At GRUPARSA DIGITAL, S.L. We are committed to ensuring that your personal data is protected and is not used for purposes other than those indicated in this Privacy Policy. For this reason, in this section we inform users and interested parties of everything concerning the processing of their personal data, thus complying with the data protection regulations applicable in our country: General Data Protection Regulation (EU) 2016/679, of April 27 regarding the protection of natural persons with regard to the processing of personal data and the free circulation of these data (hereinafter, “GDPR”) and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (hereinafter, “LOPDGDD”).
This Privacy Policy is applicable to the data processing that GRUPARSA DIGITAL, S.L. carried out through this website: www.banoidea.com (hereinafter, the “Website") and/or those indicated. We recommend that you read it carefully before using this Website or providing your data through it. You can ask us any questions about this via email: online@banoidea.com.
INDEX OF CONTENTS
In this Policy you will find all the information related to the processing of your personal data and the rights that you can exercise to maintain control over them. In this sense, you will find information about:
- Who is responsible for the processing of your data.
- What requirements must you meet to provide us with your personal data.
- What data processing we carry out through the website and what its main characteristics are, explaining:
- What data we collect and what are the ways in which it is collected.
- For what purposes we collect the data we request from you.
- What is the legitimacy for your treatment.
- How long do we keep them?
- To which recipients your data is communicated.
- Existence of international transfers of your data.
- What are your rights and how you can exercise them.
- How we protect your personal information.
- Modifications to this policy.
- WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA?
Your personal data will be processed by the company GRUPARSA DIGITAL, S.L. (“GRUPARSA DIGITAL”), with NIF B-72220569 and whose contact information is as follows:
- Address: Calle de las Utopias 18, 11130, Chiclana de la Frontera, Cádiz (Spain)
- Telephone contact: (+34) 956 53 25 73
- Telephone to contact via WhatsApp: (+34) 685 950 632
- Contact email: online@banoidea.com
- WHAT REQUIREMENTS SHOULD YOU MEET TO PROVIDE US WITH YOUR PERSONAL DATA?
2.1. Minimum age. To provide us with your personal data, you must be at least 18 years old, and/or, where applicable, have sufficient legal capacity to use this Website.
2.2. Veracity. When you provide us with your data to use our services, you guarantee that the data and information provided is real, truthful, updated and also belongs to you and not to third parties.
Furthermore, you must notify us of any modification that occurs in the data provided, being responsible in any case for the veracity and accuracy of the data provided at all times.
23. Age and Veracity Control. At GRUPARSA DIGITAL we reserve the right to verify your age and identifying information at any time, if necessary, even requiring an official accreditation document or equivalent procedure and, in the event of detection of fraud, it is proven or suspected that you are a minor. indicated age, to delete, temporarily deactivate and/or cancel your account.
- WHAT DATA PROCESSING DO WE CARRY OUT THROUGH THE WEBSITE AND WHAT ARE ITS MAIN CHARACTERISTICS?
Below we explain how we process your personal information and provide you, in detail, with all relevant information regarding your privacy:
-
- When you contact us through our channels (contact form, WhatsApp, email):
|
What are the ways of collecting data? |
|
|
What data do we collect?
|
Identification and contact information. We collect your identification data (name) and contact data (phone number and email address), as well as any other data that you voluntarily include in the communications you send us. We may request additional information from you if necessary to fulfill your request or requirement. |
|
What are the purposes of the processing of your personal data?
|
Respond to your requests. The main purpose of processing this data will be to answer your requests, resolve your doubts and/or provide you with the required information, as well as, where appropriate, follow up on your requests. Improve customer service. All the information derived from doubts, queries, and advice offered to interested parties, as well as the way in which requests are resolved, allows us to know how we provide our own customer service, allowing us to improve its quality. Likewise, all the information collected, after the retention period indicated below, is anonymized and used for the purposes of analyzing the most asked questions through the chat and being able to automate the most frequent ones, prepare FAQS or be kept for statistical purposes to develop commercial strategies. |
|
What is the legal basis that allows us to process your data? Is the provision of this data mandatory?
