Privacy Policy

 

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, relating to the protection of natural persons in respect of Regarding the processing of personal data and the free circulation of these data, and the Spanish regulations that develop it, this Privacy Policy contains information on the way in which we treat the personal data of the people who use the services available on this website and, where applicable, in the associated mobile application (the “Platform”). This Privacy Policy is intended to help you understand in a clear and simple way what type of information we collect, why We use it and what your rights are.

 

Who is responsible for the processing of your data?

 

The person responsible for the processing of your personal data is HERMENEUS WORLD, S.L. (hereinafter, “Hermeneus World”), a company of Spanish nationality with registered office at Plaza Ibaiondo 1, 2ª plant - office 210, 48940 Leioa (Bizkaia), and with C.I.F. B-95654950. You can consult our contact information on our Platform.

 

What? types of personal data do we process?

 

In general, you do not need to provide us with any personal data to navigate through the Platform and consult the information available therein. However, depending on your use of our services, we need you to provide us with certain data or we will obtain certain information derived from your use of the Platform. The personal data that we may collect can be classified into the following general categories.

 

Data you provide us. Refers to the data that you voluntarily provide to us when you create an account with us, when you place an order, when you subscribe to our newsletter or when you complete the contact form to ask us a question. or request assistance. We will only request the data that is necessary in each case and the form itself will specify those that must be completed.

 

This data may simply consist of an email address (for example, when you subscribe to our newsletter) or other identification and contact data when you create an account and/or place an order (email, password, first and last name, telephone number and postal address). It may also include data related to orders and purchases made through the Platform (details of orders placed, purchase history, etc.), information related to the use made of the Platform through s of the user account or the one that you may provide us when you contact us. Regarding transactions carried out through the Platform, Hemerneus does not store the data of the credit card used to pay for orders, since this information is processed only by the financial entity that operates the gateway. payment enabled on the Platform, with due security measures.

 

Technical information that is collected automatically. Refers to certain information you ;technique that is collected automatically when you access our Platform and use its functionalities. Whenever you access a website or application or use Internet services, some technical data is created and recorded automatically. The same thing happens when you use our Platform. This information may include technical data about your device or your browser settings (such as IP address, type of device, browser or operating system you use, date/time of access to your user account). This type of data is used to allow you to use the features of the Platform appropriately according to the parameters of your device and/or browser, manage the security of our computer systems, prevent fraud and unauthorized access to accounts. and diagnose problems and avoid technical incidents. 

 

Some of this information is processed through “cookies”. The "cookies" They are small text files that are generated on your computer or device every time you visit a website or browse the Internet. Cookies can be of different types and fulfill different functions (for example, allowing you to access your user account without having to register each visit). You can always block, manage and delete cookies through the appropriate settings on your browser or device. For more information about the cookies used on the Platform, review our Cookies Policy.

 

With what? What purpose do we process your data and what is the basis of legitimacy?

 

The purposes for which we will use your data will depend on the reason for which you have provided it to us in each case and the relationship you maintain with us. Next, we explain how acute; purposes we will use your data depending on each case and what is the legal basis of legitimacy for the processing of your data.

 

To allow you to use the functionalities of the Platform and provide you with the associated services.  When you create an account on our Platform, we process your data to allow you to access and use the functionalities of our Platform, to provide you with our services and to manage our relationship with you as a registered user, all in accordance with the Terms and Conditions of Use of the Platform.

 

In this context, we will process your data for the following main purposes:

 

 

When you make a purchase on our Platform, we will process your data to process and process the order and manage all associated processes, mainly for the following purposes:

 

 

The main legal basis for the processing of your data consists of the provision of services derived from your status as a registered user and the execution of our obligations. contractual in accordance with our Terms and Conditions of Use: that is, the processing of your data for these purposes is necessary so that you can make use of the functionalities and services that we provide you through the Platform. In particular, with regard to orders, the processing of your data is based on the execution of our obligations as operator of a platform that allows the user-buyer to purchase products directly from the businesses that sell them: that is, , the processing of your data for these purposes is necessary so that we can properly process and manage the orders you decide to place. In this sense, given that the work of Hermeneus World consists of providing an intermediation platform between the user-buyer and the merchant-seller, you should know that the processing of your data in this area implies that, when you make a order, some of your personal data (name and surname, shipping address, email and telephone, if applicable) will be shared with the business whose products are part of your order, so that the respective business can adequately attend to and manage its preparation and delivery and, where appropriate, resolve any incident that may arise during the process. Likewise, when you have selected the home delivery option, your identification and contact information (name and surname, shipping address and telephone number) may be shared with the transport agency so that it can be sent to your home. This can proceed with the delivery of the order to the indicated address and, where appropriate, manage directly with the user-buyer any issue that may arise in the delivery process.

