Privacy Policy
This Privacy Policy provides information with respect to Ortho-Tain, Inc., doing business as
Bbite ® and our website, www.bbite.com, as required by Article 13 of the Regulation (EU)
2016/679 and the E-Privacy Directive, 2009/136/EC, and subsequent amendments.
​
I. DATA CONTROLLER
The Data Controller (the person who decides the purposes and methods of processing your
personal data) is identified according to the definition of ‘entrepreneurial group” pursuant to art.
41.19 EU Reg. 679/2016, in the person of the parent company Ortho-Tain, Inc. (Company
No.71379). The Data Controller is the party responsible for the legitimate and proper use of your
Personal Data. You may contact the Data Controller at:
​
Data Protection Officer
Ortho-Tain, Inc.
Carr 861, K.M.5.0 Barrio Pina
Toa Alta, Puerto Rico 00953
800-541-6612
dataprotectionofficer@bbite.com
​
This Privacy Policy informs you with regard to: (a) the Personal Data collected by us; (b) the
Permitted or Intended Use of Personal Data; (c) with whom your Personal Data is or may be
shared; (d) how inaccurate Personal Data may be corrected; (e) how your Personal Data is
secured; (f) how policy changes will be communicated; and (g) how to address concerns over
misuse of Personal Data.
​
II. PRIVACY POLICY – CUSTOMER PRIVACY POLICY
Intended Use of Personal Data. Your Personal Data is collected and processed for the intended
purposes listed hereunder, together with the applicable legal basis, as follows:
Processing: Sale
Purpose: For Promotional Activities
Processed Data: Name, address, other personally identifiable information, including contact details, phone number, e-mail, etc.
Legal Basis: Legitimate Interest of Controller to Promote Goods and/or Services
Duration: Ten (10) years from the performance year.
Recipients: Your data will not be disclosed to any recipient.
Purpose: For Supply of Goods and Services
Processed Data: Name, address, other personally identifiable information, including
contact details, phone number, e-mail, etc.
Legal Basis: Legitimate Interest of Controller to Promote Goods and/or Services
Duration: Ten (10) years from the performance year.
Recipients: Your data will not be disclosed to any recipient.
Purpose: For Customer Relationship Management
Processed Data: Tax code and other personal information; contact details, including telephone number, e-mail, etc.
Legal Basis: Contract
Duration: Ten (10) years from the termination year of the last contract.
Recipients: Your data may be disclosed to consultants and freelance professionals as
natural persons or associated; banks and credit institutions; companies and businesses.
​
Processing: Reception
Purpose: Tracking of the people who enter the company premise
Processed Data: Name, address or other personally identifiable information; contact details
(telephone number, e-mail, etc.) Stated profession.
Legal Basis: Legitimate interest of the controller
Duration: 1 year from the year of data acquisition
Recipients: Your data will not be disclosed to any recipient.
Purpose: Filtering of telephone calls
Processed Data: Name, address, other personally identifiable information, including
contact details, phone number, e-mail, etc.
Legal Basis: Legitimate interest of the controller
Duration: 1 year from the year of data acquisition
Recipients: Your data will not be disclosed to any recipient.
Processing: Accounting
Purpose: Keeping of financing records
Processed Data: Tax code and other personal identifiable numbers; name, address or other
personally identifiable information; Economic, commercial, financial
insurance activities.
Legal Basis: Legal obligation
Duration: 10 years from the relevant accounting period
Recipients: Your data may be disclosed to consultants and/or freelance professionals
as natural persons or associated.
Purpose: Tax obligations
Processed Data: Tax code and other personal identifiable numbers; name, address or other
personally identifiable information; Economic, commercial, financial
insurance activities.
Legal Basis: Legal obligation
Duration: 10 years from the relevant accounting period
Recipients: Your data may be disclosed to consultants and/or freelance professionals
as natural persons or associated.
Processing: Billing and Transport Document
Purpose: Delivery of goods.
Processed Data: Name, address or other personally identifiable information.
Legal Basis: Contract
Duration: Ten (10) years from the performance year.
Recipients: Your data will not be disclosed to any recipient.
Processing: Management Control
Purpose: Internal Control System
Processed Data: Tax code and other personal identification numbers; name, address or
other personally identifiable information; economic, commercial,
financial, and insurance activities; work (present, previously occupation,
curriculum vitae, etc.), position within company.
Legal Basis: Legitimate Interest of the controller in the analytical verification of economic and financial management
Duration: Ten (10) years from the performance year.
