PRIVACY AND DATA PROTECTION POLICY

Understanding the importance of personal data security and the need to ensure its protection, guaranteeing privacy and confidentiality is fundamental in any organization, especially in an internationally operating company like Black Bull Group. Therefore, this Privacy and Data Protection Policy (hereinafter referred to as the Policy, Privacy Policy, or PPyPD) establishes the rules and practices related to the collection, use, and protection of personal data.

This Policy has a global character, where you can find and consult general and relevant information regarding our practices in the field of personal data protection, as well as our relationships with third parties who may access or collect such data on our behalf.

This policy applies to Black Bull Logistics, S.L. and all the companies of Black Bull Group (hereinafter referred to as BBG), defined as those over which Black Bull Logistics, S.L. exercises direct or indirect control over their capital and/or management. References in this Policy to “Black Bull”, “BBG”, “we”, “us”, and “our” concern the entity responsible for processing personal information.

Black Bull is committed to processing personal data in accordance with personal data protection regulations and, specifically, whenever applicable, with the provisions of Regulation (EU) 2016/679, April 27, 2016, on the protection of natural persons with regard to the processing of personal data and the free movement of such data.

This Policy applies to all Users, understood as visitors to the website, as well as any other person who provides personal information to Black Bull through various channels (hereinafter, “User” or “Users”). In this context, Channels are the different means or services we make available to you to interact with us, whether or not they involve registration, such as websites, applications, platforms, mailboxes, information or customer service addresses or phone numbers, social media profiles, forms, events, etc.

In cases where any of Black Bull’s online Channels contain links to other third-party websites and applications, this Privacy Policy will not apply to them. The User must review the Privacy Policies of such third parties.

DATA CONTROLLER
      • Company name: Black Bull Logistics, S.L.
      • VAT number: b-85646784
      • Address: C/Albert Einsteins, s/n. Edf. Insur Cartuja, planta 1. 41092, Sevilla
      • Phone number: +34 955 225 169
      • Contact email address: rgpd@blackbull-group.com
PERSONAL DATA COLLECTED THROUGH OUR CHANNELS

For the purposes of this Privacy Policy, “personal data” are those data that identify a person or can be used to identify them. The User is also solely responsible for the information they provide and for its truthfulness and legality.

Personal data obtained through Black Bull’s Channels may only be collected for processing when they are adequate, relevant, and not excessive in relation to the scope and purposes determined, explicit, and legitimate for which they were collected.

When the User provides data regarding third parties, the User consents to the processing and declares that the data are accurate. Likewise, the User declares that they have informed the third parties of the content of this policy and/or the applicable policy and have specifically informed them of their corresponding rights regarding personal data protection.

Public Information

Black Bull may process information that it may access because it is legitimately accessible to the public, and especially, public information available in official records.

Personal Data of Minors

Black Bull does not deliberately collect personal data from minors without the authorization of their parents, representatives, or legal guardians. None of the Channels made available to the User by us are designed or directed at minors.

If parents, representatives, or legal guardians believe that their minor children have provided personal information without their consent, please contact us at rgpd@blackbull-group.com.

PURPOSE AND LEGITIMACY OF THE PROCESSING OF PERSONAL DATA

Black Bull processes the personal data of Users collected through any of our Channels for the purposes and legitimate bases detailed below:

      • Manage the relationship established with Black Bull

On those web platforms, we process the data provided by Users to manage the service indicated in each case, contact Black Bull through the Information form to address information requests and service requests received through any of our Channels, as well as to process, if applicable, suggestions, complaints, or claims.

The informed and specific consent of the User will be the legal basis for this part of the processing or, where appropriate, the execution of the existing contractual relationship with the User.

      • Managing CV submissions and applications for offered vacancies

Through the Work with Us area of the Black Bull website, any interested party can apply for the offered job vacancies, as well as submit their CV for inclusion in the Database. The data and documentation received are processed in this case to evaluate the applications and, if you give us your consent, to consider you for other possible vacancies at Black Bull, present or future.

The legal basis for processing is the application of pre-contractual measures and the consent given if you wish to apply for other possible vacancies.

      • Compliance with legal obligations that affect us

Whether these are legal obligations of a commercial, tax, accounting, or administrative nature; the legal basis that enables us to process this data is compliance with legal obligations.

      • Managing commercial prospecting

Your data will be processed by Black Bull to manage contractual relationships and the commercial prospecting of our services.

The legal basis in this case is the legitimate interest of Black Bull to maintain contact with the legal entity to which it provides its services, in accordance with Article 19 of Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights.

RETENTION PERIOD OF PERSONAL DATA

In general, data will be retained (i) for the time necessary for the purpose for which they were collected, (ii) for the applicable prescription periods, if responsibilities arising from the processing may arise. Specifically:

      • Data collected for the purpose of addressing requests or inquiries will be retained for the time necessary to address them, and never for a period exceeding twelve months.
      • Data collected based on your consent will be retained as long as the consent is not withdrawn.
RECIPIENTS OF PERSONAL DATA AND INTERNATIONAL TRANSFERS

Personal data provided will generally not be communicated or transferred to third parties, except:

      • To service provider companies, such as web hosting, for the purpose of storing and processing information (third-party external information processing provider with whom the corresponding processing contract or other similar guarantees have been signed).
      • Or except for legal obligation or those necessary to fulfill our obligations with Tax Administrations, Social Security, and financial entities.

Additionally, we inform you that the processing of information collected through this website may involve international data transfers. If the recipient territory does not have the corresponding adequacy decision by the European Commission, ensuring a level of privacy protection equivalent to that granted by European regulations, we will adopt the necessary safeguards to ensure such international data transfers.

USER RIGHTS

At any time, the user may exercise their rights of access, rectification, deletion, opposition, limitation, and portability of their data by sending their request to the following email address rgpd@blackbull-group.com or by postal mail, writing to the Data Protection Officer at C/Albert Einstein, s/n. Edf. Insur Cartuja, planta 1, 41092, Seville.

Likewise, in cases where we have obtained your consent for the processing of your personal data in relation to certain activities, you may withdraw it at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

For this, we will require certain information related to the identification of the interested party and their contact details, with the Black Bull business area with which they have had a relationship, and with the right they wish to exercise. If necessary, we may request a valid identification document.

All information provided in the exercise of your rights will be treated confidentially and used exclusively for the purpose of registering and processing the requested exercise of rights. The data will be retained for a period of three years.

If the user is not satisfied with their right, they can file a complaint with the supervisory authority, in this case, the Spanish Data Protection Agency (www.aepd.es).

ADDITIONAL INFORMATION:
      • Social Networks

At Black Bull, we use the LinkedIn social network to share our content and publish job offers. We act on the networks as responsible for the data we publish, always treating them in accordance with the conditions established in each of the social networks.

VALIDITY

Any changes made to the Privacy Policy and information management practices will be reflected in a timely manner, and Black Bull may add, modify, or replace this Policy when deemed necessary.

This Privacy Policy is published in Spanish and English; in case of discrepancy between both versions, the Spanish version will prevail.