Privacy policy

In view of your interest in browsing our website https://bornlivingyoga.com/ (hereinafter, the "Website"), we would like to inform you of our updated Privacy Policy and how we treat the personal data you provide to us, including the data we collect when you browse our website.

1. IDENTIFICATION OF THE DATA CONTROLLER
Owner: Conexionborn, S.L. (hereinafter referred to as "Born Living Yoga" or the "Data Controller")
Registered office: Calle Saturno, 1, Planta 2 Derecha, 28224 Pozuelo de Alarcón, Madrid
Tax identification number (C.I.F.): B-87840195
E-mail: hello@bornlivingyoga.com
Telephone: +34 91 805 64 02

1. INFORMATION AND CONSENT
In accordance with the provisions of the EU General Data Protection Regulation 679/2016 (hereinafter, "GDPR") and Spanish Organic Law 3/2018, of 5 December 2018, on Data Protection and Guarantee of Digital Rights (hereinafter, "LOPDGDD") by accepting this Privacy Policy, the party interested in using the Website (hereinafter, the "Data Subject") GIVES THEIR informed, express, free and unequivocal CONSENT to processing of the personal data collected through the Website either through the forms provided for that purpose or through the information collected by cookies.
Likewise, the Data Subject consents to this data being processed by the Data Controller in order to provide its services, applying the organisational and security measures required by the GDPR.
All personal data requested from the Data Subject on the Website is obligatory, and it is not possible to provide the service without the corresponding data processing by the Data Controller. However, browsing the Website is free of charge.
The Data Subject guarantees that the personal data provided to the Data Controller is true and accurate, so Born Living Yoga will not be responsible for any incident arising from the inaccuracy or falsity of the information provided by the Data Subject, beyond the possibility that the Data Subject has to exercise their right of rectification.
In the event that the Data Subject provides us with data belonging to third parties, the Data Controller or Data Processor shall be responsible for complying with all applicable data protection regulations. Furthermore, the Data Subject guarantees that they have obtained all legally required consents, authorisations and/or approvals before including personal data of third parties on the Website.

1. ORIGIN, PURPOSE AND LEGAL BASIS
The personal data of the Data Subject, or third-party data transferred by the Data Subject, will be treated confidentially and will be incorporated into the appropriate Born Living Yoga processing activity.
The processing activities carried out by Born Living Yoga are:
ACTIVITY: PURCHASING PRODUCTS ON THE WEBSITE
PROVENANCE From the Data Subject themselves through the form to collect billing and delivery information.
LEGAL BASIS General Data Protection Regulation, in particular:
● Art. 6.1.b): performance of a contract to which the Data Subject is party.
PURPOSE FOR PROCESSING To process the Data Subject’s purchase order.
SCOPE Natural persons, including representatives of legal persons, Data Subjects of the Website.
DATA CATEGORY Name, email address, fiscal data, as well as well as any other data that the Data Subject includes in the body of the message.
RECIPIENTS The transfer of data to third parties is not foreseen, unless legally obliged or with the prior unequivocal and informed consent of the Data Subject.
INTERNATIONAL TRANSFER No international transfer of data is foreseen.
CONSERVATION PERIODS The data will be kept until the purpose for which it was collected has been completed, unless the data must be kept due to a legal obligation.

ACTIVITY: CONTACT VIA EMAIL, CONTACT FORM OR TEXT MESSAGE
PROVENANCE: From the Data Subject, by sending e-mails to the address indicated, by sending a text message to the telephone number provided or by using the form on the Website.
LEGAL BASIS: General Data Protection Regulation, in particular:
● Art. 6.1.b): request for pre-contractual measures.
PURPOSE FOR PROCESSING: To attend to queries raised by the Data Subject and respond to them.
SCOPE: Natural persons, including representatives of legal persons, Data Subjects of the Website.
DATA CATEGORY: Name, email address, telephone number, as well as any other data that the Data Subject includes in the body of the message.
RECIPIENTS: The transfer of data to third parties is not foreseen, unless legally obliged or with the prior unequivocal and informed consent of the Data Subject.
INTERNATIONAL TRANSFER: No international transfer of data is foreseen.
CONSERVATION PERIODS: The data will be kept for the time strictly necessary to fulfil the purpose for which it was collected. In any case, the maximum retention period shall be 1 year.

ACTIVITY: NEWSLETTER
PROVENANCE From the Data Subject through the field to be completed.
LEGAL BASIS General Data Protection Regulation, in particular:
● Art. 6.1.a): consent of the Data Subject for one or more specific purposes.
PURPOSE FOR PROCESSING Sending information on new products and offers.
SCOPE Natural persons, including representatives of legal persons, Data Subjects of the Website.
DATA CATEGORY The email address, name and website, as well as any other data that the Data Subject includes in the body of the message.
RECIPIENTS The transfer of data to third parties is not foreseen, unless legally obliged or with the prior unequivocal and informed consent of the Data Subject.
INTERNATIONAL TRANSFER No international transfer of data is foreseen.
CONSERVATION PERIODS The data will be kept until the Data Subject withdraws their consent or the purpose for which the data was collected has ended, unless the data must be kept due to a legal obligation.

1. DATA FROM THE DATA SUBJECT
The Data Subject guarantees that the data provided is true, exact, complete and up to date, and is responsible for any direct or indirect damage or harm that may be caused as a consequence of non-compliance with this obligation, beyond the possibility that the Data Subject may exercise their right to rectify it.
Furthermore, the Data Subject certifies that they are over eighteen (18) years of age and, therefore, have the legal capacity to consent to the processing of personal data in accordance with this Privacy Policy. If the Data Subject is under eighteen (18) years of age, they must have the prior and express authorisation of their parents, guardians or legal representatives, who shall be considered responsible for the acts carried out by the minors in their charge, in accordance with the regulations in force.
If the data provided belongs to a third party, the Data Subject guarantees that they have informed that third party of the aspects contained in this document and obtained their authorisation to provide the third party’s data to the Data Controller for the aforementioned purposes.
Born Living Yoga cannot guarantee the absolute invulnerability of the systems, and therefore does not assume any liability for damages arising from alterations that third parties may cause in computer systems, electronic documents or files.
1. COOKIES POLICY
In accordance with the provisions of the GDPR and Law 34/2002, on Information Society Services, all personal data obtained through cookies while using the Website will be processed in accordance with the provisions of the Cookies Policy.

6. EXERCISE OF RIGHTS
In accordance with the provisions of the GDPR, we inform you that you can exercise your rights of access, rectification, deletion, opposition, data portability and limitation of processing directly with Born Living Yoga.
In order to exercise these rights, the Data Subject may send a message to this effect, indicating first name, surname, email address, ID card or passport number, to the email address: hello@bornlivingyoga.com
The Data Subject may also exercise their rights by lodging a complaint with the Spanish Data Protection Agency.

1. ACCEPTANCE OF THE PRIVACY POLICY
The Data Subject ACKNOWLEDGES AND AGREES TO HAVE READ AND UNDERSTOOD this Privacy Policy, the contents of which constitute the entire agreement between the Data Subject and the Data Controller with respect to the use and processing of their personal information. The Data Subject expressly agrees to be bound by the terms of this Privacy Policy, to the fullest extent and scope, without exception to any of its provisions.
2020 Conexionborn, S.L.