1. DATA CONTROLLER
Who is responsible for the processing of your personal data?
BIMBA & LOLA, S.L. processes the Personal Data collected by BIMBAYLOLA MÉXICO, S.A. DE C.V. (tax ID BME120829R28), with registered office at Avenida Insurgentes Centro 64, Oficina B-601, Colonia Juárez, Cuauhtémoc, zip code 06600, Mexico City (BIMBA & LOLA, S.L. and BIMBAYLOLA MÉXICO, S.A. DE C.V., jointly, "BIMBA Y LOLA", "us" and "our").
2. COLLECTION
What Personal Data do we collect and how do we do it?
BIMBAYLOLA MÉXICO, S.A. DE C.V. collects Personal Data as the data processor only on behalf of BIMBA & LOLA, S.L., and the latter acts as the data controller.
With regard to your access or use of the Website or the Services (as defined in the Terms that can be viewed at this link), we can collect the following personal data:
a) your name;
b) the number of your voting card, driver's license or passport (or copies thereof);
c) contact information (including telephone number, postal and shipping address and email address);
d) date of birth;
e) network and device data (including your IP address and device or advertising identifiers);
f) shopping or browsing behaviors;
g) financial information (e.g. credit or debit card numbers or bank account details);
h) the voice obtained via our customer services if calls are recorded; and
i) any other personally identifiable information you have provided us with in any form you have sent us, or in the course of any other form of interaction between you and us, including data which is true or not about you or any other individual that may be identified from: i) said data, or ii) said data and other information we have or may have access to (hereinafter, "Personal Data").
We collect your Personal Data in circumstances that include, among others, the following:
a) when you become a registered user and access and use the Website or the Services;
b) when you accept our cookies (see section 9 below) on the device you use to access the Website;
c) when interacting with any of our employees, agents or representatives, for example, our customer service representatives;
d) when interacting with us on any social networks,
e) when you contact us via our customer services telephone number; and
f) when you voluntarily send us Personal Data for any reason.
If you provide us with Personal Data from a third party, you guarantee that you have the authority to process and provide us with such Personal Data so that it is used for the purposes established in this Privacy and Cookies Policy. You are also required to inform the third party of the processing of their Personal Data in accordance with this Privacy and Cookies Policy. In this way, we understand that when you provide third-party information, you have all the relevant authorizations for its processing and, in this regard, you hold BIMBA Y LOLA harmless regarding your use of said Personal Data in accordance with the purposes for which you provide us with the information.
We usually rely on the Personal Data you provide us. Please keep us updated if changes occur to said Personal Data by informing our Data Protection Officer (as defined below) in writing or by email at the contact address provided below, so that we can ensure that the Personal Data we collect is current.
3. PURPOSES
Why do we process your personal data?
In compliance with the Federal Law on the Protection of Individual Personal Data, including its Regulation and Privacy Notice Guidelines, we inform you that at BIMBA Y LOLA we process the Personal Data you provide us for the following purposes:
a) to process your registration as a customer and manage the buying process ("Purpose 1");
b) to send commercial communications about BIMBA Y LOLA's products (emails, phone calls, SMS, PUSH notifications, post, etc.) ("Purpose 2");
c) the preparation of commercial profiles based on information from internal and external sources, with the aim of sending you personalized advertising and analyzing your purchasing behavior ("Purpose 3");
d) abuse and fraud prevention (fraudulent activities, denial-of-service attacks, among others) ("Purpose 4");
e) disclosure of data to public bodies and authorities (administrative or judicial), providing that this is required under the legal and statutory provisions ("Purpose 5"); and
f) management of our customer service telephone service, whereby conversations may be recorded in order to deal with queries and requests, as well as for quality assurance purposes ("Purpose 6").
4. LAWFUL BASIS
What is the lawful basis of the processing of your personal data?
The lawful bases for the processing of your Personal Data corresponding to each of the purposes (1) to (6) included in Section 3 above (“Purposes”) are as follows:
Purpose (1): The execution of a contract with BIMBA Y LOLA in relation to the purchase of products.
