At GRUPARSA DIGITAL, S.L. we are committed to ensuring that your personal data is protected and not used for purposes other than those indicated in this Privacy Policy. For this reason, in this section we inform users and interested parties about everything concerning the processing of their personal data, thus complying with the data protection regulations applicable in our country: General Data Protection Regulation (EU) 2016/679, of April 27 relating to the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter, “GDPR”) and Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights (hereinafter, “LOPDGDD”).
This Privacy Policy applies to the data processing carried out by GRUPARSA DIGITAL, S.L. through this website: www.banoidea.com (hereinafter, the “Website”) and/or those indicated. We recommend that you read it carefully before using this Website or providing your data through it. You can consult us with any questions regarding this via the email: online@banoidea.com.
TABLE OF CONTENTS
In this Policy you will find all the information related to the processing of your personal data and the rights you can exercise to maintain control over them. In this regard, you will find information about:
- Who is responsible for processing your data.
- What requirements you must meet to provide us with your personal data.
- What data processing we carry out through the website and what its main characteristics are, explaining to you:
- What data we collect and what are the means of collecting it.
- For what purposes we collect the data we request from you.
- What is the legal basis for their processing.
- How long we keep them.
- To which recipients your data is communicated.
- Existence of international transfers of your data.
- What your rights are and how you can exercise them.
- How we protect your personal information.
- Modifications to this policy.
- WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA?
Your personal data will be processed by the company GRUPARSA DIGITAL, S.L. ("GRUPARSA DIGITAL"), with NIF B-72220569 and whose contact details are as follows:
- Address: Calle de las Utopias 18, 11130, Chiclana de la Frontera, Cádiz (Spain)
- Contact phone: (+34) 956 53 25 73
- Phone to contact via WhatsApp: (+34) 685 950 632
- Contact email: online@banoidea.com
- WHAT REQUIREMENTS MUST YOU MEET TO PROVIDE US WITH YOUR PERSONAL DATA?
2.1. Minimum age. To provide us with your personal data, you must be at least 18 years old, and/or, if applicable, have sufficient legal capacity to use this Website.
2.2. Truthfulness. When you provide us with your data to use our services, you guarantee that the data and information provided is real, truthful, up-to-date, and also belongs to you and not to third parties.
Additionally, you must notify us of any changes to the data provided, being responsible in any case for the truthfulness and accuracy of the data supplied at all times.
2.3. Age and Truthfulness Control. GRUPARSA DIGITAL reserves the right to verify your age and identifying information at any time, if necessary, even requiring an official identification document or equivalent procedure and, in case of detected or suspected fraud that you are under the indicated age, to delete, temporarily deactivate, and/or cancel your account.
- WHAT DATA PROCESSING DO WE PERFORM THROUGH THE WEBSITE AND WHAT ARE ITS MAIN CHARACTERISTICS?
Below, we explain how we process your personal information and provide you in detail with all relevant information regarding your privacy:
-
- When you contact us through our channels (contact form, WhatsApp, email):
|
What are the ways of collecting the data? |
|
|
What data do we collect?
|
Identifying and contact information. We collect your identifying data (name) and contact data (phone number and email address), as well as any other information you voluntarily include in the communications you send us. We may ask you for additional information if necessary to fulfill your request or requirement. |
|
What are the purposes of processing your personal data?
|
Answer your requests. The main purpose of processing this data will be to answer your requests, resolve your doubts, and/or provide you with the required information, as well as, if applicable, to follow up on your requests. Improve customer service. All information derived from doubts, inquiries, and advice offered to interested parties, as well as how requests are resolved, allows us to understand how we provide our own customer service, enabling us to improve its quality. Likewise, all collected information, once the retention period indicated below has ended, is anonymized and used to analyze the most frequently asked questions through the chat and to automate the most common ones, create FAQs, or be kept for statistical purposes to develop commercial strategies. |
|
What is the legal basis that allows us to process your data? Is providing this data mandatory?