|
Consent. The data provided for the above purposes will be processed based on your consent, granted when you voluntarily contact us through the means made available to you to request information or make a request to us. We will process all the information collected by the customer service department for statistical purposes that will help us improve the quality of the customer service provided. This purpose is considered to be compatible with the initial one. The information that you must provide will be indicated with an asterisk or in a similar way. Without this information it would not be possible to respond to your queries or requests. |
|
How long do we keep your information?
|
We will process all your personal information during the time in which your requests are being processed and, if necessary, to follow up on them. Once this period has ended, GRUPARSA DIGITAL will keep, blocked, said information for the periods provided for in the legislation to address possible responsibilities and to demonstrate compliance with our obligations. From this moment on, GRUPARSA DIGITAL will only process the information in an anonymized manner, so it will not be possible to link the statistical information with the specific users to whom it refers. |
|
To whom do we transfer your personal information?
|
We do not make any additional assignment to carry out this treatment other than those indicated, generally, in point 4. To whom do we transfer your personal information? In this sense, some channels through which you can contact us are managed by service providers, such as WhatsApp, who act as Data Processors. You will find more information about how these service providers operate in point 4, mentioned above. |
-
- When you subscribe to our newsletter and other commercial communications:
|
What are the ways of collecting data? |
O well:
|
|
What data do we collect?
|
Identification and contact information: To send commercial information by electronic means, we use the identifying data (name) and contact information that you include in the different forms on the Website. If you maintain a contractual relationship with us, we may use the data related to your email that we have based on our contractual relationship. |
|
What are the purposes of the processing of your personal data? |
Sending publications and commercial communications related to our products/services: We can send you, through electronic means, our newsletter, and other commercial communications related to our products and services. |
|
What is the legal basis that allows us to process your data? Is the provision of this data mandatory?
|
The sending of commercial communications is carried out:
You can unsubscribe from these commercial communications at any time through the mechanism indicated in each email or by expressing your willingness to unsubscribe by sending an email to online@banoidea.com. |
|
How long do we keep your information?
|
In the event that the sending of commercial communications is based on your consent, we will maintain the information during the time in which you are registered on our distribution list of this type of information and, once you unsubscribe low, it will remain blocked during the legal deadlines established to address possible responsibilities. In the event that commercial information is sent based on our contractual relationship, we will keep all your personal information for as long as it remains valid. Once this is completed, GRUPARSA DIGITAL will keep, blocked, said information for the periods provided for in the legislation to address possible responsibilities and to demonstrate compliance with our obligations. |
|
To whom do we transfer your personal information?
|
There are no specific transfers of your personal data to fulfill the purpose indicated in this section. However, we may use the services of email marketing service providers or other advertising and marketing service providers, who will have limited access to the data and will be bound by a duty of confidentiality (for more information on how our providers act of services, see point 4. To whom do we transfer your personal information? > Service providers). |
-
- When you create an account on the Website and/or maintain a contractual relationship with us (provision of services and purchase of products)
|
What are the ways of collecting data? |
|
|
What data do we collect?
|
When you create your account through the registration form: To complete your registration on our Website, we ask for your identification information (name and surname) and contact information (email) and a password. When you place an order through the Website, once registered as a user, if you have not provided it before, we ask you:
When you place an order through the Website and you have NOT registered as a user, we ask you:
Usage Data. When you register and access the services, information is collected about your use of our services. Within the Usage Data, there is the data of the device from which you access the Services (URL, cookies, IP, device data, general location, which includes the country or region without specifying the exact location. |
|
What are the purposes of the processing of your personal data?