Purpose (2): Consent expressly given to BIMBA Y LOLA at the time your Personal Data is collected.
Purpose (3): Consent expressly given to BIMBA Y LOLA at the time your Personal Data is collected in relation to the preparation of profiles based on external sources and the satisfaction of a legitimate interest pursued by BIMBA Y LOLA in relation to the preparation of profiles based on internal sources.
Purposes (4) and (5): The legal discharge of responsibilities applicable to BIMBA Y LOLA.
Purpose (6): (i) The execution of a contract between the customer and BIMBA Y LOLA, when the enquiry or request is related to products acquired from BIMBA Y LOLA (order status, returns, etc.) and (ii) the legitimate interest of BIMBA Y LOLA when attending to queries or requests not related to purchases made from BIMBA Y LOLA.
5. RECIPIENTS
To which recipients will your personal data be communicated?
Your personal data may be accessed by our suppliers when it is necessary for the correct provision of services and fulfillment of the purposes for which the data was obtained. In this regard, your personal data may be accessed by:
(i) transport and logistics companies,
(ii) financial institutions, fraud detection and prevention companies,
(iii) customer support providers,
(iv) technological and analytical service providers,
(v) digital advertising and marketing providers that, in certain cases, may act as joint controllers.
In addition, your data may also be disclosed to public bodies and authorities (administrative or judicial) in those cases in which a legal regulation thus establishes it.
The aforementioned transfers will not require the data subject's consent, as their purposes are governed by the exception provided for in the Federal Law on the Protection of Individual Personal Data.
6. ADMINISTRATION AND MANAGEMENT
How will we protect and store Personal Data?
We will establish and maintain administrative, technical and physical security measures to ensure that Personal Data is adequately protected and kept secure. This includes the establishment of security measures that prevent access, destruction, loss, collection, use, disclosure, copying, modification, filtration, damage, alteration or unauthorized processing of Personal Data. BIMBA Y LOLA will not adopt any security measures that are less than those it uses to manage its own information; notwithstanding the above, the existing risk, the potential consequences for the data subjects, the sensitivity of the data and technological development must be taken into account.
When Personal Data in our possession is no longer necessary for any reason related to the Purpose for which it was originally collected, or it is no longer necessary that we keep it for any other legal or commercial purpose, we will take measures to ensure that such Personal Data is destroyed or anonymized.
Please note that no method of online transmission or electronic storage is completely secure. While security cannot be fully guaranteed, we strive to protect the security of Personal Data and constantly review and improve our data security measures.
Any security breaches that occur at any stage of processing that significantly affect your property or moral rights will be immediately reported by BIMBA Y LOLA, so that you can take the corresponding measures to safeguard your rights. In this regard, BIMBA Y LOLA agrees to inform you regarding (i) the nature of the incident; (ii) the compromised personal data; (iii) recommendations on the measures that the latter may take to protect their interests; (iv) corrective actions carried out immediately; and (v) the resources where you can obtain more information.
7. PERSONAL DATA RETENTION PERIOD
How long will we keep your data?
Your data will be kept as long as we have a contractual relationship, or until you request its cancellation, as well as for the time necessary to comply with our legal obligations.
8. RIGHTS
What are your rights when you provide us with your personal data and how can you exercise them?
You have the right to the following:
a) access your Personal Data, as well as request rectification of inaccurate data,
b) where applicable, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
c) withdraw any consent you have given to the collection, use or disclosure of any of your Personal Data that is in our possession or under our control.
d) in certain circumstances, you will be able to request the limitation of the processing of your data, in which case we only will keep it for the exercise or defense of claims.
e) in certain circumstances and for reasons related to your particular situation, you will be able to oppose the processing of your data. BIMBA Y LOLA will cease to process your data, except for imperative legal reasons, or for the exercise or defense of possible claims.
f) in the same way, you can exercise your right to data portability, as well as to withdraw consents given at any time, without this affecting the legality of the processing based on the consent given prior to its withdrawal.
