At Dimboo, safeguarding our users' privacy and protection is a top priority and we adhere strictly to data protection regulations to ensure this. This statement outlines how we handle personal data gathered from customers who use Dimboo, which may be obtained either directly from the individuals involved or through third parties.

1. Personal Data Controller

By creating a user account and using it as a Brand User or as a Point of Sales users, or by providing us information through our website www.dimboo.io, the responsible for the processing of your personal data is the company DIMBOO APP, S.L.U, officially registered in accordance with Spanish laws, having its principal office located at Paseo de la Habana 87, 28036, Madrid and bearing the VAT ESB70726005, hereinafter “Dimboo”.

Should there be a need for details or clarifications, Dimboo, in its dual capacity as the data controller and data protection officer, welcomes inquiries at hello@dimboo.io.

2. Information regarding the Personal Data Controller

2.1 Processing of personal data through Dimboo

Dimboo, as Data Controller, as it decides how and for what the data is processed, will process the following data:

If you create an account in Dimboo as a Brand Manager user:

Dimboo administrator will create an account with your email and personal data. Dimboo will send you an email to the address provided for you to verify your account and privately set a password that will be stored encrypted. Email and password will be your access credentials to Dimboo.

If you create an account in Dimboo as a Point of Sales user:

We will request an email, some personal data (name, surname, phone number), the name of your establishment and a private password that will be stored encrypted. Email and password will be your access credentials to Dimboo.

If you link your social media as a Brand Manager or as a Point of Sales user:

If you link your brand social media accounts to Dimboo, you must go into de social media menu, click on the social media to connect and accept the permissions that you grant Dimboo through it, which will allow the Dimboo to access different features depending on the social media selected. This is mandatory to be able to manage your own brand social media directly from Dimboo.
For that purpose, Dimboo requests permission to access the APIs provided by social networks and other information providers such as, Meta API, TikTok API and more. Additional information is available on the social media Privacy Policy.
Dimboo will access the information allowed by the Brand Manager through the authorized APIs. This information will be processed solely for the benefit of the social media management of the Brand Manager and will not be shared with third parties.
The Brand Manager will be able to revoke those permissions at any moment from its Dimboo profile.
Those permission may vary depending on the social media linked, and are, but not limited to:

Accessing statistics
Enable content posting
Accessing general profile data
Accessing genera publications data
Accessing comments data

If you request information from www.dimboo.io:

If you fill the contact forms, we will ask for your name, email, company and telephone number.

If you request a Demo from www.dimboo.io:

If you request a Demo, we will ask for your name, email, company and telephone number.

2.2 Data processing as Data Processor

When you set up an account as a Brand Manager on Dimboo to connect with your Points of Sales and begin disseminating scheduled content, Dimboo acts as a Data Processor in accordance with data protection regulations. This designation arises because, as a Brand Manager, you have access to personal data on behalf of the Points of Sales you oversee. In this scenario, you are the Data Controller since you determine the processing and purpose of the Points of Sales data through the Dimboo platform.

For both Points of Sales and Brand Managers who create an account and aim to link one or more social media accounts to Dimboo, it is necessary to accept the permissions required for each social media platform. These permissions may differ across platforms. Granting these permissions allows Dimboo to manage your social media account(s), including creating and managing content, posts, comments, and statistics. It also includes managing advertisements and their statistical data. The purpose of accessing these functionalities is to provide the services offered by Dimboo, which includes features such as scheduling semi-automated posts from the Brand Manager to the Points of Sales, analyzing impact and evolution metrics, planning and scheduling on social media, and generating automatic performance reports, among other capabilities.

It's important to carefully review and understand the permissions you grant to Dimboo, as they involve significant access to your social media accounts and associated data. This understanding helps ensure that you're aware of how your data and your Points of Sales' data is being used and managed on the platform.

2.3 Dimboo obligations as Data Processor

Dimboo and its staff are committed to several key principles and actions regarding personal data:

Purpose of Data Usage: Personal data obtained via Dimboo is to be used strictly for service purposes and not for Dimboo's own unrelated purposes.
Data Processing: The data should be processed in line with the platform's features.
Compliance with GDPR: Users will be informed promptly if any potential use of the platform is believed to violate GDPR or other EU data protection laws.
Third-Party Communication: Data will not be shared with third parties without explicit user authorization, except in legally permissible situations.
Security Issues: Any personal data security issues will be communicated to the users.
International Data Transfer: Users will be informed if there's a need to transfer personal data to third countries or international organizations under EU legislation.
Confidentiality: Confidentiality of personal data must be maintained during and after the service provision.
Security Measures: Ensure adherence to appropriate data security measures and confidentiality.
Training: Staff authorized to process personal data will receive necessary training in data protection.
Assistance in Data Rights: Assist users in requests related to data rectification, deletion, and processing limitation.
Notification of Breaches: Users will be notified within 72 hours in case of personal data security breaches, along with detailed information about the breach.
Support in Consultations: Provide support in consultations with authorities if needed.
Audit and Compliance Assistance: Make necessary information accessible for compliance and audit purposes.
Implement Security Mechanisms: To ensure confidentiality, integrity, availability, and resilience of data processing systems and services.
Regular Evaluation: Regular assessment of the effectiveness of technical and organizational measures for data security.
Data Pseudonymization and Encryption: Implement pseudonymization and encryption of personal data where applicable.

