PRIVACY AND DATA PROTECTION POLICY

Understanding the importance of personal data security and the need to ensure its protection, ensuring the privacy and confidentiality of personal data is essential in any organization, especially in a company with international scope as Black Bull Group. Therefore, this Privacy and Data Protection Policy (the Policy, Privacy Policy or PPyPD hereinafter) sets forth the rules and practices related to the collection, use and protection of personal data.

The present Policy has a global character, where you can find and consult the general and relevant information related to our practices in the matter of Personal Data Protection, as well as our relations with those third parties that could have access to them or collect them on our behalf.

This policy applies to Black Bull Logistics, S.L. and all companies of the Black Bull Group (hereinafter BBG), defined as those over which Black Bull Logistics, S.L. exercises, directly or indirectly, control over their capital and/or management. References in this Policy to “Black Bull”, “BBG”, “we”, “us” and “our” refer to the entity responsible for the processing of personal information.

Black Bull is committed to the processing of personal data in accordance with personal data protection regulations and, in particular, insofar as applicable to it, with the provisions of Regulation (EU) 2016/679, 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

This Policy applies to all Users, understood as such, visitors to the website, as well as any other person who provides information to Black Bull of a personal nature through the different channels (hereinafter, “User” or “Users”). In this context, Channels are the different means or services that we make available to you so that you can interact with us, whether or not they involve registration, such as websites, applications, platforms, mailboxes, addresses or telephone numbers for information or user service, profiles on social networks, forms, events, etc.

In cases where any of Black Bull’s online channels contain links to other websites and applications of third parties outside of us, this Privacy Policy shall not apply to them. The User should review the Privacy Policies of such third parties.

DATA CONTROLLER
      • Company name: Black Bull Logistics, S.L.
      • VAT number: b-85646784
      • Address: C/Albert Einsteins, s/n. Edf. Insur Cartuja, planta 1. 41092, Sevilla
      • Phone number: +34 955 225 169
      • Contact email address: rgpd@blackbull-group.com

PERSONAL DATA COLLECTED THROUGH OUR CHANNELS

For the purposes of this Privacy Policy, “personal data” are those data that identify a person or can be used to identify a person. The User is also solely responsible for the information he/she provides, and for the truthfulness and lawfulness of such information.

Personal data obtained through Black Bull Channels may only be collected for processing when they are adequate, relevant and not excessive in relation to the scope and the specific, explicit and legitimate purposes for which they were collected.

Where the User provides data in respect of third parties, the User consents to the processing and declares that the data is accurate. Likewise, the User declares that he/she has proceeded to inform the third parties of the content of this policy and/or of the one that applies to him/her and of which he/she has been specifically informed, and of the corresponding rights that they are entitled to in terms of Personal Data Protection.

Public Information

Black Bull may process information to which it has access because it is information that is legitimately accessible to the public, and in particular, public information that is available in official records.

Personal Data of Minors

Black Bull does not knowingly collect personal data from minors without the consent of their parents, legal guardians or legal representatives. None of the Channels made available to the User by us are designed for or directed at minors.

If parents, representatives or legal guardians believe that their minor children have provided personal information without their consent, please contact us by e-mail at rgpd@blackbull-group.com

PURPOSE AND LEGITIMACY OF THE PROCESSING OF PERSONAL DATA

Black Bull processes the personal data of Users, collected through any of our Channels, for the purposes and on the legitimate bases detailed below:

      • Manage the relationship established with Black Bull

On those web platforms, we process the data provided by Users in order to manage the service indicated in each case, the contact with Black Bull through the Information form to respond to requests for information and requests for services received through any of our Channels, as well as to be able to process suggestions, claims or complaints, where appropriate.

The informed and specific consent of the User, will be the legal basis for this part of the treatment or, where appropriate, the execution of the existing contractual relationship with the User.

      • Manage applications to send CVs and apply for job vacancies.

Through the Work with us area of the Black Bull website, anyone interested can apply for job vacancies offered, as well as sending your CV to be included in the database. The data and documentation received are processed in this case, to evaluate the applications and, if you give us your consent, to take you into consideration for other possible present or future Black Bull vacancies, which could imply that the data is shared with the company of the Group responsible for the vacancy in question.

The legal basis for the processing is the implementation of pre-contractual measures, and the consent given if you wish to apply for other possible vacancies.

      • Fulfillment of legal obligations that affect us

Whether these legal obligations are of a commercial, fiscal, accounting, administrative nature; the legal basis that enables us for
this treatment is the fulfillment of legal obligations.

      • Management of visits and third parties

In order to control access to the Black Bull offices by visitors, collaborators or other third parties, it is possible that identification
data may be collected on our premises.

The legitimate basis is, in this case, consent, as well as Black Bull’s legitimate interest in ensuring the security of goods and persons on its premises.

TIME OF CONSERVATION OF PERSONAL DATA

In general, the data will be kept (i) for the time necessary for the purpose for which they were collected, (ii) for the applicable statute of limitations, if any liabilities may arise from the processing.

On a special basis:

      • Data collected for the purpose of responding to requests or queries, will be kept for the time necessary to be able to respond to them, and never for a period exceeding twelve months.
      • Data collected on the basis of your consent, will be retained until such consent is withdrawn.
RECIPIENTS OF PERSONAL DATA AND INTERNATIONAL TRANSFERS

The personal data provided in general will not be communicated or disclosed to third parties, except:

      • To companies providing services, such as web hosting, for the purpose of storage and processing of information (third party external information processing provider with which the corresponding processing contract or other assimilated guarantees have been signed).
      • Or except for legal obligation or those necessary to comply with our obligations to the Tax Authorities, Social Security and financial institutions.

Additionally, we inform that the processing of the information collected through this website may involve international data transfers. In the event that the receiving territory does not have the corresponding decision of adequacy by the European Commission, so as to ensure a level of privacy protection equivalent to that granted by European regulations, we will adopt the necessary safeguards to ensure that such transfers of personal data.

USER RIGHTS

At any time, users may exercise their rights of access, rectification, deletion, opposition, limitation and portability of their data by sending their request to the following e-mail address rgpd@blackbull-group.com or by post, writing to the Data Protection Delegate at C/Albert Einstein, s/n. Edf. Insur Cartuja, 1st floor, 41092, Seville.

Likewise, in cases where we have obtained your consent for the processing of your personal data in connection with certain activities, you may withdraw your consent at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

For this purpose, we will require certain information relating to the identification of the data subject and your contact details, the business area of Black Bull with which you have had a relationship, and the right you wish to exercise. If necessary, we may ask you for a valid identification document.

All information provided in the exercise of your rights will be treated confidentially and will be used exclusively for the purpose of recording and processing the requested exercise of rights. The data will be kept for a period of three years.

In the event that the user’s right is not satisfied, he/she may file a complaint with the supervisory authority, in this case, the Spanish Data Protection Agency (www.aepd.es).

EXTENDED INFORMATION
      • Social Networking

In Black Bull we use the social network LinkedIn, to share our content and post job offers. We act in the networks as responsible for the data we publish, always treating them according to the conditions established in each of the social networks.

EFFECTIVENESS

Any changes made to the Privacy Policy and information management practices will be reflected in a timely manner, and Black Bull may add, modify or replace such Policy as it deems necessary.

This Privacy Policy is published in Spanish and English languages, in case of discrepancy between the two versions, the Spanish version shall prevail.