Privacy policy
This Privacy Policy aims to inform users about the collection and processing of personal data obtained through the website biosasun.eu (hereinafter "the Website")
BIOSASUN SA complies with the guidelines of Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of these data (RGPD), ensuring at all times to guarantee the correct use and processing of the user's personal data.
WHAT DATA DO WE COLLECT THROUGH THE WEB?
You may visit and use the services of the Website without identifying yourself or revealing any personal information about yourself. We may treat your IP, what operating system or browser you use, and even the duration of your visit anonymously.
The only personal data to which BIOSASUN SA will have access will be those that the user voluntarily provides when contacting BIOSASUN SA through email or in any other way provided on the web.
Specifically, BIOSASUN SA will record the following information:
Data provided through the contact form that, the user interested in obtaining information about our services or making any type of query or request, provides to BIOSASUN SA
- Data provided by sending emails to the addresses identified on the web
- Data provided by completing the forms or using the functionalities offered at all times on the website
WHAT IS THE LEGITIMACY FOR THE PROCESSING OF YOUR DATA?
The legal basis of the treatments is the consent granted by the users given by accepting this Privacy Policy and the corresponding boxes, and will imply that you have been informed and have expressly granted your consent to the content of the clause attached to said form or acceptance of the privacy policy.
FOR WHAT PURPOSE WILL WE PROCESS YOUR PERSONAL DATA?
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), we inform you that the personal data you voluntarily provide us through the different entry forms provided for this purpose on the Website or in any another channel of collection of the same, will be incorporated into the records of treatment responsibility of BIOSASUN SA for the management of the data collected with the following purposes:
- Solve any query, request or request made
- Manage the requested service, answer your request or process your request
- Management, administration, processing of forms, and provision of the requested services
- Maintain and manage the contractual relationship
- Maintain communications of an informative nature that the entity considers of interest through any means voluntarily provided that deal with products and / or services similar to those requested. In which cases, only with the purposes and uses exclusively necessary for which their services were required, not being able to use them for a different purpose. For any assignment other than as specified above, you will be duly informed, and may exercise your right of opposition at any time.
- Perform analysis and improvements on the web about new services
- Unsubscribe from our services
- Any other purpose to which the forms and functionalities offered at all times through the Portal refer
TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?
The data collected are adequate, relevant and not excessive in relation to the scope and purposes described. Your data will be processed and stored in compliance with the security measures described according to current regulations and guaranteeing at all times its integrity and confidentiality.
Your data will not be transferred to third parties, except legal obligation nor will they be shared with companies or entities outside BIOSASUN SA. You are informed of the following possible transfers of your data:
- to public and private bodies necessary for compliance with legal obligations under current regulations
- to professionals and companies of legal advice, consulting and / or audit
- to the data processors necessary for the execution of the corresponding contract for the provision of services
- to companies in charge of our web support and maintenance
- to companies in charge of our support and maintenance of computer system
- to companies in charge of our support and maintenance management software
- to companies in charge of our support and maintenance server and cloud service
- in the event of any international transfer of data when using applications, it would be carried out with strict compliance and with all the necessary guarantees for compliance with European privacy protection policies
- to the rest of companies, entities and collaborators for administrative and / or commercial procedures, for the management of the purposes described above, for the provision of services and the correct management of the entity and its different activities
In which cases, only with the purposes and uses exclusively necessary for the development of its activity for which its services were required, not being able to use them for a different purpose. For any assignment other than as specified above, you will be duly informed, and may exercise your right of opposition at any time.
The consent will be understood to have been given as long as you do not expressly inform us of the revocation of the same to any of the treatments indicated above.
You expressly consent that we may contact you through any means voluntarily provided.
The user of the Website will be solely responsible for the veracity and accuracy of the data provided, acting BIOSASUN SA in good faith as a mere service provider. In case of having provided false data or third parties without their consent to do so, BIOSASUN SA reserves the right to the immediate destruction of the aforementioned data in order to protect the right of the owner or holders of the same, exempting BIOSASUN SA from any responsibility for the breach of this requirement.
BIOSASUN SA undertakes to comply with its obligation of secrecy of personal data and its duty to keep them and will adopt all technical and organizational measures to guarantee the security of personal data and prevent its alteration, loss, treatment or unauthorized access, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed, all in accordance with the provisions of the regulations.
DATA OF MINORS?
We do not process data of children under 14 years of age. Therefore, refrain from providing them if you are not of that age or, where appropriate, from providing data of third parties who do not have the aforementioned age. BIOSASUN SA disclaims any responsibility for non-compliance with this provision.
WHAT RIGHTS DO YOU HAVE?
