Privacy Policy

Article 1. Introduction

1.1 2BX Commercial Solutions S.L. (hereafter "2BX" or 2BX.BIKE"), a Spanish company whose registered office is located in Barcelona, Spain (Calle Doctor Francesc Darder, 9, 08034 Barcelona), registered at the Trade Registry under number B13674346 (NIF), operates a Technology Solution that aims to provide its users with various services aiming to help them improve their business with regards to second-hand products. 2BX is responsible for the processing of your personal data which will be treated in accordance with the parameters set out in this policy.

1.2 This Privacy Policy is an integral part of the Terms and Conditions of Use and Sales and shall apply to the processing of personal data of Users of our Website and services, including both data provided by Users directly, as well as data that may be collected automatically or provided by third parties during the provision of any service and/or in the development of a contractual relationship with us.

1.3 Our Privacy Policy describes how 2BX collects such data, in compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), to the Organic Law 3/2018 of 5 December, on the Protection of Personal Data and guarantee of digital rights as well as in compliance with any other regulations that may be applicable.

1.4 The access, use and maintenance of our Web Site and its services implies the processing of personal information of its Users in accordance with the purposes contained and duly informed in this policy. The navigation or use of our Website, as well as its services and functionalities, implies full and unreserved acceptance by the User of the contents of this Privacy Policy and the Terms of Use.

1.5 Users should read our policy carefully to ensure that you understand it in its entirety, and check the Policy frequently for any updates or changes it may contain. Should you have any questions, you can contact us directly at contact@2bx.bike. If you do not agree with our policies, please do not use this or any of our services.

Article 2. Definitions

In every instance where the words below appear, in singular or plural form, with a capital letter, they shall have the following meanings:

• User(s): means any natural person or legal entity that accesses 2BX.BIKE regardless of whether such person or entity has a client account yet.
• Buyer(s): means any person or legal entity that is using the Platform to purchase Product(s).
• Seller(s): means any seller of Products registered on the Technology Solution.
• Products: means all kinds of products sold on the 2BX.bike website.
• Personal Data or Data: means any information relating to an identified natural person or one who could be identified, directly or indirectly, especially by reference to an identifier, such as a name, an identification number, localization data or an online identifier, or to one or more specific elements belonging to its physical, physiological, genetic, psychic, economic, cultural or social identity. For this reason, the data that we collect may include your strictly personal data, in that it allows you to be identified as a specific person. On the other hand, some data does not allow for you to be identified directly, such as your profession or your navigation data (type of navigator, Terminal and operating system, the path followed on the Site, etc.) but are nevertheless considered Personal Data since they are attached and/or may be attached to the former.
• Third Party Data: means the Data that we share, when necessary, with third parties.
• GDPR: means the General Regulation on Data Protection N°2016/679 of April 27, 2016 applicable as of May 25, 2018 or, in lieu of it, any law that may be adopted for the transposition of said Regulation.
• Product Sheet: means a description of a Product, as provided by the Seller and displayed on the Technology Solution.
• Seller information: means the information (such as trade name, address of establishment, VAT information) on a Seller, as provided by the Seller and displayed on the website.
• Services: means services offered by 2BX.
• T&Cs: means the terms and conditions of use which govern relations between Users and 2BX.

Article 3. Data collected

3.1 The data collected by 2BX is divided into 2 major categories:

• The data received directly from you when you set up your account or during interactions with our customer service department, or changes to your profile
• The data that we collect through your activities on the site

3.2 There are multiple purposes for which we collect your data collected, including:

• Management of transactions: the information and data concerning you are necessary to the management of transactions conducted by Buyers and Sellers
• Personalization of our services: the information and data concerning you allows us to improve and personalize the services that we offer you on 2BX

3.3 Your Data regarding your account, as well as those regarding your navigation and/or your behavior on the site are retained for 3 years from your last activity on the site or electronic communication support with 2BX, or for 6 years from your last transaction unless otherwise provided by the law. At the end of this time, your account is considered "inactive" and will automatically be deactivated.

Article 4. Management of data

4.1 The data collected by 2BX are intended for 2BX for the purposes of operating the services.

4.2 Your personal data may be shared with selected subcontractors which 2BX uses in the scope of the processing of services and orders, especially management, execution, processing and payment.

4.3 Some of your personal data is shared with other users in order to facilitate transactions, including your profile information (including name, address, details of your legal entity information)

4.4 The servers containing the data collected by 2BX are hosted in Europe. European users are informed that their data may be sent from time to time to providers located outside the European Union, in which case 2BX implements any procedure required to obtain the guarantees necessary for the security of such transfers (such as anonymization of data).

4.5 2BX protects your personal data by establishing all reasonable technical and organizational measures to ensure the security of the processing of personal data and its confidentiality. We remind you, however, that you are responsible for the data that you transmit to us and as such, you contribute to the protection of your personal data by adhering to best practices regarding the use of your computer tools. You are also reminded of the fact that without adequate security measures (for example, secured configuration of your web navigator, updates of antivirus programs, firewall software, not using software from doubtful sources, etc.) you run the risk that the data and passwords that you use to protect your data may be disclosed to unauthorized third parties.

Article 5. Your rights

5.1 In accordance with the Data Protection Act of May 30, 2018 and GDPR, you have the rights listed below with regard to your personal data:

• Access (Section 45 of the Data Protection Act),
• Correction (Section 46 of the Data Protection Act),
• Removal (Section 47 of the Data Protection Act),
• Limitation of the processing of data (Section 47 of the Data Protection Act),
• Portability (Section 45 of the Data Protection Act),
• Opposition to processing and profiling (Section 49 of the Data Protection Act),

5.2 In order to exercise the aforementioned rights, Users should contact 2BX through the email address contact@2bx.bike indicating as subject "My personal data". For security reasons we will have to validate the identity of the applicant, therefore, if your request is made by email, it must be from the same email account with which you are registered in 2BX. Additionally, we may ask you for a photocopy of your ID card, electronic signature or scanned copy of your ID card, according to the legally established minimum content. We will process your request as soon as possible, always within the margins and deadlines stipulated by the RGPD and the legislation in force at the time of the request.

5.3 In addition, the User has the right to file a complaint with the Spanish Data Protection Agency (AEPD) if he/she has doubts or is not satisfied with the exercise of his/her rights by writing to the postal address C/Jorge Juan n.6, C.P. 28001 (Madrid), with telephone number (+34) 912 663 517 or through its electronic site.