Privacy policy
Privacy policy and cookie policy
Introduction
- The privacy of our website visitors is very important to us, and we are committed to protecting it. This policy explains what we do with your personal data.
- The provision of personal data, as well as your consent to its processing, is completely voluntary. Any personal data you provide to us is only processed to the extent and for the purpose for which you have consented. However, if you decide not to provide us with the necessary data for processing your order and do not consent to its processing, we will not be able to process your order. You have the right to update or completely delete your personal data at any time.
- Agreeing to the use of cookies in accordance with the terms of this policy on your first visit to our site allows us to use cookies on each subsequent visit to our site.
General provisions
- This privacy policy is for information purposes only, not a source of obligation for users.
- The administrator of personal data collected through the Online Shop is “GUSAK GOURMET NATURAL, SOCIEDAD LIMITADA,” registered under NIF number B56745490, headquartered at Parcerisa Nº 27, Floor 3, DOOR 9 - Barcelona, Spain. 08014.
- Personal data is processed in accordance with the law, including Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (RODO) and the Act of 10 May 2018 on the protection of personal data.
- The controller ensures that personal data is processed lawfully, fairly, and transparently, without adversely affecting the subject's rights.
- Terms defined in this policy are understood as in the Online Shop Regulations.
Purpose of personal data collection, scope of personal data collection and legal basiss
-
Below we indicate the purposes of processing your personal data, the types of personal data subject to processing and the legal basis for processing:
- Purpose: performance of the contract and taking action at your request before the conclusion of the contract, including: payment, delivery, returns, warranty claims; Scope of personal data: name, surname, address, delivery address, email address, telephone number, payment information, order details; Legal basis: article 6(1)(b) RODO;
- Purpose: to create an account in the Online Shop and register as a Customer; Scope of personal data: name, surname, address, email address, telephone number, date of birth, order history, payment information and payment history, click and browse history (cookies) Legal basis: article 6(1)(a) RODO - requires your consent;
- Purpose: to respond to enquiries sent by the Customer via the contact form carried out by the Administrator - running and developing the business, nurturing the relationship with the Customer; Scope of personal data: name, surname, email address; Legal basis: article 6(1)(f) RODO;
- Purpose: sending a newsletter; Scope of personal data: first name, last name, email address; Legal basis: article 6(1)(a) RODO - requires your consent;
- Purpose: direct marketing - we will recommend our products to you by email or text message and inform you of discounts and offers that may be of interest to you; Scope of personal data: name, address, email, telephone number, products and offers clicked on; Legal basis: article 6(1)(f) RODO;
- Purpose: administration, development, protection of our business and improvement of our services and products; Scope of personal data: order history, delivery information, payment details, click and browsing history (cookies); Legal basis: Article 6(1)(f) RODO;
- Purpose: to analyse your activity on our website in order to improve our website, products and customer relationships, and to display advertisements for our products and tailor content to customer preferences; all data used for these purposes is anonymised; Scope of personal data: details of your device, IP address, browser type and version, location, operating system, information about your activity in our Store, such as how you use it, the products you search for; Legal basis: article 6(1)(f) RODO;
- Purpose: to comply with legal obligations; Scope of personal data: name, address, payment information and order details; Legal basis: article 6(1)(c) RODO;
- Purpose: investigation and defence of claims; Scope of personal data: name, address, payment information, order details; Legal basis: article 6(1)(f) RODO;
- Your privacy settings can be used to limit the publication of your information on our website, and can be adjusted using the website's privacy controls.
- We will not, without your express consent, supply your personal information to any third party for their or any other third party's direct marketing.
- Before you disclose to us the personal data of another person, you must obtain that person's consent to both the disclosure and the processing of that personal data in accordance with this policy.
- We may use profiling on our Store, which involves the automatic processing of personal data to verify aspects of Customers. We only use profiling for marketing purposes, as this allows us to better understand your preferences regarding our products and to tailor our offerings to your needs.
Transfer of personal data
- Your trust is crucial to us, which is why we do not sell any of your personal data to third parties. However, in order to provide our products and services and to run our business, we may disclose and share your data with the following categories of recipients:
- business partners who support us in running our business, such as:
- technical service providers;
- companies that enable us to fulfil your order, such as: online payment providers, courier companies, warehouses;
- the bank that operates our company bank account;
- companies providing marketing communication and advertising services;
- companies providing email, text and postal services on our behalf;
- lawyers, accountants, auditors who provide professional services to us;
- to authorities if we are legally obliged to disclose your personal information.
- business partners who support us in running our business, such as:
- Please note that many of these data recipients have an independent right or obligation to process your personal data.
- We may disclose your personal data to any of our employees, officers, agents, suppliers or subcontractors as necessary for the purposes set out in this Privacy Policy.
International data transfers
-
The information we collect may be stored and processed in each of the countries in which we operate and may be transferred between those countries to enable the use of the information in accordance with this Privacy Policy.
The information we collect may be transferred to the following countries that do not have data protection laws equivalent to those of the European Economic Area: United States of America, Russia, Japan, China and India.
Personal data that you publish on our website or submit for publication on our website may be accessible via the Internet throughout the world. We cannot prevent the use or misuse of such information by others.
Period of retention of personal data
-
The duration of storage of your personal data will only be determined to the extent that it is necessary for the purposes for which it is collected.
Your personal data processed for the purpose of entering into and performing a contract will be retained for as long as the contract is in force and, after the expiry of the contract, for the period necessary to secure or assert claims and to comply with any obligations laid down by law.
Personal data used to fulfil legal obligations or legitimate interests will be kept for as long as the law requires it to be recorded and processed.