|
Execute and maintain the contractual relationship between the Parties. The main purpose of processing this data will be to maintain and execute the contractual relationship between the parties, which may include: Administrative, fiscal, legal, accounting, and commercial management of customer data. Preparation and sending of budgets. Carrying out work. Attention to queries and complaints via web, telephone, electronic or in person. Establishment of meetings and client visits. Collection management. Manage your registration as a user of our Website. When you register as a user on our website, we process your data to identify you as a user of our website and give you access to the different functionalities and Services. In your account you will have access to your order history, as well as your Personal Data, billing addresses, which you can modify at any time. Send you electronic commercial communications. We may send you our commercial communications in accordance with section 3.2. Evaluate and develop new features, content and improve the service. We can achieve this purpose by collecting Usage Data, which allows us to verify the use of the Services by users to apply improvements to it, content or functionalities. Prevent, detect and take action against illegal activities or activities contrary to the conditions of use of the website. We may process the data to monitor and prevent any form of abuse of our services, such as fraudulent activities, denial of service attacks, spamming, unauthorized access to our users' accounts, as well as any other practices that are contrary to to the General Conditions and Use or endanger the security of the information or the integrity of the website. |
|
What is the legal basis that allows us to process your data? Is the provision of this data mandatory?
|
Execution of the contract. The processing of data for the fulfillment of the above purposes is, except with regard to the processing indicated below, necessary for the execution of the contract between the parties. If they are not supplied, the services could not be executed, the contract executed in accordance with the General Contract Conditions and carry out the administrative tasks linked to them. Consent. The mere registration on the Website, creating a user account is based on your consent. Legitimate interest: The treatments we carry out to (i) improve the service; and (ii) the prevention of illegal activities and others related to the security of the Website will be treated based on our legitimate interest for: (i) the continuous improvement of the GRUPARSA DIGITAL Services, so that we can guarantee the provision of the service. in an effective and satisfactory manner for our clients and (ii) guarantee the security of the network and information to prevent events that may compromise the availability, authenticity, integrity and confidentiality of personal data or the platform itself. For more details about the weighing of interests carried out by GRUPARSA DIGITAL in relation to this purpose(s), write to us at online@banoidea.com. The information regarding the sending of electronic commercial communications based on the contractual relationship between the parties is described in section 3.2. All data requested and processed for the above purposes are necessary to fulfill the indicated purposes. If we do not supply them, the contract that binds us could not be executed nor the administrative tasks linked to it carried out. |
|
How long do we keep your information? |
We will process all personal information during the duration of the contractual relationship between the parties. We will process your data for as long as you are registered on our Website and our contractual relationship remains in force. Once this period has ended and when you decide to unsubscribe as a registered user, we will keep your information blocked for the periods provided for in the legislation to meet any potential responsibilities and to demonstrate compliance with our obligations and, subsequently, they will be deleted. In relation to Usage Data, this is processed during the time in which the account is active, unless the information is processed for a shorter time, according to our Cookies Policy, when applicable. |
|
To whom do we transfer your personal information?
|
We do not make any additional assignment to carry out this treatment other than those indicated, generally, in point 4. To whom do we transfer your personal information? In this sense, we may turn to service providers to provide certain auxiliary services (for example, management software, payment platform), who act as Data Processors. You will find more information about how these service providers operate in point 4, mentioned above. |
-
- When you rate our products and services and/or leave us a comment
|
What are the ways of collecting data? |
|
|
What data do we collect?
|
Identification and contact information: In order to leave a review, you will be asked for identification information (name) and contact information (email), as well as any other information that you voluntarily include in your comment. |
|
What are the purposes of the processing of your personal data?
|
Leave a review of our products and services. The main purpose of the processing of your data is the publication of your rating, comment, opinion or contribution in the section related to “Ratings from our customers” of the Website. You must bear in mind that it is mandatory to comply with the Comment Posting Policy.
|
|
What is the legal basis that allows us to process your data? Is the provision of this data mandatory?
|
Consent. The data provided for the above purposes will be processed based on your consent, granted when you voluntarily leave a comment or rating. The information that you must provide will be indicated with an asterisk or in a similar way. |
|
How long do we keep your information?
|
Your comments (along with identifying data) will appear published in the “Our customer reviews” section while the publication remains published on the Website. Once the review is deleted, your personal information will remain blocked for the legal deadlines established to address any potential liabilities. |
|
To whom do we transfer your personal information?
|
There are no specific transfers of your personal data to fulfill the purpose indicated in this section. However, we may use the services of service providers, who will have limited access to the data and will be bound by a duty of confidentiality (for more information on how our service providers act, see point 4. To whom do we transfer your personal information? > Service providers). |
-
- Navigation through the Website (cookies)
On this Website we use cookies or other tracking and tracing tools to collect information about how users use the Website.
