Cookies Policy.

Becomeyoo reserves the right to modify its Privacy and Cookies Policy, according to its own criteria, or motivated by a legislative, jurisprudential or doctrinal change of the Spanish Data Protection Agency. Changes or updates to this Privacy and Cookies Policy will not be explicitly notified to the User Users are advised to consult this page periodically to keep abreast of the latest changes or updates.

This Privacy and Cookie Policy was updated on 21 May 2018 to comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data.