{"id":2013,"date":"2023-09-28T10:48:11","date_gmt":"2023-09-28T08:48:11","guid":{"rendered":"https:\/\/fincabiniagual.aplicacionesinteligentes.es\/privacy-policy\/"},"modified":"2024-10-11T11:53:29","modified_gmt":"2024-10-11T09:53:29","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/finca-biniagual.com\/en\/privacy-policy\/","title":{"rendered":"PRIVACY POLICY"},"content":{"rendered":"\t\t
In the following data protection policy declaration, we will inform you about the types of personal data that we collect (hereinafter referred to as “data”) the purposes for which we collect it and the extent of data collection. The data protection declaration applies to all processing of personal data carried out by us, both in the context of the provision of services and in particular through our websites, mobile phone applications and also external online presences, for example our social media profiles (collectively referred to as “Online Offer”).<\/p>
The terms used are not gender specific.<\/p>
As of November 20, 2019<\/p><\/div><\/div><\/div>
\u00a0<\/p>
DATA CONTROLLER<\/span> Biniagual Explotaciones Agr\u00edcolas S.L.<\/p> Avenida Son Caliu 18<\/p> 07181 Palma Nova \u2013 Balearic Islands<\/p> Spain<\/p> \u00a0<\/p> Official Representative<\/strong>: Matthieu Pichenot<\/p> E-mail<\/strong>: info@finca-biniagual.com<\/a><\/p> Legal notice<\/strong>: https:\/\/finca-biniagual.com\/de\/impressum<\/a><\/p><\/div><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t The following overview summarises the types of data that will be processed and the purposes for which they will be processed and refers to the subjects of personal data collection.<\/p> TYPES OF DATA PROCESSED<\/strong><\/span><\/p> CATEGORIES OF AFFECTED PERSONS (DATA SUBJECTS)<\/strong><\/span><\/p> \u00a0<\/span><\/strong><\/p> PURPOSE OF PROCESSING<\/span> Here we will describe the legal bases of the General Data Protection Regulation (GDPR), which regulates how we process personal data. Please note that in addition to the provisions contained in the GDPR, additional national data protection requirements may apply in your, or our, country of residence.<\/p>\n We will take the appropriate technical and organisational measures to ensure a level of protection commensurate with the risk, taking into account the cost of implementation and the nature of the task, the scope and the circumstances of the data processing, as well as the probability of the occurrence of a breach and the extent of the threat to the rights and freedoms of individual persons.<\/p>\n Measures include specifically ensuring the confidentiality, integrity and availability of data by controlling physical and electronic access to the said data, as well as controlling access, entry, disclosure, securing availability and classification. In addition, we have established procedures that guarantee the exercise of data subjects’ rights, the right to erase data and responses to any data risk. Furthermore, we have already taken into account the protection of personal data when developing and selecting hardware, software and implementing procedures in accordance with the principle of data protection, through technical design features and with data protection-friendly pre-sets.<\/p>\n IP address adjustment:<\/strong> If we can or if the IP address is not required, we may shorten your IP address. In the case of an adjustment to the IP address, also known as “IP masking”, the last octet, i.e. the last two numbers of an IP address, is deleted (the IP address in this context is the identifier individually assigned to an Internet connection by the online access provider). The adjustment to the IP address is intended to prevent identification or make it much more difficult to identify a person by their IP address.<\/p>\n SSL encryption (https):<\/strong> In order to protect your data transmitted via our online offer, we use SSL encryption. You can detect encrypted connections by the prefix https:\/\/ in the address bar of your browser.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t In the context of our processing of personal data, the data may be transferred to other parties, companies, legally independent organizational units or persons or be disclosed to them. Recipients of this data may include, for example, financial institutions in the context of payment transactions, service providers entrusted with IT tasks or providers of services and content that are integrated into a website. In such case, we will comply with the legal requirements and in particular arrange corresponding contracts or agreements with the recipients of your data, which will ensure adequate protection of your data.<\/p>\n As part of the order processing service, we transmit the necessary data for the dispatch of the goods to our fulfilment service provider in Germany and also to the shipping service provider commissioned by this company (DHL).<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t Cookies are text files that are stored by a browser on the user’s computer and contain data from websites or domains visited. A cookie is primarily used to store the information about a user during or after his visit to a website. The stored information may include, for example, the language settings on a website, the login status, a shopping cart or the location where a video was viewed. The term cookies also includes other technologies that perform the same functions as cookies (e.g. when user information is stored as pseudonymous online identifiers, also known as “user IDs”).