For more information about the treatment we carry out through these tracking tools, visit our Cookies policy.
-
- GRUPARSA DIGITAL profiles on social networks.
GRUPARSA DIGITAL has a profile on the main social networks, such as Facebook, Instagram, LinkedIn, Pinterest o YouTube.
When you become a follower of one of our pages on social networks, the processing of data will be governed by the conditions of use, privacy policies and access regulations that belong to the corresponding social network and previously accepted by the user.
GRUPARSA DIGITAL, in this sense, will process your data for the purposes of correctly managing its presence on the social network, informing you of activities, products or services, as well as for any other purpose that the regulations of social networks allow.
Please note that we have no influence over the information that the social network collects or how it processes it, so we recommend that you stay informed of the purpose and scope of the collection of information that is carried out through these social networks.
- TO WHOM DO WE GIVE YOUR PERSONAL INFORMATION?
Generally, at GRUPARSA DIGITAL we will not communicate your data to third parties. However, in addition to the transfers that we specifically indicate to you in the section in which we explain the characteristics of the different operations (point 3), we inform you of the communications that we can make, in general, and that affect all the previous treatments. and its legitimizing basis.
- Service providers essential to execute the service we offer you (for example, computer hosting companies or platforms for sending commercial communications). Notwithstanding the above, these entities have signed the corresponding confidentiality agreements and will only process your data according to our instructions, and will not be able to use them for their own purposes or apart from the service they provide us.
- Public organisms. We may disclose data and any other information in our possession or that is accessible through our systems to competent public authorities when there is a legal obligation to do so, as well as when required, for example, when the purpose is to prevent or prosecute abuses of services or fraudulent activities through our Website or web page. In these cases, the personal data that you provide us would be kept and made available to the administrative or judicial authorities.
- In the case of a corporate transaction: In the event of a merger, acquisition, sale of all or part of its assets or any other type of corporate transaction involving a third party, we may share, disclose or transfer user data to the successor entity (even during the pre-operation phase).
- To third parties after aggregation or anonymization: We may disclose or use aggregated or anonymized data (that is, data that is not linked to an identified or identifiable natural person) for any purpose.
- To third parties with the user's consent or other legitimate basis: In the event that we want to share data with third parties outside the scope of this Privacy Policy, in any case, your consent will be requested or you will be informed about it and its legitimate basis.
Likewise, we inform you that this Privacy Policy only refers to the collection, processing and use of information (related to personal data) by us through the interaction you make with our Website. Access to third-party websites that you can access through links from the Website have their own privacy policies over which we have no control. Therefore, before providing them with any personal information, we recommend that you inform yourself about their Privacy Policies.
- ARE YOUR PERSONAL DATA TRANSFERRED TO THIRD COUNTRIES OUTSIDE THE ECONOMIC AREA?
Some of our service providers are located in countries outside the European Economic Area (“EEE”).
The location of these companies outside the EEA implies the existence of an international transfer of your personal data, which could mean a lower degree of protection than that included in European regulations. However, at GRUPARSA DIGITAL we have applied measures so that these transfers do not lead to a lower degree of protection of your personal data.
In this sense, service providers located outside the EEA have signed the corresponding standard contractual clauses approved by the European Commission (“CCT"), agreement signed between both entities by which the non-EU company guarantees that it applies European data protection standards.
Therefore, the use of these providers does not result in a lower degree of protection of your personal data than the use of providers located in the European Union. You can consult the content of the CCT at the following link:
https://ec.europa.eu/info/law/law-topic/data-protection/publications/standard-contractual-clauses-controllers-and-processors_en
Below, we indicate which are the international transfers that we make from GRUPARSA DIGITAL:
|
Name |
Country |
Transfer mechanism |
|
Shopify Inc. |
Canada |
|
|
WhatsApp LLC |
EE. UU. |
|
|
PayPal Holdings, Inc. |
EE. UU. |
|
|
Google LLC |
EE. UU. |
- WHAT ARE THE RIGHTS YOU CAN EXERCISE AS AN INTERESTED PARTY?