|
Consent. The data provided for the above purposes will be processed based on your consent, given when you voluntarily contact us through the means made available to you to request information or make a request. All information collected by the customer service department will be processed for statistical purposes that will help us improve the quality of the customer service provided. This purpose is considered compatible with the initial one. The information you must provide mandatorily will be indicated with an asterisk or in a similar way. Without this information, it would not be possible to attend to your inquiries or requests. |
|
How long do we keep your information?
|
We will process all your personal information during the time your requests are being processed and, if necessary, to follow up on them. Once this period has ended, GRUPARSA DIGITAL will keep this information blocked during the periods provided by law to address possible liabilities and to demonstrate compliance with our obligations. From that moment on, GRUPARSA DIGITAL will only process the information in an anonymized manner, so it will not be possible to link the statistical information to the specific users to whom it refers. |
|
To whom do we transfer your personal information?
|
We do not make any additional transfer to carry out this processing other than those indicated, in general, in point 4. To whom do we transfer your personal information? In this regard, some channels through which you can contact us are managed by service providers, such as WhatsApp, who act as Data Processors. You will find more information about how these service providers operate in point 4, mentioned above. |
-
- When you subscribe to our newsletter and other commercial communications:
|
What are the ways of collecting the data? |
Or:
|
|
What data do we collect?
|
Identifying and contact data: For sending commercial information by electronic means, we use the identifying data (name) and contact data that you include in the various forms on the Website. If you maintain a contractual relationship with us, we may use the data related to your email address that we have based on our contractual relationship. |
|
What are the purposes of processing your personal data? |
Sending publications and commercial communications related to our products/services: We can send you, through electronic means, our newsletter, and other commercial communications related to our products and services. |
|
What is the legal basis that allows us to process your data? Is providing this data mandatory?
|
The sending of commercial communications is carried out:
You can unsubscribe from these commercial communications at any time through the mechanism indicated in each email or by expressing your wish to unsubscribe by sending an email to online@banoidea.com. |
|
How long do we keep your information?
|
If the sending of commercial communications is based on your consent, the information will be kept while you are subscribed to our distribution list for this type of information and, once you unsubscribe, it will be kept blocked during the legal periods provided to address potential liabilities. In case commercial information is sent based on our contractual relationship, all your personal information will be kept for the duration of that relationship. Once it ends, GRUPARSA DIGITAL will keep such information blocked during the periods provided by law to address potential liabilities and to demonstrate compliance with our obligations. |
|
To whom do we transfer your personal information?
|
There are no specific transfers of your personal data to fulfill the purpose indicated in this section. However, we may use the services of mail marketing service providers or other advertising and marketing service providers, who will have limited access to the data and will be bound by a confidentiality obligation (for more information on how our service providers operate, see section 4. To whom do we transfer your personal information? > Service Providers). |
-
- When you create an account on the Website and/or maintain a contractual relationship with us (service provision and product purchase)
|
What are the ways of collecting the data? |
|
|
What data do we collect?
|
When you create your account through the registration form: To complete your registration on our Website, we request your identifying information (name and surname) and contact information (email) and a password. When you place an order through the Website, once registered as a user, if you have not provided it before, we request:
When you place an order through the Website and you have NOT registered as a user, we request:
Usage Data. When you register and access the services, information is collected about your use of our services. Within Usage Data are the data of the device from which you access the Services (URL, cookies, IP, device data, general location, which includes the country or region without specifying the exact place. |
|
What are the purposes of processing your personal data?