Where your personal data is processed on the basis of consent, it may be stored until you withdraw your consent or object to the processing or until it is no longer necessary to fulfil the purpose. After this time, your data will be stored until the expiry of the limitation period for claims.
Security of personal data
-
We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal data.
We will store all personal information you provide on our secure servers (password and firewall protected).
All electronic financial transactions made through our website will be protected by encryption technology.
You acknowledge that the transmission of information over the Internet is potentially dangerous and the security of data transmitted in this way is not guaranteed.
You are responsible for maintaining the confidentiality of the password you use to access our website; we will not ask you for your password (except when you log on to our website).
Revisions
- This policy may be updated from time to time by posting a new version on our website. You should check this page from time to time to ensure that you understand any changes to this policy. We may notify you of changes to this policy via email or the private messaging system on our website.
Your rights
-
Under current data protection legislation, you have the following rights:
- The right to access your personal data - you have the right to access your personal data and to obtain a copy of the personal data we hold about you;
- The right to rectification of your personal data - you have the right to have your personal data rectified if it is out of date or incomplete;
- The right to erasure of your personal data - you have the right to request that we erase your personal data if there is no reason for us to continue processing it. However, we may not always be able to completely erase your personal data - for example, when we need it to comply with legal obligations;
- The right to restrict the processing of your personal data - entitles you to request that we restrict the processing of your personal data in certain situations;
- The right to data portability - you have the right to receive a digital copy of your personal data. You also have the right to request the transfer of your personal data to another controller. This right is limited to situations where the processing is carried out by automated means and concerns personal data processed on the basis of your consent or on the basis of a contract;
- The right to object to the processing of your personal data - you have the right to object to the processing of your personal data at any time, on grounds relating to your particular situation. You also have the right to object to the processing of your personal data for direct marketing purposes;
- The right to lodge a complaint - if you have any complaints about the way we process your data, you have the right to lodge a complaint with the President of the Personal Data Protection Authority.
We will respond to your requests without undue delay, at the latest within one month of your request. This period may be extended if necessary - we will notify you of any such case.
The provision of personal data in our Store is voluntary, however, it is necessary in order to use most of the Store's functionalities, in particular to place an order and perform a contract. Failure to provide personal data may result in the impossibility to perform most activities in our Online Shop.
Third Party Websites
- Our website contains hyperlinks to third party websites and detailed information about them. We have no control over and are not responsible for the privacy policies and practices of third parties.
Updating personal information
- Please let us know if you need to correct or update any personal information we hold about you.
Cookies
-
Cookies are textual information in the form of text files, sent by a server and stored on the side of the person visiting the website of the Online Shop. Your personal data, which is downloaded automatically when you enter the Website:
The IT system used by the Online Shop automatically collects in logs data related to the device you use when connecting to the Online Shop. This data is collected only for statistical purposes and relates to: type of device, operating system, type of Internet browser, screen resolution, color depth, IP, Internet Service Provider and is used only in the process of optimization to ensure the greatest possible comfort of use.
"Cookie" files - the Administrator may process data contained in cookies while using the website of the Internet Shop for the following purposes: to identify Service Recipients as logged in to the Internet Shop and to show that they are logged in; to record Products added to the shopping cart for the purpose of placing an Order; to remember data from completed Order Forms, surveys or login data to the Internet Shop; to adapt the content of the Internet Shop website to the individual preferences of the Service Recipient (e.g., regarding colors, font size, page layout) and optimization of the use of the Internet Shop's pages; to keep anonymous statistics presenting the manner of use of the Internet Shop's website. If you do not agree to cookies being placed on your device, you may block them by configuring your Internet browser accordingly. Information on how to do this can be found in the help files of your internet browser.
Google Analytics (cookies) - Google Analytics uses "cookie" technology, i.e., text files placed on your device, to enable the webshop to analyze traffic sources and the way in which visitors use the webshop. Google collects the data obtained from the placement of cookies on your device on its servers and uses this information to create reports and provide other services related to traffic and internet usage. Google may also transfer this information to third parties where it is required to do so by law or where such third parties process such information on Google's behalf.
Google AdWords (cookie) - Google AdWords uses "cookie" technology, i.e., text files placed on your device, to enable the Online Shop to evaluate the correctness and effectiveness of its advertising activities using the AdWords network. Google collects the data obtained from the placement of cookies on your device on its servers and uses this information to create reports and provide other services related to traffic and internet usage. Google may also transfer this information to third parties if required to do so by law or if these parties process such information on Google's behalf.
The Administrator points out that most web browsers available on the market accept the storage of cookies by default. You have the possibility to determine the conditions for the use of cookies through your own browser settings. The browser's cookie settings are relevant in terms of consent to the use of cookies by the Online Shop - according to the regulations, such consent may also be expressed through browser settings. In the absence of such consent, the cookie settings of your internet browser must be changed accordingly. Detailed information on how to change the cookie settings and delete them yourself in the most popular web browsers is available in the help section of your web browser.
The Administrator also processes anonymized usage data related to the use of the Online Shop (IP address, domain) to generate statistics to help administer the Online Shop. This data is aggregated and anonymized, i.e., it does not contain any identifying characteristics of persons visiting the website of the Internet Shop. This data is not disclosed to third parties.
We value your privacy and the information you agree to share in connection with our SMS marketing service. We use this information to send you text notifications (about your order, including reminders about abandoned purchases), marketing offers, and transactional texts, including requests for feedback from us. Our website uses cookies to track the items you put in your basket, including when you have abandoned a transaction. This information is used to determine when to send shopping cart reminders via SMS.