Recipients: Your data will not be disclosed to any recipient.
Processing: Quality Control​
Purpose: Quality control of goods and services
Processed Data: Tax code and other personal identification numbers; name, address or
other personally identifiable information; product quality certificates/
Legal Basis: Legitimate Interest of the controller to check the provided and received
goods and services.
Duration: Ten (10) years from the performance year.
Recipients: You data may be disclosed to health organizations, medical and
paramedical staff and/or other public authorities where required by law.
Processing: Customer Service
Purpose: Measurement of customer satisfaction
Processed Data: Name, address or other personally identifiable information; tax code and
other personal identification numbers; data on behavior, users’, consumers’, contributors’, etc., profiles; contact details (telephone number, e-mail, etc.);
Legal Basis: Contract
Duration: Ten (10) years from the termination year of the last contract.
Recipients: Your data will not be disclosed to any recipient.
Purpose: Technical assistance to customers
Processed Data: Name, address or other personally identifiable information; tax code and
other personal identification numbers; data on behavior, users’,
consumers’, contributors’, etc., profiles; contact details (telephone
number, e-mail, etc.);
Legal Basis: Contract
Duration: Ten (10) years from the termination year of the last contract.
Recipients: Your data will not be disclosed to any recipient.
III. PRIVACY POLICY FOR MARKETING INITIATIVES​
​
Processing: Marketing and Assignment to a Partner
Purpose: Marketing (market analysis and surveys)
Processed Data: Tax code and other personal identification numbers; Name, address or
other personally identifiable information; Economic, commercial,
financial, insurance activities; contact details (telephone number, e-mail, etc.);
Legal Basis: Consent
Duration: Until withdrawal of consent. The data will be stored for 10 years from the year of withdrawal
Recipients: Your data may be disclosed to social security and welfare entities, banking institutions, freelance professionals and associated companies and businesses. Disclosure to some of these entities may be carried out only in case of a contractual and/or legal obligation.
Purpose: Sending of information and/or advertising material also via telephone or internet;​
Processed Data: Tax code and other personal identification numbers; Name, address or
other personally identifiable information; Economic, commercial,
financial, insurance activities; contact details (telephone number, e-mail, etc.);
Legal Basis: Consent
Duration: Until withdrawal of consent. The data will be stored for 10 years from the year of withdrawal
Recipients: Your data may be disclosed to social security and welfare entities, banking
institutions, freelance professionals and associated companies and
businesses. Disclosure to some of these entities may be carried out only in
case of a contractual and/or legal obligation.
Processing: Online Publication
Purpose: Online publication in a specific special area inside portals related to the controller of the customer’s contact data;
Processed Data: Name, tax code, address and other contact details.
Legal Basis: Consent
Duration: Until withdrawal of consent. The data will be stored for 10 years from the year of withdrawal
Recipients: Your data will be subject to dissemination.
Processing: Video surveillance
Purpose: Protection of company assets;
Processed Data: Images; video recordings;
Legal Basis: Legitimate interest of the controller;
Duration: Seven (7) days.
Recipients: Your data will not be disclosed to any recipient, except in case of need.
Purpose: Safety of Persons
Processed Data: Images; video recordings;
Legal Basis: Legitimate interest of the controller;
Duration: Seven (7) days.
Recipients: Your data will not be disclosed to any recipient, except in case of need.
Purpose: Perimeter security against trespassing and damage to the property;
Processed Data: Images; video recordings;
Legal Basis: Legitimate interest of the controller;
Duration: Seven (7) days.
Recipients: Your data will not be disclosed to any recipient, except in case of need.
Processing: Activities planning and checking
Purpose: Activities planning and checking;
Processed Data: Personal identification number; name, address or any other identification element; Economic, commercial, financial, insurance activities;
Legal Basis: Legitimate interest of the controller;
Duration: Ten (10) years from the performance year.
Recipients: Your data will not be disclosed to any recipient.
In order to assure that your data is processed in a manner that is fair and transparent, please note
that: (a) except for the purposes based on Consent, the provision of your data is compulsory,
otherwise it will not be possible to supply the goods or deliver the requested services; (b) you
have the right to request that the Data Controller be granted access to your personal data and
rectification or erasure of the same or the restriction of the processing that concerns you or to
object to their processing; (c) if you have given your consent to one or more specific uses, then
you have the right to withdraw such consent at any time; (d) you have the right to lodge a
complaint with the local authorities in your country of origin (U.K. and E.U. only); and (e) the
data will be processed by full automated, semi-automated and non-automated means. Where
required by this Privacy Policy you have the legal obligation to provide your data; otherwise you
are subject to sanctions as permitted by law.