- To know if we are treating your data or not
- To access your personal data
- To request the rectification of your data if they are inaccurate
- To request the deletion of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw the consent given
- To request the limitation of the processing of your data, in some cases, in which case we will only keep them in accordance with current regulations
- To carry your data, which will be provided in a structured format, commonly used or machine-readable. If you prefer, we can send them to the new person in charge who designates us. It is only valid in certain cases
- To file a claim with the Spanish Agency for Data Protection or competent control authority, if you believe that we have not attended you correctly
- To revoke the consent for any treatment for which you have consented, at any time.
If you modify any data, we thank you for letting us know to keep them updated.
The user of the Website may at any time exercise these rights in the terms established in current regulations, by contacting the person responsible for the treatment:
- By writing to the address of the entity: Ctra. Allo-Arroniz Km 1 31263 Dicastillo (Navarra)
- By email to the address biosasun@biosasun.eu
DO YOU WANT A FORM FOR THE EXERCISE OF YOUR RIGHTS?
We have forms for the exercise of your rights, ask us by email or if you prefer, you can use those prepared by the Spanish Agency for Data Protection or third parties. These forms must be signed electronically or be accompanied by a photocopy of the DNI. If someone is represented, you must attach a copy of your ID, or sign it with your electronic signature.
HOW LONG DOES IT TAKE TO RESPOND TO THE EXERCISE OF RIGHTS?
It depends on the right, but at most in one month from your request, and two months if the issue is very complex and we notify you that we need more time.
HOW LONG WILL WE KEEP YOUR PERSONAL DATA?
- Personal data will be kept as long as you remain linked to us
- Once it is dissociated, the personal data processed for each purpose will be kept for the legally established periods, including the period in which a Judge or Court may request them according to the limitation period of legal actions
- The data processed will be kept as long as the legal deadlines referred to above do not expire, if there is a legal obligation to maintain, or if there is no such legal period, until the interested party requests its deletion or revokes the consent granted
- We will keep all the information and communications related to the provision of our service, while the guarantees of the services last to attend to possible claims
- After the aforementioned periods, the personal data of the users may be blocked and maintained by BIOSASUN SA for the attention of the possible responsibilities arising from the treatment and only during the limitation period of said responsibilities. After this period, the personal data will be deleted by BIOSASUN SA
SECURITY, COOKIES AND IP ADDRESSES?
The Website uses information security techniques generally accepted in the industry, such as firewalls, access control procedures and cryptographic mechanisms, all in order to prevent unauthorized access to data. To achieve these purposes, the user accepts that the provider obtains data for the purposes of the corresponding authentication of the access controls.
NOTIFICATION OF PERSONAL DATA SECURITY BREACHES
In the event of a breach of the security of personal data, unless it is unlikely that such breach of security constitutes a risk to the rights and freedoms of natural persons, BIOSASUN SA will notify the Spanish Agency for Data Protection within 72 hours after it has been aware of the incident, describing the nature of the breach, the possible consequences that may arise and the measures taken or proposed to remedy the security breach; and if possible, it will be made known what are the categories and the approximate number of interested parties and data affected.
Likewise, BIOSASUN SA will notify the interested parties, as soon as possible, when it is likely that the breach of the security of personal data entails a high risk to the rights and freedoms of natural persons, describing the possible consequences that may arise and the measures adopted or proposed to remedy the security breach.
USE OF COOKIES AND THE ACTIVITY FILE
If we use other types of cookies than those necessary, you can consult the cookies policy in the corresponding link from the beginning of our website.
The provider on its own account or that of a third party contracted for the provision of measurement services, may use cookies when a user browses the Website. Cookies are files sent to the browser through a web server in order to record the user's activities during their browsing time. The cookies used by the Website are only associated with an anonymous user and his computer, and do not themselves provide the user's personal data. Through the use of cookies it is possible that the server where the website is located, recognizes the web browser used by the user in order to make navigation easier, allowing, for example, access to users who have previously registered, access to areas, services, promotions or contests reserved exclusively for them without having to register on each visit.
They are also used to measure the audience and traffic parameters, monitor the progress and number of entries. The user has the possibility to configure his browser to be notified of the reception of cookies and to prevent their installation on his computer. Please refer to the instructions and manuals of your browser for more information. To use the Website, it is not necessary for the user to allow the installation of cookies sent by the Website, or the third party acting on their behalf, without prejudice to the fact that it is necessary for the user to start a session as such in each of the services whose provision requires prior registration or login. The cookies used on this Website are, in any case, temporary in nature with the sole purpose of making their subsequent transmission more efficient. In no case will cookies be used to collect personal information.
IP ADDRESSES
The servers of the Website may automatically detect the IP address and domain name used by the user. An IP address is a number automatically assigned to a computer when it connects to the Internet. All this information is recorded in a duly registered server activity file that allows the subsequent processing of the data in order to obtain only statistical measurements that allow to know the number of page impressions, the number of visits made to the web services, the order of visits, the access point, etc.