|
Execute and maintain the contractual relationship between the Parties. The main purpose of processing this data will be to maintain and execute the contractual relationship between the parties, which may include: Administrative, tax, legal, accounting, and commercial management of customer data. Preparation and sending of quotes. Execution of work. Handling inquiries and complaints via web, telephone, electronic, or in person. Scheduling meetings and client visits. Payment management. Manage your registration as a user of our Website. When you register as a user on our website, we process your data to identify you as a user of it and give you access to the different functionalities and Services. In your account, you will have access to your order history, as well as your Personal Data, billing addresses, which you can modify at any time. Send you electronic commercial communications. We may send you our commercial communications in accordance with section 3.2. Evaluate and develop new functionalities, content, and improve the service. We can carry out this purpose by collecting Usage Data, which allows us to verify the use of the Services by users to apply improvements to it, the content, or the functionalities. Prevent, detect, and take action against illegal activities or those contrary to the website's terms of use. We may process data to monitor and prevent any form of abuse of our services, such as fraudulent activities, denial of service attacks, spam sending, unauthorized access to our users' accounts, as well as any other practice that is contrary to the General Terms and Conditions of Use or endangers the security of the information or the integrity of the website itself. |
|
What is the legal basis that allows us to process your data? Is providing this data mandatory?
|
Contract execution. The processing of data for the fulfillment of the above purposes is, except for the processing indicated below, necessary for the execution of the contract between the parties. If you do not provide them, the services could not be executed, the contract could not be executed in accordance with the General Terms of Contracting, and the administrative tasks related to these could not be carried out. Consent. Simply registering on the Website by creating a user account is based on your consent. Legitimate interest: The processing we carry out for (i) service improvement; and (ii) the prevention of unlawful activities and others related to the security of the Website will be based on our legitimate interest to: (i) continuously improve GRUPARSA DIGITAL's Services, so that we can guarantee the effective and satisfactory provision of the service to our customers and (ii) ensure the security of the network and information to prevent events that may compromise the availability, authenticity, integrity, and confidentiality of personal data or the platform itself. For more details about the balancing of interests carried out by GRUPARSA DIGITAL regarding this/these purpose(s), write to us at online@banoidea.com. The information related to the sending of electronic commercial communications based on the contractual relationship between the parties is described in section 3.2. All data requested and processed for the above purposes are necessary to fulfill the indicated purposes. If you do not provide them, the contract that binds us could not be executed nor the administrative tasks related to it performed. |
|
How long do we keep your information? |
All personal information will be processed during the term of the contractual relationship between the parties. We will process your data while you are registered on our Website and our contractual relationship remains in effect. Once this period ends and when you decide to unsubscribe as a registered user, we will keep your information blocked for the periods provided by law to address potential liabilities and to demonstrate compliance with our obligations, and subsequently, it will be deleted. Regarding Usage Data, these are processed while the account is active, unless the information is processed for a shorter time, according to our Cookie Policy, when applicable. |
|
To whom do we transfer your personal information?
|
We do not make any additional transfer to carry out this processing other than those indicated, in general, in point 4. To whom do we transfer your personal information? In this regard, we may use service providers to provide certain auxiliary services (for example, management software, the payment platform), who act as Data Processors. You will find more information about how these service providers operate in point 4, mentioned above. |
-
- When you value our products and services and/or leave us a comment
|
What are the ways of collecting the data? |
|
|
What data do we collect?
|
Identifying and contact data: To be able to leave a review, you will be asked for identifying data (name) and contact data (email), as well as any other information you voluntarily include in your comment. |
|
What are the purposes of processing your personal data?
|
Leave a review of our products and services. The main purpose of processing your data is the publication of your review, comment, opinion, or contribution in the section related to “Customer Reviews” on the Website. You must bear in mind that it is mandatory to comply with the Comment Posting Policy.
|
|
What is the legal basis that allows us to process your data? Is providing this data mandatory?
|
Consent. The data provided for the above purposes will be processed based on your consent, given when you voluntarily leave a comment or a review The information you must provide mandatorily will be indicated with an asterisk or in a similar way. |
|
How long do we keep your information?
|
Your comments (along with identifying data) will be published in the “Customer Reviews” section as long as the publication remains on the Website. Once the review is deleted, your personal information will remain blocked during the legal periods established to address any potential liabilities. |
|
To whom do we transfer your personal information?
|
There are no specific transfers of your personal data to fulfill the purpose indicated in this section. However, we may use the services of service providers, who will have limited access to the data and will be bound by a duty of confidentiality (for more information on how our service providers operate, see section 4. To whom do we transfer your personal information? > Service Providers). |
-
- Website navigation (cookies)
On this Website we use cookies or other tracking and tracing tools to collect information about the use that users make of the Website.