3. Purpose of processing Personal Data and legal basis of the process

3.1 Brand Manager and Point of Sales user personal data in Dimboo

Your data is collected by Dimboo in your role as a Brand Manager and/or Point of Sales user to ensure the full delivery of the contracted service. Additionally, with your consent obtained at the time of data collection or subsequently, Dimboo may process your personal data for the purpose of sending you commercial communications related to Dimboo's services.

It's important to note that you always have the right to request that Dimboo stop sending you these commercial communications.

The legal basis for processing your data for service provision, billing management, payment, and sending Dimboo-related notifications is the execution of a contract or pre-contractual arrangements in which you, as an Interested Party, are involved. As for sending commercial communications about Dimboo's services, the legal foundation is Dimboo's legitimate interest in direct marketing.

3.2 Contacts and information requests around data

When you request information through any of the channels provided by Dimboo (contact forms, contact emails, etc.), we will collect identification data such as your name, surname, telephone number, and email. This is done to respond to your request, based on Dimboo's legitimate interest.

Additionally, Dimboo will send commercial communications to you only if you have given your consent in a clear, informed, voluntary, and specific manner. This consent is based on a legal foundation and is typically indicated through a clear affirmative action, such as ticking a checkbox.

4. Data Retention Period

The personal data you provide will be retained as long as there is a mutual interest in maintaining the data processing and for the period during which liabilities could arise from the services provided to you, the Interested Party.

This period includes:

6 years for retaining accounting books, invoices, etc., as per Article 30 of the Commercial Code.
5 years for the initiation of personal actions without a specific term, according to Article 1964 of the Civil Code.
4 years for tax obligations, in line with Articles 66 and subsequent of the General Tax Law, among others.

Once the data is no longer necessary for these purposes, it will be eliminated using appropriate security measures. These measures are designed to ensure either the pseudonymization of the data or its complete destruction, thereby safeguarding your privacy and data integrity.

5. Data Receptors

The term "receptor" is defined as any natural or legal person, public authority, service, or other entity that receives personal data, regardless of whether they are considered a third party.

Dimboo will not share your data with any third parties outside of its organization unless it is legally required to do so or if you have explicitly given your permission for such sharing.

6. Rights

As a Data Subject under data protection laws, you are entitled to several rights. These include, but are not limited to, the following:

Withdrawal of Consent: You can revoke your consent for data processing at any time, especially if consent is the basis for processing.
Access: You are entitled to view the personal data Dimboo holds about you.
Correction: If Dimboo has any inaccurate data about you, you have the right to have it corrected.
Deletion: You can ask for your data to be deleted, particularly if it's no longer needed for the reasons it was collected.
Restriction: In specific situations, you can request that the processing of your data be limited. Dimboo will then keep the data only for legal claims.
Objection: Depending on your individual circumstances, you have the right to object to the processing of your data. Dimboo must comply unless there are compelling reasons or legal claims.
Data Portability: In certain scenarios, you can request your data in a structured, commonly used, and machine-readable format, and have it transferred to another entity.

To exercise your rights regarding your personal data, you can use any method that ensures proof of sending and receipt. Make sure to clearly articulate your intentions and include a copy of your ID or any other document that verifies your identity. You can do this through the provided email hello@dimboo.io or by filling the contact form in www.dimboo.io.

7. International Data Transfers and Security

The transfer of personal data internationally typically involves moving data from servers in the EU to recipients in countries outside the European Economic Area. However, Dimboo confirms that it does not engage in such international data transfers, maintaining all data on servers located within the EU.

To ensure the protection of the personal data of Interested Parties, Dimboo reports that it has implemented all necessary technical and organizational measures to secure the personal data provided. These measures are designed to prevent any alteration, loss, unauthorized processing, or access to the data, in line with regulatory requirements. However, it's acknowledged that while these precautions are thorough, absolute security cannot be guaranteed.

8. Updating of personal data, Confidentiality and Cookies

Interested Parties have the option to update or amend their personal data through their user profile or by reaching out to Dimboo at hello@dimboo.io, ensuring that personal data is kept current.

Furthermore, it is emphasized that all personal data of Interested Parties is processed with the utmost diligence and confidentiality by the personnel involved in any stage of the data processing.

Regarding the use of cookies, Dimboo web interface follows its stated Cookies Policy, ensuring compliance and transparency in its digital operations, and accessible in Dimboo website.

9. Update and Modifications of the Terms

Dimboo reserves the right to update its privacy policy at any time, with the latest version always being accessible as presented here. The current privacy policy remains effective until it is superseded by a new version, which will also be duly published.

Dimboo Privacy Policy

Dimboo Privacy Policy