Privacy Policy - Animal Movement

🔒 PRIVACY POLICY

1. Identity of the Data Controller

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR) and Spanish Organic Law 3/2018 of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we inform you that the personal data provided through this website will be processed under the responsibility of:

Controller: Associació Blue Bubble World
Tax ID (NIF): G66430190
Address: Plaça Josep Pallach, Bajos 12, 08035 Barcelona (Spain)
Email: admin@bluebubbleworld.org
Primary purpose: management of the Animal Movement social platform and its associated services.

2. Purposes of Processing

Personal data collected through this Website may be processed for the following purposes:

To respond to inquiries, requests, or communications received through contact forms or email.
To manage registrations or participation in events, activities, or campaigns organized by the association.
To manage user participation in information forums and other interactive areas of the platform.
To send newsletters and informational communications about activities, projects, campaigns, or updates of the association, provided that the user has given explicit consent.
To facilitate access to external services or content, such as dropshipping providers, payment gateways, the ANIMAL App, or other partner platforms necessary for service delivery.

3. Lawful Basis for Processing

The processing of personal data is based on the following legal grounds:

User consent, given explicitly by accepting this Privacy Policy or by submitting personal data through the Website’s forms.
Performance of a contract or pre-contractual measures, when processing is necessary to provide a requested service.
Legitimate interest of the association, when processing is necessary for administrative management or to further its statutory and social objectives, provided it does not override users’ rights and freedoms.

4. Data Communication and Transfers

Personal data may be shared with third-party collaborators only when strictly necessary for the proper provision of services offered through the Website (for example, dropshipping services, technological providers, or the ANIMAL App).

The Website is hosted on SiteGround (European Union), which ensures compliance with GDPR and applies appropriate security measures.

No international data transfers outside the European Economic Area will be carried out unless adequate safeguards and protection levels are guaranteed.

5. Data Retention Period

Personal data will be retained only for the time strictly necessary to fulfill the purposes for which they were collected, or as long as the user does not request their deletion.

Once this period ends, the data will be blocked and kept only for the legally required period to address any potential liabilities.

6. Users’ Rights

Users may exercise the following rights at any time:

Access: to know what personal data is being processed.
Rectification: to request correction of inaccurate or incomplete data.
Erasure (Right to be Forgotten): to request the deletion of data when it is no longer necessary.
Objection: to object to certain types of processing, such as receiving marketing communications.
Restriction of Processing: to request that processing of data be temporarily limited.
Data Portability: to receive personal data in a structured, commonly used, and machine-readable format.

To exercise these rights, users may send a written request to
📧 admin@bluebubbleworld.org, attaching a copy of a valid identity document.

Users also have the right to file a complaint with the Spanish Data Protection Agency (AEPD) if they believe their data protection rights have been violated: www.aepd.es.

7. Security Measures

The association applies appropriate technical and organizational security measures to ensure the confidentiality, integrity, and availability of personal data and to prevent its alteration, loss, unauthorized processing, or access, in accordance with Article 32 of the GDPR.