For more information about the processing we carry out through these tracking tools, visit our Cookie Policy.
-
- GRUPARSA DIGITAL profiles on social networks.
GRUPARSA DIGITAL has profiles on the main social networks, such as Facebook, Instagram, LinkedIn, Pinterest or YouTube.
When you become a follower of any of our pages on social networks, the processing of data will be governed by the terms of use, privacy policies, and access regulations belonging to the corresponding social network and previously accepted by the user.
GRUPARSA DIGITAL, in this regard, will process your data for the purposes of properly managing its presence on the social network, informing you about activities, products, or services, as well as for any other purpose permitted by the social network regulations.
Please note that we have no influence over the information collected by the social network or how it processes it, so we recommend that you stay informed about the purpose and scope of the information collection carried out through these social networks.
- WHO DO WE DISCLOSE YOUR PERSONAL INFORMATION TO?
Generally, GRUPARSA DIGITAL will not disclose your data to third parties. However, in addition to the disclosures specifically indicated in the section explaining the characteristics of the different operations (point 3), we inform you of the communications we may make, in general terms, which affect all previous processing and their legal basis.
- Service providers essential to execute the service we offer you (for example, hosting companies or commercial communication delivery platforms). However, these entities have signed the corresponding confidentiality agreements and will only process your data according to our instructions, not being able to use it for their own purposes or apart from the service they provide us.
- Public Authorities. We may disclose to the competent public authorities the data and any other information in our possession or accessible through our systems when there is a legal obligation to do so, as well as when required, for example, when the purpose is to prevent or prosecute abuses of services or fraudulent activities through our Website or web page. In these cases, the personal data you provide us will be retained and made available to administrative or judicial authorities.
- In the event of a corporate transaction: In the case of a merger, acquisition, sale of all or part of its assets, or any other type of corporate transaction involving a third party, we may share, disclose, or transfer user data to the successor entity (even during the pre-transaction phase).
- To third parties after aggregation or anonymization: we may disclose or use aggregated or anonymized data (that is, data not linked to an identified or identifiable natural person) for any purpose.
- To third parties with the user's consent or other legitimate basis: In the event that we want to share data with third parties outside the scope of this Privacy Policy, their consent will be requested in any case or they will be informed about it and its legitimate basis.
We also inform you that this Privacy Policy only refers to the collection, processing, and use of information (relating to personal data) by us through your interaction with our Website. Access to third-party websites that you may reach through links from the Website have their own privacy policies over which we have no control. Therefore, before providing them with any personal information, we recommend that you inform yourself about their Privacy Policies.
- ARE YOUR PERSONAL DATA TRANSFERRED TO THIRD COUNTRIES OUTSIDE THE ECONOMIC AREA?
Some of our service providers are located in countries outside the European Economic Area (“EEA”).
The location of these companies outside the EEA implies the existence of an international transfer of your personal data, which could mean a lower level of protection than that provided for in European regulations. However, at GRUPARSA DIGITAL we have applied measures so that such transfers do not result in a lower level of protection of your personal data.
In this regard, service providers located outside the EEA have signed the corresponding standard contractual clauses approved by the European Commission (“CCT”), an agreement signed between both entities whereby the non-EU company guarantees that it applies European data protection standards.
Therefore, the use of these providers does not result in a lower level of protection of your personal data than would be the case with providers located in the European Union. You can consult the content of the CCT at the following link:
https://ec.europa.eu/info/law/law-topic/data-protection/publications/standard-contractual-clauses-controllers-and-processors_en
Below, we indicate which international transfers we make from GRUPARSA DIGITAL:
|
Name |
Country |
Transfer mechanism |
|
Shopify Inc. |
Canada |
|
|
WhatsApp LLC |
USA |
|
|
PayPal Holdings, Inc. |
USA |
|
|
Google LLC |
USA |
- WHAT RIGHTS CAN YOU EXERCISE AS A DATA SUBJECT?
