app privacy policy

Privacy Policy – ​​Mobile App

PRIVACY POLICY FOR MOBILE APPLICATIONS (APPS)

Last updated: 09/07/2025

IDENTIFICATION OF THE DATA CONTROLLER.

Dirna Bergstrom, S.L., with CIF B86653995 and address for notification purposes at Calle Francisco Alonso, Nº 11 A – 28806 – Alcalá de Henares, Madrid, Spain, registered in the Mercantile Registry of Madrid, is the entity responsible for the processing of data provided by users of the Application (hereinafter, the User(s).

PURPOSE OF DATA PROCESSING.

To register, access, and subsequently use the Application, the User must voluntarily provide personal data (essentially identification and contact information), which will be incorporated into automated media owned by Dirna Bergstrom S.L.
Data processing operations will be carried out for the purpose of ensuring the proper functioning of the Application, maintaining the service provision and/or commercial relationship with the User, and for the management, administration, reporting, provision, and improvement of the service.
Likewise, the data may be used to send newsletters and commercial communications, if the User has given their express consent.

LEGITIMATION.

Processing is based on:
– The request for information and/or contracting of the Application’s services, the terms of which will be available for acceptance.
– The User’s free, specific, informed, and unequivocal consent, expressed through express acceptance (for example, by checking a box).
If the required data is not provided, it will not be possible to use the Application.

CONSERVATION OF PERSONAL DATA.

The data will be retained as long as the User continues to use the Application or does not request its deletion. Subsequently, it will be retained for the minimum legal period of five years to determine any potential liability.

RECIPIENTS.

Data will not be transferred to third parties unless legally required or with the express consent of the User.
Dirna Bergstrom, S.L. may share data with data processors, such as technology providers, with whom it has entered into contracts pursuant to the GDPR.

DATA RETENTION.

In compliance with Law 34/2002 (LSSI), the information necessary to identify the origin of the data and the start of the service will be retained for a maximum of 12 months, exclusively for criminal investigations or public security, when required by the competent authorities.

PROTECTION OF HOSTED INFORMATION.

Dirna Bergstrom, S.L. adopts appropriate technical and organizational measures to guarantee the security of personal data. Backups are made, but the User is not responsible for any loss or accidental deletion.
Data restoration is only included if the loss is attributable to Dirna Bergstrom, S.L. Otherwise, a fee may apply, subject to User acceptance.

EXERCISE OF RIGHTS.

Users may exercise their rights of access, rectification, deletion, objection, restriction of processing, and portability by sending an email to:
rgpd@dirna.bergstrominc.com
They may also file complaints with the Spanish Data Protection Agency (AEPD).

COMMERCIAL COMMUNICATIONS VIA ELECTRONIC MEANS.

Dirna Bergstrom, S.L. will not send promotional communications by electronic means without prior consent.
In the case of users with a prior contractual relationship, commercial information about similar products or services may be sent.
To unsubscribe, the User may write to: ventas@dirna.bergstrominc.com or sales@dirna.bergstrominc.com

Consent Management

The app uses a Consent Management Platform (CMP) compliant with the IAB Europe Transparency & Consent Framework (No. 92) to ensure that user consent is collected and managed transparently and in compliance with the GDPR.

Intellectual Property

All content, interfaces, designs, source code, and graphic elements of this application are the property of Dirna Bergstrom, S.L. or its licensors, and are protected by national and international intellectual and industrial property laws. Reproduction, distribution, or modification without express authorization is prohibited.

Data Processors

Dirna Bergstrom, S.L. may share personal data with technology service providers acting as data processors, including backend services, analytics, and push notifications. All of these providers are subject to contracts pursuant to Article 28 of the GDPR.