<\/p> The following types of cookies and functions are distinguished:<\/strong><\/p> NOTES ON LEGAL BASES:<\/strong><\/span><\/p> The legal basis on which we process your personal data with the help of cookies depends on whether we ask you for your consent. If this is the case and you have given consent to the use of cookies, the legal basis for processing your data is that of declared consent. Otherwise, the data received by cookies will be processed on the basis of our legitimate interests (e.g. for business operational purposes regarding our online offer and for its improvement) or, if the use of cookies is essential, in order to fulfil our contractual obligations.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t GENERAL NOTICES ON REVOCATION AND OPPOSITION (OPT-OUT):<\/strong><\/span><\/p> Depending on whether the processing is based on consent or legal permission, you have the option at any time to revoke your consent or to object to the processing of your data (collectively referred to as ‘opt-out’) through the use of cookie technologies. You can declare and effect your objection by adjusting your browser settings, e.g. by disabling the use of cookies (which may result in the functionality of our online offer being limited). An objection to the use of cookies for online marketing purposes can also be expressed by using a variety of services, especially in the case of tracking, with the websites http:\/\/optout.aboutads.info<\/a> and http:\/\/www.youronlinechoices.com\/<\/a>. In addition, you may receive further opportunities for objection within the scope of the information on the service providers and cookies used.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t PROCESSING OF COOKIE DATA BASED ON CONSENT:<\/strong><\/span><\/p> Before we process or have data processed within the context of cookie use, we ask users for consent which may be revoked at any time. Until consent has been given, only cookies that are necessary for the operation of our online offer will be used. Their use is based on our legitimate business interest and the interest of the users in order to achieve the expected functionality of our online offer.<\/p> We process data pertaining to our contractual and business partners, e.g. customers and interested parties (collectively referred to as “contractors”) within the framework of contractual and comparable legal relationships as well as other related measures and for the purpose of facilitating communication with the contractual partners (or pre-contractual), e.g. in order to answer enquiries.<\/p> We process this data in order to fulfil our contractual obligations, to protect our rights and for the purposes of the administrative tasks associated with this information as well as that of the business organization. Within the scope of the applicable law, we only transfer data belonging to contractual partners to third parties to the extent that is necessary for the aforementioned purposes or to fulfil legal obligations or when it is carried out with the consent of the contractual partners (e.g. to telecommunications, transport and other auxiliary service providers as well as subcontractors, banks, tax and legal advisors, payment service providers or tax authorities). The contractual partners will be informed about any other forms of processing, e.g. for marketing purposes, within the framework of this data protection declaration.<\/p> We will inform the contracting parties before or within the scope of the data collection, e.g. in online forms, by means of special marking (e.g. colours) or symbols (e.g. asterisks or similar), or in person.<\/p> We will delete the data when the period of legal warranty and comparable obligations expires, i.e. usually after 4 years, unless the data is stored in a customer account, e.g. as long as it has to be stored for legal reasons (e.g. for tax purposes this is usually 10 years). Data disclosed to us in the context of an order by the contractual partner, we delete in accordance with the specifications of the order, in principle after the order has been fulfilled.<\/p> Whenever we use third-party providers or platforms to provide our services, the terms and conditions and privacy notices of the respective third-party providers or platforms apply to the relationship between the users and the providers.<\/p> Customer account: <\/strong>Contractors can create an account on our website (e.g. customer or user account, usually “customer account”). If registration of a customer account is required, contractual partners will be informed, and the information required for registration will be specified. Customer accounts are not public and cannot be indexed by search engines. As part of the registration as with any subsequent registrations and uses of the customer account, we store customer IP addresses together with access times in order to confirm the registration and to prevent any misuse of the customer account.<\/p> When a customer terminates their client account, the data relating to that account will be deleted, unless retention is required for legal reasons. It is the responsibility of the customers to secure their data in the event of termination of the customer account.<\/p> Shop and e-commerce: <\/strong>We process client data in order to enable them to select, purchase and order their chosen products, goods and\/or related services, as well as payment and delivery, or execution.<\/p> Required information is marked as such in the context of the order or comparable acquisition process and includes the information required for delivery, provision and payment as well as contact information in order to facilitate any enquiry or consultation.<\/p> Functions and Events: <\/strong>We process the data of participants at functions, events and similar activities offered by or hosted by us (hereinafter referred to uniformly as “Participants” and “Events”) in order to enable them to participate in the events and to use the services or promotions associated with that participation.