If you wish to exercise any of your rights, you can contact us in writing at our email address lopd@bimbaylola.com or our postal address Bimba & Lola, Parque Tecnológico y Logístico de Vigo, nave D13 (36315 – Vigo – Spain) or our address Avenida Insurgentes Centro 64, Oficina B-601, Colonia Juárez, Cuauhtémoc, zip code 06600, Mexico City. In the existence of any reasonable doubts surrounding the identity of the person exercising their rights, we may request a copy of an official identifying document (voter proof, driving license or passport) in order to verify the applicant's identity.
If the information provided is incorrect or insufficient, or if the corresponding accreditation documents are not attached, BIMBA Y LOLA may require you to provide the elements or documents required to process the application within 5 (five) business days following receipt of the request. You will have 10 (ten) business days to meet the requirement, counted from the day following receipt. If no reply is provided within this period, the corresponding request will be deemed not to have been filed.
BIMBA Y LOLA will inform you of the decision taken, within a maximum period of twenty (20) business days from the date when the request was received, so that, if applicable, it can be made effective within fifteen (15) business days following the day on which the response is sent.
Finally, we inform that you can contact the National Institute of Transparency, Access to Information and Personal Data Protection and other competent public authorities regarding any claim deriving from the processing of your Personal Data.
Web browsing (cookies)
The website www.bimbaylola.mx (hereinafter, the “Website”), the property of BIMBA & LOLA, S.L., uses its own and third-party cookies to personalize the browsing experience and to improve our services by obtaining information about its use. The purpose of this Cookies Policy is to provide information on cookies so that you can decide on their management and us.
The Website www.bimbaylola.mx works with a specific tool that allows users to manage consent for cookies used on our website One Trust [https://www.onetrust.es/]
Strictly necessary cookies
These cookies are necessary for the website to function correctly and cannot be disabled on our systems. They are usually configured to respond to actions you have taken to receive services, such as adjusting your privacy preferences, logging in to the site and/or app, or filling out forms. You can set your browser to block or alert the presence of these cookies, but some parts of the website and/or app will not work.
Name | Guest | Type | Duration | Description |
---|---|---|---|---|
__cq_uuid | bimbaylola.com | First-party | 1 year | This cookie name is associated with Predictive Intelligence activity tracking software used on sites built on the Demandware ecommerce platform. It enables tracking of anonymous or logged in users to measure and improve performance, and also supports personalisation of site content. This cookie stores a random unique user identifier. |
__cq_dnt | www.bimbaylola.com | First-party | 1 day | Cookie associated with embedding content from billabong.com. Indicates that the browser has opted out of CC Einstein tracking for this site. Commerce Cloud sets it with each page response based on the value of the corresponding session. |
dwsid | www.bimbaylola.com | First-party | 1 day | System session management cookie associated with the Demandware eCommerce platform. |
_vis_opt_test_cookie | bimbaylola.com | First-party | 1 day | This cookie name is associated with the product Visual Website Optimiser, by USA based Wingify. The tool helps site owners measure the performance of different versions of web pages. This cookie tests if the browser is set to allow cookies. |
cquid | www.bimbaylola.com | First-party | 1 day | This cookie name is associated with Predictive Intelligence activity tracking software used on sites built on the Demandware ecommerce platform. It enables tracking of anonymous or logged in users to measure and improve performance, and also supports personalisation of site content. This cookie contains a user id for a logged in, known user. |
_dc_gtm_UA-xxxxxxxx | bimbaylola.com | First-party | 1 day | This cookie is associated with sites using Google Tag Manager to load other scripts and code into a page. Where it is used it may be regarded as Strictly Necessary as without it, other scripts may not function correctly. The end of the name is a unique number which is also an identifier for an associated Google Analytics account. |
cqcid | www.bimbaylola.com | First-party | 1 day | This cookie name is associated with Predictive Intelligence activity tracking software used on sites built on the Demandware ecommerce platform. It enables tracking of anonymous or logged in users to measure and improve performance, and also supports personalisation of site content. This cookie contains a hashed user ID. |
dw_dnt | www.bimbaylola.com | First-party | 1 day | This cookies checks whether a browser accepts first party cookies. This cookie is also used to determine when a session should not be tracked. |
