Aface Privacy Policy

For the provisions of this privacy policy, the following terms will have the meaning attributed below:

Aface: Tool for managing accounts and advertising campaigns on social networks, with access to different features and/or services depending on the subscription plan hired and provided through the website
https://aface.com/ and/or the application of Aface.

AFACE COMPANY: Aface's owner company and whose data is listed below.

Administrator: Professional or company (Community Managers, Social Media Managers, advertising or digital marketing agencies, etc.) that manages third-party accounts or their own accounts on social networks using Aface.

Brand: Natural or legal person who hires the services of the Administrator for the management of their accounts on social networks through Aface.

1. Information about the personal data controller

If you register as an Administrator of Aface to manage social media accounts of the Brands, or if you provide us with your personal data directly in any other way, the data controller for the processing of your personal data is AFACE COMPANY.

AFACE COMPANY can be contacted directly and effectively at the email address: help@aface.com.

You can contact AFACE COMPANY's Data Protection Officer by sending an e-mail to: dpd@aface.com.

2. Processing of personal data

AFACE COMPANY, as Data Controller, as it decides how and for what the data is processed, will process the following data:

2.1. On the occasion of your request to register in Aface as Administrator

a) If you register with your email: we will ask for your email and a password that will be stored encrypted, and that will be your access credentials to Aface. In that case, we will send you an email to the address provided for you to verify it.

b) If you register through social logins: you can register using your account on the social network whose social login is active in Aface for this purpose. In that case, the corresponding social network will provide us with your email, your profile picture, and your name with a Unique Identifier associated with your Administrator profile in Aface.

To do this, you must log into that social network and accept the permissions that you grant Aface through it, which will allow the Aface application to access different features depending on the social network in question for the purpose. To provide the hired service to manage your accounts on social networks and the advertising campaigns you carry out.

Examples of such permissions are: managing ads, accessing ads and their statistics, managing your account, accessing your profile and the publications you make, managing comments, accessing direct messages, accessing statistics, creating and managing content, etc.

Permissions may vary depending on the social network with which you register through the corresponding social login.

To hire paid services, we will ask you for your name and last name and the data related to the means of payment used.

2.2. On the occasion of the information request

If you contact us to request information, we will ask for your name, email, and telephone number.

2.3. To leave a comment on the Aface blog

If you want to leave a comment on our blog, we will ask for your name and email.

2.4. To register for a webinar

If you register for a webinar we will ask for your name and email address.

2.5. On the occasion of your request to participate in the affiliate program

We will use your registration data as a Aface user and those necessary to make the corresponding payments.

3. Purpose of the processing of personal data and legal basis of the process

The purposes of processing your personal data are listed below as "Interested Party", understood as a natural person who provides information to AFACE COMPANY as the Data Controller that identifies or makes you identifiable, as well as the legal basis that legitimizes the data process.

3.1. Administrator data in Aface

We collect your data as Administrator in Aface to enable the provision of the hired service and send notifications related to the service and manage the billing and payment of the service.

We may also process your personal data to send commercial communications about AFACE COMPANY services if you have not objected to it, both at the time of collecting your data and at any later time.

We remind you that you have the power to oppose the sending of commercial communications at any time.

The legal basis for the processing of your data for the provision of the service, billing management, payment, and sending of notifications about the service is the execution of a contract or pre-contract in which you are a party as an Interested Party.

The legal basis for sending commercial communications about AFACE COMPANY services, if you have hired any of our services, is the legitimate interest of AFACE COMPANY for direct marketing purposes.

3.2. Process of contact data

In case you request information through any of the means that Aface makes available to you (chat, forms, etc.), identifying data such as your name, telephone, and/or email will be collected in order to meet your request, based on the legitimate interest of AFACE COMPANY.

We will send you commercial communications, as long as you have consented to said purpose in an informed, free, unequivocal, and specific manner on the legal basis of the provision of that consent, and through an explicit affirmative action, such as checking a checkbox.

3.3. Data processing when submitting a Aface blog comment

If you want to leave a comment on any of the Aface blog posts, we will collect your data (your name, email, and website) to moderate and publish your comments with your name. It is not mandatory to put your website. Under no circumstance will we publish your email in your comment.

The legal basis for such data processing is the legitimate interest of AFACE COMPANY to meet your request to publish your comment on the blog.

3.4. Data processing to attend a webinar

In case you have registered for a webinar we will process your data to manage the registration and the legal basis for such treatment is the legitimate interest of AFACE COMPANY to meet your request.

We will send you commercial communications, provided that you have consented to this purpose in an informed, free, unambiguous and specific way on the legal basis of the provision of such consent, and by a clear affirmative action, such as checking a box or checkbox.

3.5. Processing of data for the affiliate program

If you have applied to participate in the affiliate program, we will process your data to manage your affiliate status.

The legal basis for such processing is the execution of a contract or pre-contract to which you as a Stakeholder are a party.

