I. PRIVACY POLICY AND DATA PROTECTION

Identity of the data controller

The controller of the collected personal data: Bsfcorp S.L

Hereinafter, Data Controller.

Contact details:

Address: C/ REVERENDO JOSE Mª PINAZO, 9-BJ-DRCHA, CP 46020, VALENCIA

Contact email: ventas@bsfseeds.com

Data Protection Officer (DPO)

The Data Protection Officer (DPO) is responsible for ensuring compliance with the data protection regulations to which it is subject. The user can contact the DPO designated by the Data Controller using the following contact details: ventas@bsfseeds.com

Registration of Personal Data

The personal data collected by BSF SEEDS through the forms available on its pages will be entered into an automated file under the responsibility of the Data Controller, duly declared and registered with the General Registry of the Spanish Data Protection Agency, which can be consulted on the agency's website (https://www.aepd.es/), for the purpose of facilitating, expediting, and fulfilling the commitments established between BSF SEEDS and the user, or maintaining the relationship established in the forms the user fills out, or responding to a request or inquiry.

II. CATEGORIES OF PERSONAL DATA

The categories of data processed by BSF SEEDS are solely identifying data. No special categories of personal data are processed as defined in Article 9 of the GDPR.

2.1 Principles applicable to the processing of personal data

The processing of personal data of the user will be subject to the following principles outlined in Article 5 of the GDPR:

Principle of lawfulness, fairness, and transparency: The user's consent will be required at all times, with prior information about the purposes for which personal data is collected.

Principle of purpose limitation: Personal data will be collected for specific, explicit, and legitimate purposes.

Principle of data minimization: Only strictly necessary personal data will be collected in relation to the purposes for which they are processed.

Principle of accuracy: Personal data must be accurate and kept up to date at all times.

Principle of storage limitation: Personal data will only be retained for as long as necessary for the purposes of processing.

Principle of integrity and confidentiality: Personal data will be processed in a manner that ensures security and confidentiality.

Principle of proactive responsibility: The Data Controller will be responsible for ensuring that the above principles are complied with.

2.2 Legal basis for the processing of personal data

The legal basis for processing personal data is the explicit and unequivocal consent of the user. The Data Controller is committed to obtaining this consent before processing personal data for specific purposes.

The user has the right to withdraw consent at any time. Withdrawal of consent will be as easy as giving it. As a general rule, withdrawal of consent will not affect the use of the website.

When the user is required to provide data via forms to make inquiries, request information, or for reasons related to the website's content, they will be informed if filling out any of these forms is mandatory, as some may be essential for proper service execution.

2.3 Retention periods for personal data

Personal data will only be retained for the minimum necessary time for their processing purposes, or until the user requests their deletion.

At the time personal data is collected, the user will be informed about the retention period or, when this is not possible, the criteria used to determine this period.

2.4 Recipients of personal data

To properly manage the service provided and user data, BSF SEEDS may collaborate with third-party service providers who may have access to personal data on behalf of BSF SEEDS due to their service provision. BSF SEEDS commits to signing a data processing agreement with them, imposing, among others, the following obligations: applying appropriate technical and organizational measures; processing personal data only for the agreed purposes and in accordance with BSF SEEDS' documented instructions; and deleting or returning the data to BSF SEEDS once the service provision ends.

If the Data Controller intends to transfer personal data to a third country or international organization, the user will be informed at the time of data collection about the country or organization and whether an adequacy decision by the Commission exists.

2.5 Personal data of minors

In compliance with Articles 8 of the GDPR and 13 of the Spanish Data Protection Law, only individuals over 14 years of age may lawfully consent to the processing of their personal data. If the user is under 14 years old, parental or guardian consent will be required.

2.6 Confidentiality and security of personal data

BSF SEEDS commits to implementing necessary technical and organizational measures to ensure personal data security and prevent their destruction, loss, alteration, unauthorized access, or processing.

However, since BSF SEEDS cannot guarantee Internet security or the absence of hackers or fraudulent access, it commits to notifying the user without undue delay if a personal data breach occurs that is likely to result in a high risk to individuals' rights and freedoms.

III. RIGHTS DERIVED FROM PERSONAL DATA PROCESSING

The user may exercise the following rights recognized in the GDPR:

Right of access: The right to obtain confirmation of whether BSF SEEDS is processing personal data and, if so, access information about their data and processing.

Right to rectification: The right to have inaccurate or incomplete data corrected.

Right to erasure (“right to be forgotten”): The right to delete data when they are no longer necessary for the purposes collected or unlawfully processed.

Right to restrict processing: The right to restrict data processing in specific cases.

Right to data portability: The right to receive personal data in a structured, commonly used format and transmit it to another controller.

Right to object: The right to object to data processing.

Right not to be subject to automated decision-making, including profiling: The right not to be subject to a decision based solely on automated processing.

To exercise these rights, users must submit a written request to BSF SEEDS including their name, ID copy, request details, address, date, and signature.

IV. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

By using this website, the user accepts this Privacy Policy. BSF SEEDS reserves the right to modify it as needed.

This Privacy Policy was updated on May 25, 2018, to comply with the EU General Data Protection Regulation (GDPR) 2016/679.