<\/p> If we process health-related data, religious, political or other special categories of data in this context, this is done within the scope of the necessary (e.g. at thematically oriented events or for purposes of health care, safety or with the consent of the persons concerned).<\/p> The required information is marked as such in the finalisation of the order or comparable contract and includes the information required for the provision of services and billing as well as contact information in order to facilitate enquiries or consultations. All the information we receive from end customers, employees or other persons is processed in accordance with the pertinent legal and contractual requirements.<\/p> Within the context of contractual and other legally binding relationships, in accordance with legal obligations or otherwise on the basis of our legitimate interests, we offer efficient and secure payment options to clients and, in addition to banks and credit institutions, may use other payment service providers (collectively, “payment service providers”).<\/p> The data processed by the payment service providers includes inventory data, such as names and addresses, bank details including account numbers or credit card numbers, passwords, transaction numbers and checksums, as well as contract, total and recipient-related information. The information is necessary in order to execute the transactions. However, the data entered will only be processed and stored by the payment service providers. This means that we do not receive any account or credit card-related information, only information with confirmation of the payment or failure to complete the transaction. This data may be transmitted by the payment service providers to business and credit information agencies. The purpose of this transmission is to verify identity and creditworthiness. In this instance, we refer to the terms and conditions and data protection notices regarding payment service providers.<\/p> The terms and conditions and legal data protection notices of the respective payment service providers apply to the payment transactions and are available on the respective websites or transaction applications. We also refer to these for further information and the assertion of rights of revocation, information and other data subjects of affected persons.<\/p> Users can create a user account. As part of the registration process, users are asked to provide the necessary information, and this is processed for the purpose of creating and managing the user account on the basis of contractual obligations. he data processed necessarily includes the login information (name, password and an e-mail address). The data entered during registration will be used for the purpose of using the user account and its management.<\/p>\n Users may be informed by e-mail about processes that are relevant to their user account, for example, when technical changes occur. If users have terminated their user account, the data relative to the user account will be deleted unless it is subject to a legal retention obligation. It is the responsibility of users to secure their data before the end of the contract if they are terminating the account. We are entitled to permanently delete all data belonging to the user that we have stored during the term of the contract.<\/p>\n We store the IP address and the time of the action executed by the user as part of the registration and login process as well as the use of the user account. This data is stored on the basis of our legitimate interests as well as that of the users in order to protect against misuse and other unauthorized use. In principle, this data will not be passed on to third parties, unless it is necessary to pursue our claims or there is a legal obligation to do so.<\/p>\n <\/strong><\/span><\/p>\n CONTACT<\/strong><\/span><\/p>\n When contacting us (e.g. via contact form, e-mail, telephone or via social media), the information of the person effecting the enquiry will be processed, insofar as this is necessary to answer the enquiry and carry out any necessary measures requested.<\/p>\n The purpose of the processing of data related to enquiries within the context of contractual or pre-contractual relationships is to fulfil our contractual obligations or to answer (pre)contractual enquiries and, in addition, on the basis of the legitimate interests in order to respond to the enquiries.<\/p>\n <\/strong><\/span><\/p>\n PROVISION OF HTE ONLINE OFFER AND WEB HOSTING<\/strong><\/span><\/p>\n In order to be able to provide our online offer securely and efficiently, we use the services of one or more web hosting providers, from whose servers (or servers managed by them) the online offer can be accessed. For our services to function we may use their infrastructure and platform services, computing capacity, storage space and database services, as well as security and technical maintenance services.<\/p>\n The data processed in the context of the provision of the hosting service may include all information concerning the users of our online offer that occurs within the context of use and communication. This regularly includes the IP address necessary to deliver the contents of online offers to browsers and all entries made within our online offer or from websites.<\/p>\n Collection of access data and log files<\/strong>: We ourselves (or our web hosting provider) collect data from every entry to the server (so-called server log files). The server log files may include the address and name of the retrieved websites and files, the date and time of the retrieval, the amount of data transferred, the notification of successful retrieval, the browser type and version, the user’s operating system, referral URL (the previously visited page) and, as a rule, IP addresses and the requesting provider.