4. Data retention period

The personal data provided will be kept as long as there is a mutual interest to maintain the data process and during the period for which responsibilities may arise for the services provided to the Interested Party (6 years in terms of accounting books, invoices, etc., according to article 30 of the Commercial Code; 5 years to exercise personal actions without a particular term according to article 1964 Civil Code; 4 years for tax obligations according to articles 66 et seq. of the General Tax Law, etc.).

When it is no longer necessary for such purposes, they will be deleted with adequate security measures to guarantee the pseudonymization of the data or the total destruction of the same.

5. Recipients

The recipient is understood to be the natural or legal person, public authority, service, or other body to which personal data is communicated, whether or not it is a third party.

AFACE COMPANY is a part of the team.blue Group and has a joint controllership with team.blue N.V. The team.blue Group, led by team.blue N.V., consisting of several brands and subsidiaries, can improve coordination and resource allocation by sharing data internally. This allows for more efficient collaboration on product, campaign, and customer service improvements. Customer data such as contact, user, billing, and purchase information may be shared with team.blue N.V for marketing statistics, internal administration, and reporting purposes, but only to the extent necessary for the intended use and with proper protective measures in place to prevent unauthorized access or disclosure.

Your data will not be communicated to any other third party outside of AFACE COMPANY unless there is an adequate legal basis applicable.

Data processors: There are data processors, understood as entities that process personal data that are the responsibility of AFACE COMPANY, following their instructions, as service providers necessary for the provision of the service requested by the Interested Party, with whom AFACE COMPANY has signed a data process order contract, under the provisions of the applicable regulations on data protection. The data processors will, for example, provide fraud prevention services, newsletter services, our customer relationship management system, our communication platforms, etc.

6. International Transfers

International data transfers involve a flow of personal data from Spanish territory to recipients established in countries outside the European Economic Area (the countries of the European Union plus Liechtenstein, Iceland, and Norway).

AFACE COMPANY does not carry out international data transfers in the process.

AFACE COMPANY stores all data on servers within the European Union.

7. Rights

You are empowered as an Interested Party to exercise the following rights that the data protection regulations recognize, in accordance with the provisions of the same:

• Right to revoke at any time the consent given for the process of said data, when the basis of legitimation of the data process is based on that consent.
• Right of ACCESS to personal data processed by AFACE COMPANY.
• Right to request the RECTIFICATION of the inaccurate data processed by AFACE COMPANY.
• Right to request the DELETE of the data when, among other reasons, the data is no longer necessary for the purposes that were collected by AFACE COMPANY.
• In certain circumstances, the LIMITATION OF THE DATA PROCESS may be requested, in which case AFACE COMPANY will only keep them for the exercise or defense of claims.
• In certain circumstances and for reasons related to your particular situation as an Interested Party, you may exercise the right of OPPOSITION to the data processing. In this case, AFACE COMPANY will stop processing the data, except for compelling legitimate reasons or the exercise or defense of possible claims.
• In certain circumstances and for reasons related to your particular situation as an Interested Party, you may request the right to PORTABILITY of the data. It is a complementary right to access since it allows obtaining the data provided to AFACE COMPANY in a structured, commonly used, and machine-readable format, being able to be transmitted directly to another entity upon request of the Interested Party.

You will be able to exercise such rights by any means that leave proof of its sending and receipt, clearly expressing your will in this regard and accompanying a copy of the ID and/or any other documentation proving your identity, by going to the email or postal address above.

In addition, if you consider any of your data protection rights violated, you are empowered to file a claim with the Brazilian National Data Protection Authority (ANPD), located at Esplanada dos Ministérios, Bloco C, 2º andar, CEP 70297-400, Brasília/DF https://www.gov.br/anpd/ or through the electronic service channel of the ANPD: https://www.gov.br/anpd/pt-br/canais_atendimento. For users in other countries, you may also contact your local data protection authority.

8. Security

In order to safeguard the security of the personal data of the Interested Parties, it is reported that AFACE COMPANY has adopted all the technical and organizational measures necessary to guarantee the security of the personal data supplied.

All this to avoid its alteration, loss, and/or unauthorized process or access, as required by the regulations, although absolute security does not exist.

9. Updating of personal data

For the updated maintenance of the personal data of the Interested Party, he/she has the possibility of modifying or rectifying them through his/her user profile or by contacting AFACE COMPANY.

10. Confidentiality

It is also reported that the data of the Interested Parties will be processed with the utmost care and confidentiality by all personnel involved in any of the data process phases.

11. Cookies

At present, AFACE COMPANY in its app version does not use data storage and recovery devices on users' devices that are not of a technical nature for the sole purpose of transmitting a communication over a network of electronic communications or, insofar as it is strictly necessary, for the provision of the Aface service expressly requested by the interested party.

In the event that AFACE COMPANY is to use these data storage and retrieval devices in the future, clear and complete information will be provided about them, and the consent of the Interested Party will be obtained through the use of the appropriate parameters of the Aface application.

AFACE COMPANY, in the web version of Aface, uses cookies in accordance with the provisions of the Cookies Policy.