IV. PRIVACY POLICY FOR PARTICIPATION IN COURSES AND EVENTS
Intended Use of Personal Data. Your Personal Data is collected and processed for the intended
purposes listed hereunder, together with the applicable legal basis, as follows:
Processing: Accounting
Purpose: Tax Obligations
Processed Data: Tax code and other personal identification numbers; name, address or
other personally identifiable information, including contact details, phone number, e-mail, etc.
Legal Basis: Legal obligation
Duration: Ten (10) years from the relevant accounting period.
Recipients: Your data may be disclosed to consultants and/or freelance professionals as natural persons or associated.
Purpose: Customer Relationship Management
Processed Data: Tax code and other personal identification numbers; Name, address or
other personally identifiable information; Contact details (telephone
number, e-mail, etc.);
Legal Basis: Contract
Duration: Ten (10) years from the termination year of the last contract.
Recipients: Your data may be disclosed to consultants and freelance professionals as
natural persons or associated; Banks and credit institutions; companies and
businesses.
Purpose: Marketing (market analysis and surveys)
Processed Data: Tax code and other personal identification numbers; Name, address or other personally identifiable information; Economic, commercial, financial, insurance activities; contact details (telephone number, e-mail, etc.);
Legal Basis: Consent
Duration: Until withdrawal of consent. The data will be stored for 10 years from the year of withdrawal.
Recipients: Your data may be disclosed to social security and welfare entities, banking
institutions, freelance professionals and associated companies and
businesses. Disclosure to some of these entities may be carried out only in
case of a contractual and/or legal obligation.
Purpose: Sending of information and/or advertising material also via telephone or internet
Processed Data: Tax code and other personal identification numbers; Name, address or
other personally identifiable information; Economic, commercial,
financial, insurance activities; contact details (telephone number, e-mail, etc.);
Legal Basis: Consent
Duration: Until withdrawal of consent. The data will be stored for 10 years from the year of withdrawal.
Recipients: Your data may be disclosed to social security and welfare entities, banking
institutions, freelance professionals and associated companies and businesses. Disclosure to some of these entities may be carried out only in case of a contractual and/or legal obligation.
Purpose: Video recordings and photographs of course participants or of participants in events organized by the Data Controller
Processed Data: Photographs, video recordings and other multimedia content;
Legal Basis: Consent
Duration: Ten (10) years from the year in which the course or event is held.
Recipients: Your data may be published over the internet, on Ortho-Tain, Inc’s corporate website, on social networks linked to Ortho-Tain, Inc. or on video platforms (such as YouTube, Vimeo, etc.)
V. PRIVACY POLICY FOR STAFF SEARCH
Processing: Staff Search
Purpose: Search of the staff to be hired by the Company
Processed Data: Tax code and other personal identification number; Name, address or
other personally identifiable information; Work [present, previous
occupation, curriculum vitae, etc.]; Education and knowledge;
Professional certifications; E-mail address; Province of residence; stated
profession; Topics of interest; Gender; Work history.
Legal Basis: Pre-contractual
Duration: Two (2) years from the year of acquisition.
Recipients: Your data could be disclosed to Ortho-Tain’s subsidiaries; affiliates.
Processing: Staff Selection
Purpose: Staff recruitment and selection
Processed Data: Tax code and other personal identification number; Name, address or
other personally identifiable information; Work [present, previous
occupation, curriculum vitae, etc.]; Education and knowledge; Professional certifications; E-mail address; Province of residence; stated
profession; Topics of interest; Gender; Work history.
Legal Basis: Pre-contractual
Duration: Two (2) years from the year of acquisitions.
Recipients: Your data could be disclosed to Ortho-Tain’s subsidiaries; affiliates.
Processing: Activity Planning and control
Purpose: Activity planning and control
Processed Data: Tax code and other personal identification number; Full name, Surname,
address or other personally identifiable information; Economic, commercial, financial, insurance activities; Role covered in the company; professional quality certificates; product quality certificates;
Legal Basis: Legitimate interest of the Owner.
Duration: Ten (10) years from the year of data acquisition;
Recipients: Your data could be disclosed to Ortho-Tain’s subsidiaries; affiliates.