_ga_xxxxxxxxxx | bimbaylola.com | First-party | 1 year | This cookie is set to generate statistical data about how the visitor uses the Service. |
OptanonConsent | bimbaylola.com | First-party | 1 year | This cookie is set by the cookie compliance solution from OneTrust. It stores information about the categories of cookies the site uses and whether visitors have given or withdrawn consent for the use of each category. This enables site owners to prevent cookies in each category from being set in the users browser, when consent is not given. The cookie has a normal lifespan of one year, so that returning visitors to the site will have their preferences remembered. It contains no information that can identify the site visitor. |
_gid | bimbaylola.com | First-party | 1 day | This cookie name is associated with Google Universal Analytics. This appears to be a new cookie and as of Spring 2017 no information is available from Google. It appears to store and update a unique value for each page visited. |
dwanonymous_xxxxxxxx | www.bimbaylola.com | First-party | 6 months | This is a pattern type cookie associated with the Demandware eCommerce platform. Its stated purpose is anonymised user tracking, therefore it is presumed involved in targeting or personalisation in some way. |
_ga | bimbaylola.com | First-party | 2 years | This cookie name is associated with Google Universal Analytics - which is a significant update to Google's more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports. By default it is set to expire after 2 years, although this is customisable by website owners. |
dwac_XXXXX | www.bimbaylola.com | First-party | 1 day | Stores the following data for analytics purposes: Session ID, report suite name, shopper’s customer ID, source code group ID (encoded), currency mnemonic, and time zone. |
OptanonAlertBoxClosed | bimbaylola.com | First-party | 1 year | This cookie is set by websites using certain versions of the cookie law compliance solution from OneTrust. It is set after visitors have seen a cookie information notice and in some cases only when they actively close the notice down. It enables the website not to show the message more than once to a user. The cookie has a one year lifespan and contains no personal information. |
dispatcher | www.bimbaylola.com | First-party | 1 day | Country/language storage. |
X-Salesforce-CHAT | d.la2-c1-cdg.salesforceliveagent.com | First-party | 1 day | This cookie is set by Live Agent to provide live chat support functionality to the user. |
test_cookie | doubleclick.net | Third-party | 1 day | This domain is owned by Doubleclick (Google). The main business activity is: Doubleclick is Googles real time bidding advertising exchange. |
IDE | doubleclick.net | Third-party | 1 year | This domain is owned by Doubleclick (Google). The main business activity is: Doubleclick is Googles real time bidding advertising exchange. |
Targeted cookies
These cookies can be placed throughout the website by third parties. These third parties can use them to create a profile of your interests and show you relevant ads on other sites. If you do not allow these cookies, you will have less targeted advertising.
Name | Guest | Type | Duration | Description |
---|---|---|---|---|
_fbp | bimbaylola.com | First-party | 3 months | Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers. |
_gcl_au | bimbaylola.com | First-party | 2 months | Used by Google AdSense for experimenting with advertisement efficiency across websites using their services. |
_pin_unauth | bimbaylola.com | First-party | 1 year | This cookie is assocate with pinterest. It is used to track the usage of services. |
_ttp | bimbaylola.com | First-party | 1 year | Advertising. |
_tt_enable_cookie | bimbaylola.com | First-party | 1 year | Advertising. |
sid | www.bimbaylola.com | First-party | 1 day | Advertising. |
cee | fbapi.bimbaylola.com | First-party | 2 months | Advertising. |
eupubconsent-v2 | bimbaylola.com | First-party | 1 year | Advertising. |
__cq_seg | bimbaylola.com | First-party | 1 month | Contains inferred shopping propensity attributes and other segment attributes used in predictive sort. |
uuid | cquotient.com | Third-party | 1 year | This domain is owned by Demandware Inc, a USA based ecommerce platform provider. It is associated with the Predictive Intelligence activity tracking software used on Demandware sites. It enables tracking of users to measure and improve performance of the platform, and also supports personalisation of site content. |
ar_debug | pinterest.com | Third-party | 1 year | This domain is owned by Pinterest. The main business activity is: Social Content Sharing platform. |
_ttp | tiktok.com | Third-party | 1 year | This domain is owned by Tiktok. |
Performance Cookies
These cookies allow us to count the visits and sources of traffic in order to measure and improve the performance of our website and app. They help us to know which pages are the most or least popular and see how many people visit the site. If you do not allow these cookies, we will not know when you visited our website and/or app.
