Privacy policy

We process the data you provide: name, email, phone and, where applicable, your account details, your book reservations, the quotes requested and the files you send to print.

We use your data to manage your account, your book reservations, quotes and print jobs, and to contact you in relation to them.

When we send you a design to approve before producing it, we record your approval: the email address or phone number you use to give it, the date and time, your IP address and your browser, together with the digital fingerprint (hash) of the files shown to you. The purpose is to prove that you approved that specific design before it went into production.

For communications related to your orders, reservations and services we may contact you by email, phone or WhatsApp (for example, availability notices or the status of a job). If you prefer not to receive WhatsApp notices, you can tell us at any time by writing to info@besbello.gal.

We will only send you commercial communications (news, offers and campaigns) by email, SMS or WhatsApp if you give us your consent, which you can withdraw at any time.

If you use the material-list photo feature (uploading a photo of the school list to get a basket), we process the image only to extract the items and propose a basket that you review before reserving. The image is not stored: it is processed and discarded.

The legal bases for processing are: the performance of your request or of the contracted service (art. 6.1.b GDPR); compliance with legal obligations, in particular tax and accounting ones (art. 6.1.c); your consent for commercial communications (art. 6.1.a), which you can withdraw at any time; and the legitimate interest in preventing abuse of the promotions through family-unit checking and in keeping proof of approved designs (art. 6.1.f).

We will keep your data for as long as necessary to manage the services requested and, afterwards, for the legally required periods. The files you send us for printing are deleted from our systems within a maximum of 30 days from delivery of the job, unless you ask us to keep them for future reprints.

The record of a design approval (with its date and time, IP address, browser and the digital fingerprint of the approved files) is kept for as long as claims may arise regarding the work produced.

We do not pass your data to third parties, except by legal obligation. The data may be processed by our technology service providers (web hosting, file storage and email), who act as data processors.

Your data is hosted on servers located in the European Union (provider Hetzner, Germany). We do not carry out international data transfers, except the one resulting from the Google Maps map embedded on the contact page: that processing by Google may take place in the United States, covered by the EU-US Data Privacy Framework and/or by standard contractual clauses approved by the European Commission.

If you authorise communications via WhatsApp, that channel is provided by WhatsApp Ireland Limited (Meta group), acting as processor of the messages we send you; that processing may involve an international transfer to the United States covered by the EU-US Data Privacy Framework and/or by standard contractual clauses approved by the European Commission.

If you use the material-list photo feature, the image is processed with Anthropic PBC's artificial intelligence service, acting as processor; that processing may involve an international transfer to the United States covered by the EU-US Data Privacy Framework and/or by standard contractual clauses approved by the European Commission. The image is not stored, and the system is instructed to ignore any personal data that might appear in it.

If you create an account at besbello.gal, we manage your loyalty wallet: your purchases and reservations may accrue balance according to the promotions in force at any given time (published on the website and in the shop), which you can check in your account and redeem in the shop. For this we process your order and reservation history and your accrued balance. The wallet is Besbello's own system and your data is not shared with any external provider. Legal basis: performance of the programme's terms that you accept when registering (art. 6.1.b GDPR). You can close your account at any time; any remaining balance is governed by the terms of use.

To prepare your reservation we request the minimum pupil data: school year, school and, where applicable, the pupil's name. This data must be provided by the parent or legal guardian, is used solely to identify and prepare the set of books and to notify you of its availability, and is not used for any other purpose nor shared with third parties. It is kept during the current school year and the legal invoicing periods.

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to the controller's email address.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).