Who is responsible for the processing of your personal data?


Commercial name: Bone & White

CIF: B54471982

Headquarters: City of Lugo 18, 15004, A Coruña, Spain.

Telephone: 981 307 608

Contact email:

For what purpose will we treat your personal data?

Your personal data will be used in order to maintain relationships of any kind with our customers as a result of the contractual relationship we maintain when making an online purchase, especially that related to economic, administrative and fiscal management, quality, and personalized attention. necessary to comply with said contractual relationship.

How long will we keep your personal data?

Your personal data will be kept for the duration of the established relationship and once it ends, they will be kept based on the legal conservation periods in economic and fiscal matters, which based on the type of document can range between a minimum of 4 years and a maximum of 10 years.

What is the legitimacy for the processing of your personal data?

The legal basis for the processing of your personal data is: The identifying and contact data necessary for the development of the contractual activity established with customers, whose purpose is to establish relationships of any kind with them in order to give content to that relationship and in Special obligations for billing, collections and payments, accounting and taxation are based on the legitimate interest of the responsible party in accordance with art. 6.1 f) of the GDPR and article 19 of the LOPD project.

As a consequence of the contractual relationship established with clients, the person in charge has legal obligations in economic and fiscal matters derived from the following main regulations and which have an impact on the conservation periods:

Commercial Code of 1885

Corporate Tax Law (RDL 4/2004, of March 5) art.133.1

Tax rules

General Tax Law Law 58/2003

Article 24 of the RD Leg. 1/2011 of July 1, approving the consolidated text of the Audit Law.

Royal Decree 1514/2007, of November 16, which approves the General Accounting Plan.

Is there an obligation to provide this personal data?

Contractual Requirement

What are the consequences of not doing so?

Impossibility of making the requested purchase.

Will we transfer your personal data?

Recipients or categories of recipients.

TAX ADMINISTRATION For the fulfillment of fiscal obligations.

BANKS SAVINGS BOXES AND RURAL BOXES for the collection of purchased products.

What rights do you have when you provide us with your personal data?

Right of Access: You have the right to know if your data is being processed and to receive that information in writing through the requested means.

Right of Rectification: You have the right to request the rectification of your data if they are inaccurate or incomplete.

You have the right to request the deletion of your data, however, you should keep in mind that the right of deletion is limited when there is a legal obligation to retain or block your data.

In certain circumstances, the interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims, the protection of third parties or for reasons of important public interest.

In certain circumstances and for reasons related to your particular situation, you may object to the processing of your data. The person responsible will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.

When the processing of your data is based on consent or is necessary for the execution of a contract or pre-contract and is carried out by automated means, you will have the right to the portability of your data, that is, to be delivered in a structured format , for common use and mechanical reading, even to refer them to a new person in charge.

Any interested party may submit a claim to the competent Data Protection Authority, especially when they have not obtained satisfaction in the exercise of their rights and the way to contact them would be to send a letter to the Spanish Agency for the Protection of Data Protection. Personal Data in C / Jorge Juan No. 6, 28001 Madrid or through its electronic headquarters at

The models for requesting the exercise of your rights are found in the Privacy Policy / rights section of our website, you can also request them in writing to the address of the person in charge and you can even obtain them at the electronic headquarters of the Control Authority in and must be sent to the person's postal or electronic address.