Name | Guest | Type | Duration | Description |
---|---|---|---|---|
_vwo_ds | bimbaylola.com | First-party | 3 months | This cookie is associated with the product Visual Website Optimiser, by Wingify. The tool helps site owners measure the performance of different versions of web pages. |
_vwo_sn | bimbaylola.com | First-party | 1 day | This cookie is associated with the product Visual Website Optimiser, by Wingify. The tool helps site owners measure the performance of different versions of web pages. |
_vwo_uuid_v2 | bimbaylola.com | First-party | 1 year | This cookie name is associated with the product Visual Website Optimiser, by USA based Wingify. The tool helps site owners measure the performance of different versions of web pages. This cookie ensures a visitor always sees the same version of a page and is used to track behaviour to measure the performance of different page versions. |
_vwo_referrer | bimbaylola.com | First-party | 1 year | This cookie is associated with the product Visual Website Optimiser, by Wingify. The tool helps site owners measure the performance of different versions of web pages. |
_vwo_uuid | bimbaylola.com | First-party | 10 years | This cookie name is associated with the product Visual Website Optimiser, by USA based Wingify. The tool helps site owners measure the performance of different versions of web pages. This cookie ensures a visitor always sees the same version of a page and is used to track behaviour to measure the performance of different page versions. |
_vis_opt_s | bimbaylola.com | First-party | 3 months | This cookie name is associated with the product Visual Website Optimiser, by USA based Wingify. The tool helps site owners measure the performance of different versions of web pages. This cookie distinguishes between new and returning visitors. |
BrowserId_sec | force.com | Third-party | 1 year | Testing. |
CookieConsentPolicy | service.force.com | Third-party | 1 year | Used to apply end-user cookie consent preferences set by Salesforce Experience Cloud. |
BrowserId | force.com | Third-party | 1 year | Testing. |
LSKey-c$CookieConsentPolicy | service.force.com | Third-party | 1 year | With this cookie, Salesforce can identify your preferences from cookies collected on the website. It`s also used with Lightning Locker. You can find more details on Salesforce Cloud Service Cookies and Salesforce Embedded Chat Cookies. |
Functionality cookies
These cookies allow the site to offer better functionality and customization. They can be established by us or by third parties whose services we have added to our website and app. If you do not allow these cookies, some of our services will not work correctly.
Name | Guest | Type | Duration | Description |
---|---|---|---|---|
weird_get_top_level_domain | bimbaylola.com | First-party | 1 day | This cookie appears to be set by some Javascript code designed to work out what the domain of the site is. Its exact usage and purpose is unclear.weird_get_top_level_domain. |
Deactivation and elimination of cookies
The user can configure their browser to block cookies and delete them, if necessary. However, by opting for this configuration, the user may not be able to access certain parts of bimbaylola.com or may not be able to enjoy one or more of BIMBA Y LOLA's services. Unless the browser settings have been configured to reject cookies, the system will produce cookies whenever the user accesses bimbaylola.com.
The user may restrict, block or delete the cookies from bimbaylola.com at any time. To do so, the user must modify the browser settings regarding the use of cookies via the “Preferences”, “Options” or “Tools” menu (the menu names or the method of accessing the cookie options may vary depending on the browser used). For more information on how to configure cookies in the most common browsers, we recommend consulting the following links:
- Internet Explorer: Link
- Mozilla Firefox: erase cookies and block cookies
- Google Chrome: Link
- Opera: Link
- Safari: Link
10. CHANGES TO THE PRIVACY AND COOKIES POLICY
BIMBA Y LOLA reserves the right to modify this Privacy and Cookies Policy in the case of a regulatory change, modification, update, or a change in the configuration of the cookies themselves. We therefore recommend that you check our website periodically, where we provide information on any modification or update, to ensure that you are suitably informed on how and for what purpose we use your Personal Data.