You can exercise the rights guaranteed to you by law regarding the processing of your personal data by contacting us via email online@banoidea.com.
Any rights request we receive will be resolved as soon as possible and, in any case, within the maximum period established by law from the time we receive it. In some cases, it will be necessary to request a copy of your identity document or another identification document if it is necessary to verify your identity.
The rights that correspond to you as a data subject are the following:
- Right to withdraw given consent
You can withdraw your consent regarding all processing based on it at any time. However, the withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
- Right of access
You have the right to know which data are being processed, if applicable, and, if so, to obtain a copy of them, as well as to obtain information relating to:
- the origin and recipients of the data;
- the purposes for which they are processed;
- if there is an automated decision-making process, including profiling;
- the data retention period; and
- the rights provided by the regulations.
- Right of rectification
You have the right to obtain the rectification of your personal data or to complete them when they are incomplete.
- Right to deletion
You have the right to request the deletion of your personal data if they are no longer necessary for the purpose for which they were collected or, where applicable, if we are no longer authorized to process them.
- Right to data portability
You have the right to request data portability in the case of processing your data based on your consent or the execution of a contract, provided that the processing has been carried out by automated means. When exercising this right, you will receive your personal data in a structured, commonly used, and machine-readable format. However, you can also request, when possible, that your data be transmitted directly to another company.
- Right to restrict the processing of your personal data
You have the right to restrict the processing of your data in the following cases:
-
- When you have requested the rectification of your personal data during the period in which we verify its accuracy.
- When you consider that we are not authorized to process your data. In that case, you can request that we limit its use instead of requesting its deletion.
- When you consider that it is no longer necessary for us to continue processing your data and you want us to keep it for the purpose of exercising or defending claims.
- In cases where processing is based on our legitimate interest and you have exercised your right to object to it, you can ask us to limit the use of your data while verifying the prevalence of those interests over yours.
- Right of objection
You have the right to object at any time to the processing of your personal data based on our legitimate interest, including profiling.
Unsubscribe from commercial communications: Remember that you can oppose receiving this type of communication at any time by sending us an email at online@banoidea.com. You can also unsubscribe from this service by following the instructions indicated at the bottom of each electronic communication we send you.
- Right to file a complaint with the Supervisory Authority
Remember that at any time, if you consider that we have violated your right to data protection, you may address the corresponding Supervisory Authority in your defense, in Spain, the Spanish Data Protection Agency (www.agpd.es).
- HOW DO WE GUARANTEE THE CONFIDENTIALITY OF YOUR INFORMATION?
The security of your personal data is a priority for us. Therefore, GRUPARSA DIGITAL has implemented all necessary security measures to ensure effective use and processing of personal data provided by the user, safeguarding their privacy, confidentiality, and integrity, and uses the necessary technical means to prevent alteration, loss, unauthorized access, or processing of your data, according to the state of technology at any given time.
Consequently, we comply with recommended security standards to protect them. However, it is impossible to guarantee total security due to the nature of the internet and because there may be malicious actions by third parties beyond our control.
We commit to acting quickly and diligently if data security is at risk or compromised, and to inform you if it is relevant.
- CHANGES TO THIS POLICY
At GRUPARSA DIGITAL we may modify the content of the privacy policy at any time, especially when legislative, jurisprudential, or interpretative changes by the Spanish Data Protection Agency affect the data processing carried out by GRUPARSA DIGITAL through this Website. Any new version of this Privacy Policy will take effect on the published effective date.
If the revised version includes a substantial change affecting the processing of your data, we will notify you at least 30 days in advance by posting a notice on our website or informing you via email. Despite the above, we recommend that you periodically review this Privacy Policy to stay informed about how your personal data is processed and protected, as well as the rights you have.