Menu
Search Search Basket
0
Cart

Privacy Policy

WEB PRIVACY POLICY

Data Protection and Confidentiality Policy

Kanbori is committed to due diligence and regulatory compliance with qualified Personal Data Protection regulations.

The following is detailed information on the policy of confidentiality and protection of Personal Data in compliance with Article 16 of Law 29/2021 of 28 October, which is qualified as the protection of personal data.

Data from the Data Protection Responsible and Contact (RPD):

  • Identity: COBOGROUP, SLU
  • Brand: Kanbori (hereinafter, the Entity and Responsible).
  • Postal Code Direction: Carretera Coll d'Ordino, Building Terratorta, Bloc B, 3rd 1st, AD300, Ordino – Principality of Andorra
  • Telephone: +376 699 288
  • E-mail: hello:kanbori.com

Purpose of the treatment

The Entity will deal with information that will be provided to us by the interested parties for the following purposes:

  • Manage your attention, visit and meet our facilities.
  • Perform service provision, payment, order delivery and after sales service.
  • Manage credit account in case of funding.
  • Manage user registration.
  • Manage the organisation and participation of competitions and promotions.
  • Manage any kind of application, suggestion or request about our products that the interested parties formulate.
  • Comercials Information and commercial communications. That is, the processing of your data in order to inform you about activities, articles of interest and general information related to our activity and contracted services/products.
  • Manage data provided by candidates for a job, using Curriculum Vitae or other means, in order to initiate a selection and recruitment process.
  • Ensuring the security of offices, facilities and people through access controls, video surveillance systems and other control/access identification systems.
  • Comp Comply with the legal provisions that apply to the Entity and its activities in the field of health and prevention of occupational risks.
  • To manage and control the operation of the internal mechanisms, policies and protocols that are established by the Entity for the purpose of communication/reporting management and regulatory compliance.
  • All treatments that result from our application due to the appropriate compliance with official/sectoral regulations and requirements to which we are subject.

In order to develop his attention and management of previous purposes, the holder aware of the processing of his data for previous purposes, all under the strictest compliance with the qualified data protection regulations and the policy we are detailing. At any time it will be able to exercise its specified rights in this policy.

Treated data retention criteria

  • Management of contracted products with Kanbori: personal data provided, as well as other data of persons whose intervention is necessary, will be retained for 6 years from the execution of the contract. At the end of the same period, personal data will be retained in cases where it is possible to derive responsibilities with the Entity and/or in compliance with other regulatory frameworks applicable to the Entity. Personal data will be kept in such a way as to allow the identification and exercise of the rights of the persons concerned and, under the technical, legal and organisational measures that are necessary to ensure the confidentiality and integrity of these persons.
  • Curriculum Management Vitae: Entity, as a general rule, retains its Curriculum Vitae for the maximum term of one year. Once this deadline is over, it will automatically be destroyed.
  • Management of Employment Contracts: personal data will be retained, in any case, for the period in which the employment relationship is in force and, at the end of the relationship, in the event that responsibilities can be derived between the parties and when required by legislation.
  • Other: the rest of the data and information provided by the user for any type of media will be preserved for as long as necessary to fulfill the purpose for which they were contributed. 

Legitimation

The legal bases that enable the Entity to process the personal data of users, customers, potential customers, are:

  • The consent of the persons concerned to the processing and management of any request for information or consultation on our products.
  • Consent for candidates to work for the purpose of selection and recruitment.
  • The framework for providing and/or hiring services/products with the Entity.
  • The legitimate interest in sending information, commercial and/or other promotional communications related to the activity of the Entity and products contracted through email or any other medium.
  • Compliance with the legal obligations and internal procedures of compliance with the rules.
  • The legitimate interest in guaranteeing security in offices, facilities and people.

Recipients

Data of a personal nature is not passed on to third parties, except for legal provision. 

Proceeding

Personal data is obtained directly from the data subjects and from our partners. The categories of personal data provided by our contributors are as follows:

  • Identification data.
  • Postal and electronic addresses.
  • Data facilitated and/or consented by the interested parties concerned and required for the management and performance of the requested service/product.

Rights

Access Rights, Rectification, Suppression: interested people have the right to obtain confirmation as to whether or not personal data concerning them are processed in the Entity. The data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or to request the deletion when, among other reasons, the data is no longer necessary for the purposes that were collected.

 

Right to Limitation and Opposition: the data subjects may request the restriction of the processing of their data, in the case of which they will only be retained for the exercise or defence of complaints. In certain circumstances, and for reasons related to their particular situation, the data subjects may object to the processing of their data. The Entity will cease to process the data in this case, unless there are legitimate imperative reasons, or for the exercise or defense of possible claims.

The right to revoke the consent provided: the data subjects have the right to withdraw their consent at any time, except in cases of personal data processing provided for in the Data Protection Regulation or that these are required by the provision of the contracted service and do not require such consent. However, this withdrawal does not have retroactive effects, so it will not affect the application of treatment based on prior consent.

The right to portability: data subjects will have the right to the portability of their data, when the processing of data is done by automated means. They will therefore have the right to request, receive and obtain from the data subject, the data that affect him or her.

Security and control measures

In compliance with qualified data protection regulations, the Entity will process personal data by applying appropriate technical, legal, organisational and security measures, in order to guarantee the confidentiality and integrity of the information it manages in accordance with the provisions of the current regulations.

We welcome the fact that you are making known the Data Protection Officer and/or Data Protection Officer through the contact details established in this Privacy Policy, any security risks, of those with indications or knowledge, that may compromise the integrity and confidentiality of personal data and/or confidential information, in order to be able to take the necessary measures to prevent unauthorised treatment, loss, destruction or accidental damage.

User Consent

The User claims to have expressly read and accepted this Privacy Policy before providing his personal data for the practices described in this declaration when the legitimizing basis of the processing is his consent.

The User is obliged to keep Kanbori unscathed in the face of any possible claim, fine or penalty that may be forced to bear as a result of the User's failure to respect the duty described in this paragraph.

Sending communications

If the User has consented or based on Kanbori's legitimate interest, we will process the personal data he has provided in order to send him personalized commercial communications and/or promotional communications by electronic means, via email and/or SMS, on Kanbori-related products and services. The customization of communications will be carried out on the basis of the data provided by the user himself, as well as the data obtained from his shopping history, in accordance with this Policy.

You can revoke your consent or object to the treatment at any time by clicking on the link provided in each newsletter or by sending an email to hello@kanbori.com . We will store your data for as long as it is subscribed to the corresponding newsletters and newsletters. After it has been decommissioned, we will block its data in this context so that it does not receive further commercial communications from us in the future.

In addition, in the event of a contractual relationship with Kanbori, for example, with purchases of our products via our stores or the web, communications concerning order tracking, SMS and/or email related to the execution of the contract can be sent. These communications have no commercial purpose and their sole aim is to ensure the correct provision of the services that the interested party has contracted.

If you do not wish to receive this type of follow-up notification related to the provision of the service, you can apply to opt out by sending an email to hello@kanbori.com  or calling the free phone +376 699 288 (Andorra). 

Control Authority

In the event of divergences with the Entity in relation to the processing of its data, it has the right to lodge a complaint with the corresponding Data Protection Control Authority. In Andorra, this Authority is the Andorran Data Protection Agency (www.apda.ad/ca) 

Care and support

Interested persons will be able to communicate to the Entity any doubts about the processing of their personal data or interpretation of our Policy, by contacting the Responsible and/or Data Protection Officer in the direction indicated at the beginning of this Policy.

×