Processing: Staff Evaluation
Purpose: Staff Performance Evaluation;
Processed Data: Tax code and other personal identification number; Name, address or
other personally identifiable information; Work [present, previous
occupation, curriculum vitae, etc.]; Education and knowledge; Role covered in the company.
Legal Basis: Contractual
Duration: Ten (10) years from the year of termination of the contract;
Recipients: Your data could be disclosed to Ortho-Tain’s subsidiaries; affiliates.
Processing: Generic Training
Purpose: Staff training;
Processed Data: Tax code and other personal identification number; Name, address or
other personally identifiable information; Work [present, previous
occupation, curriculum vitae, etc.]; Education and knowledge; Role
covered in the company; Fitness for Work; Professional Quality Certificates;
Legal Basis: Legitimate Interests of the owner.
Duration: Ten (10) years from the year of termination of the contract.
Recipients: Individual or associated consultants and freelancers (consultants or professionals who practice specific training activities), Companies and enterprises (companies or organizations that practice specific training activities).
Processing: Video Surveillance
Purpose: Search of the staff to be hired by the Company;
Processed Data: Tax code and other personal identification number; Name, address or
other personally identifiable information; Work [present, previous
occupation, curriculum vitae, etc.]; Education and knowledge;
Professional certifications; E-mail address; Province of residence; stated
profession; Topics of interest; Gender; Work history.
Legal Basis: Pre-contractual
Duration: Two (2) years from the year of acquisition and, in the case of subsequent employment by company, during the term of employment and for such further period of time as required by
applicable law.
Recipients: Your data could be disclosed to Ortho-Tain’s subsidiaries; affiliates.
Processing: Video surveillance
Purpose: Heritage protection;
Processed Data: Images; video recordings;
Legal Basis: Legitimate interest of the owner;
Duration: Seven (7) days.
Recipients: Your data will not be disclosed to any recipient, except in case of
necessity.
Purpose: Safety of People
Processed Data: Images; video recordings;
Legal Basis: Legitimate interest of the owner;
Duration: Seven (7) days.
Recipients: Your data will not be disclosed to any recipient, except in case of necessity.
Purpose: Perimeter security, against intrusions and property damage;
Processed Data: Images; video recordings;
Legal Basis: Legitimate interest of the owner;
Duration: Seven (7) days.
Recipients: Your data will not be disclosed to any recipient, except in case of necessity.
Duration: In addition to the time necessary for the maturity of the statute of limitations in relation to mutual rights.
VI. DATA COMMUNICATION
​
Your Personal Data may be communicated exclusively for technical and operational needs
strictly connected to the aforementioned purposes, to subject who process the data on behalf of
the owner, appointed as data controllers pursuant to art.28 of EU Reg. 2016/679, banks and
financial institutions, public bodies and administrations or public authorities with respect to
which there is a legal obligation to communicate. Subject to your consent, for the stated purpose,
some of your data may be published on the internet, on the institutional website of Ortho-Tain,
Inc. (d/b/a Bbite) or video platforms (e.g., YouTube, Vimeo, etc.).
VII. TRANSFER OF EXTRA-EU DATA
​
The processing of Personal Data (e.g., storage, archiving and conservation of data on its servers
or in the cloud) will be limited to areas of circulation and processing of personal data in countries
belonging to the European Union, with an express prohibition on transferring them to Non-EU
countries which do not guarantee an adequate level of protection as provided for by EU
Regulation 2016/679 (third country deemed adequate by the European Commission, group BCR,
model contractual clauses, consensus of interested parties, etc.).
VIII. YOUR RIGHTS
As an interested party, you have the right, according to the provisions of Art. 1 and EU Reg.
2016/679 to request that the Data Controller be granted access to your Personal Data, as well as
their rectification, cancellation, erasure or oblivion. You also have the right to request data
portability, limitation of processing or to object to the same. For processing based on consent, the
interested party has the right to revoke his/her consent at any time, without prejudice to the
lawfulness of the processing based on the consent given before the revocation. To exercise your
rights or to request additional information, you can contact the owner, through the Data
Protection Officer, via the contact information provided above. Lastly, you can lodge a
complaint with the local authorities in your country of origin (U.K. and E.U. only).
IX. CHANGES TO THIS PRIVACY POLICY
​
We reserve the right to update our Privacy Policy. In such event we will communicate the
changes as appropriate and we will update the data in this Privacy Policy. Therefore, we
recommend periodically consulting our information on the processing of personal data, and also
requesting a copy from the Data Controller.
Last updated Revision: 9.10.25