You can exercise the rights that the law guarantees you in relation to the processing of your personal data by contacting us via email online@banoidea.com.
We will resolve any rights request that we receive as soon as possible and, in any case, within the maximum period established by law from the time we receive it. In some cases, it will be necessary to ask you for a copy of your ID or other identification document if your identity needs to be verified.
The rights that correspond to you as an interested party are the following:
- Right to withdraw the consent given
You can revoke your consent in relation to all processing based on it at any time. However, the withdrawal of consent will not affect the legality of the treatment based on the consent prior to its withdrawal.
- Right of access
You have the right to know what data is being processed, if applicable, and, if so, obtain a copy of it, as well as to obtain information regarding:
- the origin and recipients of the data;
- the purposes for which they are processed;
- whether there is an automated decision-making process, including profiling;
- the data retention period; and
- the rights provided for by the regulations.
- Right to rectification
You have the right to obtain rectification of your personal data or to complete it when it is incomplete.
- Right to erasure
You have the right to request the deletion of your personal data if it is no longer necessary for the purpose for which it was collected or, where appropriate, if we are no longer authorized to process it.
- Right to data portability
You have the right to request data portability in the case of processing of your data that is based on your consent or the execution of a contract, as long as the processing has been carried out by automated means. In the event of exercising this right, you will receive your personal data in a structured format, commonly used and readable by any electronic device. However, you can also request, where possible, that your data be transmitted directly to another company.
- Right to limit the processing of your personal data
You have the right to limit the processing of your data in the following cases:
-
- When you have requested the rectification of your personal data during the period in which we verify its accuracy.
- When you consider that we are not authorized to process your data. In that case, you can ask us to limit its use instead of requesting its deletion.
- When you consider that it is no longer necessary for us to continue processing your data and you want us to keep it for the purposes of exercising or defending claims.
- In cases where there is processing based on our legitimate interest and you have exercised your right to object to it, you can ask us to limit the use of your data during the verification of the prevalence of such interests with respect to yours.
- Right to object
You have the right to object at any time to the processing of your personal data based on our legitimate interest, including profiling.
Cancellation of commercial communications: Remember that at any time you can object to receiving this type of communications by sending us an email to online@banoidea.com. You can also opt out of this service by following the instructions indicated in the footer of each electronic communication we send you.
- Right to file a claim with the Control Authority
Remember that, at any time, and if you consider that we have violated your right to the protection of your data, you can go to the corresponding Control Authority in your defense, in the case of Spain, the Spanish Data Protection Agency (www.agpd.es).
- HOW DO WE GUARANTEE THE CONFIDENTIALITY OF YOUR INFORMATION?
The security of your personal data is a priority for us. For this reason, GRUPARSA DIGITAL has implemented all the necessary security measures to guarantee effective use and processing of the personal data provided by the user, safeguarding the intimacy, privacy, confidentiality and integrity of the same and makes use of the necessary technical means to avoid alteration, loss, unauthorized access or processing of your data, according to the state of technology at any given time.
Consequently, we comply with the recommended security standards to protect them. However, it is impossible to completely guarantee its security due to the very nature of the Internet and because there may be malicious actions by third parties beyond our control.
We are committed to acting quickly and diligently if data security is at risk or compromised, and to inform you if relevant.
- MODIFICATIONS TO THIS POLICY
From GRUPARSA DIGITAL we can modify the content of the privacy policy at any time, especially when there are legislative, jurisprudential or interpretation changes of the Spanish Data Protection Agency that affect the data processing carried out by GRUPARSA DIGITAL through this document. Website. Any new version of this Privacy Policy will be effective on the published effective date.
If the revised version includes a material change that affects the processing of your data, we will notify you at least 30 days in advance by posting a notice on our website or communicating it to you via email. Despite the above, we recommend that you periodically review this Privacy Policy to be informed of how your personal data is treated and protected, as well as the rights that assist you.