<\/p>\n The server log files can be used for security purposes, e.g. to avoid overloading the servers (especially in the case of cyber-attacks, so-called Denial-of-Service attacks) and, on the other hand, to ensure the correct utilization of the servers and their stability.<\/p>\n NEWSLETTER AND OTHER COMUNICATIONS<\/strong><\/span><\/p>\n We only send newsletters, e-mails and other electronic notifications (hereinafter “Newsletter”) with the consent of the recipients or legal permission. If the content of the newsletter is specifically described in the context of registration, it is classed as consent from the users. In general, our newsletters contain information about us and our services.<\/p>\n In order to subscribe to our newsletters, it is sufficient that you provide your e-mail address. However, we may ask you to provide a name in order to address you personally or other information if required for the purposes of the newsletter.<\/p>\n Double opt-in procedure<\/strong>: Subscription to receive our newsletter is basically done in a double opt-in procedure. This means that you will receive an e-mail after registration asking you to confirm your registration. This confirmation is necessary so that no one can log in with a different e-mail address. Subscriptions to the newsletter are logged in order to be able to confirm the registration process in accordance with legal requirements. This includes storing the login and confirmation time as well as the IP address. Any changes to your data stored by the newsletter service provider will also be logged.<\/p>\n Deletion and restriction of processing<\/strong>: We may store e-mail addresses that have been processed for up to three years on the basis of our legitimate interests before deleting them in order to be able to prove a previously given consent. The processing of this data is limited to the purpose of a possible defence against a future claim. An individual request for cancellation is possible at any time, provided that the existence of prior consent is confirmed at the same time. In the case of obligations to attend objections permanently, we reserve the right to store the e-mail address in a block list (so-called “blacklist”) for this purpose alone.<\/p>\n The registration procedure is logged on the basis of our legitimate interests for the purpose of proving proper conduct. As we commission a service provider to send e-mails, this is based on our legitimate interests to ensure an efficient and secure mailing system.<\/p>\n Information about legal bases:<\/strong> The sending of newsletters is based on the consent of the recipients or, if consent is not required, on the basis of our legitimate interests in direct marketing, to the extent that this is permitted by law, e.g. in the case of existing customer advertising. As we commission a service provider to send e-mails, this is done on the basis of our legitimate interests. The registration process is recorded on the basis of our legitimate interests in order to prove that it was conducted in accordance with the law.<\/p>\n Content<\/strong>: Information about us, our services, promotions and offers.<\/p>\n Success measurement<\/strong>: The newsletters contain a so-called “web beacon”, i.e. a pixel-sized file that is retrieved from our server when opening the newsletter from our server or, if we use a newsletter service provider, from its server. As part of this retrieval, technical information such as information about the browser and your operating system, as well as your IP address and the time of retrieval, are collected first.<\/p>\n This information is used to improve the technical aspects of our newsletter on the basis of the technical data or the target groups and their reading behaviour based on analysis of their polling locations (determined by means of the IP address) or the access times. This analysis also includes determining whether the newsletters are opened, when they are opened, and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our intention nor, if used, that of the newsletter service provider to observe individual users. Rather, the evaluations serve the purpose of allowing us to recognize the reading habits of our users and to adapt our content or to send different content according to the interests of our users.<\/p>\n The evaluation of the newsletter and the measurement of its success are carried out, subject to express consent from the users, on the basis of our legitimate interests for the purposes of maintaining a user-friendly and secure newsletter system, which serves both our business interests and meets the expectations of the users.<\/p>\n A separate revocation applying solely to the success measurement is unfortunately not possible, and in this case the entire newsletter subscription must be cancelled or must be contradicted.<\/p>\n
<\/strong><\/p>OVERVIEW OF DATA PROCESSING OPERATIONS<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\u00a0<\/h4>
<\/strong><\/p>RELEVANT LEGAL BASES<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n
SECURITY<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
TRANSFER AND DISCOLSURE OF PERSONAL DATA<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
USE OF COOKIES<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\u00a0<\/h4>
COMMERCIAL AND BUSINESS SERVICES<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
Payment service provider<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\u00a0<\/h4>
SERVICES AND SERVICE PROVIDERS USED:<\/strong><\/h4>
REGISTRATION PROCESS AND LOGIN<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n
\n
\n
<\/strong><\/span><\/p>\n\n