 

Also, sometimes, the processing of your data may be covered by other bases. For example, we only process geolocation data with your consent if you have authorized it through your device settings (and only until you decide to deactivate this setting) and we may also process your data based on our legitimate interests or to comply with our legal obligations (for example, ensuring the security of our Platform and managing technical incidents, verifying compliance with our Terms and Conditions, preventing fraud or suspicious activities with respect to transactions carried out, to fulfill our billing obligations, etc.).

 

To answer questions, requests or queries. If you contact us through any of our channels, we use your data to adequately respond to your requests, respond to the queries you transmit to us or send you the information you request from us in each case. If you contact us to establish any type of commercial or contractual relationship, we may use the data provided to initiate, manage and develop such relationship. In this case, the basis of legitimacy is our legitimate interest in adequately addressing the queries and requests we receive from people who voluntarily contact us and provide us with their contact information for this purpose.

 

To manage surveys and promotions. If you voluntarily decide to participate in any survey or promotion that we may launch at some point , we may process the data that you provide us for the purposes that we have indicated in each case. Typically, treatment will take The purpose is to know your opinion on those questions that we ask you in the survey. In the case of promotions, the treatment will depend on the of the purpose and content of the promotion. In these cases, the basis of legitimacy is your consent by voluntarily participating in the survey or promotion, as well as your consent. as our legitimate interest in analyzing your responses and opinions and, in the case of promotions, the execution of what is stipulated in the regulatory bases of the promotion.

 

For security, analysis and improvement purposes. We may process the data for the purpose to prevent the security of our systems, detect fraudulent activities, diagnose and resolve technical incidents, know how our Platform is used and identify improvements. In this case, we process the information on the basis of our legitimate interest because we understand that, in order to offer the best possible service and user experience, it is reasonable and necessary in order to try to ensure that the Platform is secure. and works properly and to improve and optimize its operation and our services at all times.

 

To keep you informed about news and promotions. Occasionally, we may use your data to keep you informed by email about related news with the Platform that may be of interest to you or to send you commercial communications related to promotions or information related to the type of products available on the Platform. In the event that you are a registered user and/or have purchased products through the Platform, and in consideration of the relationship you maintain with us, we may do so on the basis of our legitimate interest. We do not hesitate to keep you informed about news related to the Platform or about products similar to those you have purchased. Otherwise, we will only process your data for these purposes based on your consent, in case you voluntarily subscribe to our newsletter or expressly indicate to us that you want to receive this type of communications through the appropriate boxes. In both cases, you can reject the receipt of this type of communications at any time by clicking on the option that you will find in all the communications we send you or by sending us an e-mail requesting unsubscription.< /p>

 

To comply with our legal obligations. We may process certain personal data to comply with certain legal obligations. and contractual to which we are subject in each case (for example, in terms of billing), as well as as well as to maintain the necessary records for the exercise or defense of our rights against potential claims or requirements, based on our legitimate interests.

 

How do we protect data?

 

We take reasonable technical and organizational measures in accordance with industry standards to provide adequate protection and security of personal information against loss, use improper access, unauthorized access or alteration. Our technological solutions include the usual security standards in the sector. These security measures include data encryption, the use of firewalls and access controls to our business information. In addition, at Hermeneus World we ensure the security of our users' information; For this reason, our website has SSL certificates (https) to guarantee secure navigation through the website. SSL certificates guarantee a secure transmission of information over the Internet, since the transmission of data between the server and the web user occurs in an encrypted manner.

 

Although we strive to maintain the security of our systems, since no information system can be completely secure, you should be aware that no company can guarantee absolute security of its information. ;n. The security and protection of your personal information also depends on you. Therefore, it is the responsibility of each user to maintain the confidentiality and security of their passwords, their account information and their devices against possible unauthorized use by third parties.

 

In what? What cases and with whom is the data shared?

 

We want you to know that Hermeneus World will under no circumstances market with your personal data. If we transfer or share personal data with third parties, it will be only because we have the consent of the interested party, because we are legally obliged to do so or because it is necessary to provide you with our services or fulfill our obligations towards you. Next, we show you who and in what We can share certain cases.

 

Businesses and transport agencies (to process your orders and manage their shipping). As we have described previously, When you place an order on our Platform, we need to provide your identification and contact information to the business with which you placed the order and, if you have requested the home delivery option, to the transport agency, to They can proceed with the management, preparation and delivery of the order under the terms you have requested and eventually to be able to manage any incident or issue that arises during the process. Likewise, to process order payments, the financial entity that manages and operates the payment gateway enabled on the Platform will process payment data with the due security measures legally required.

 

Service providers. Like any other company, Hermeneus World needs to use external suppliers who provide us with various services in the context of our business and entrepreneurial activities (for example, computer hosting, support for our customer services, auditors, etc.). To provide their services to us, our suppliers may have limited access to certain business information, which may sometimes include personal data of our customers. In these cases, our suppliers process personal data on our behalf and under our instructions, only for the purpose of providing their services to us and with due contractual guarantees. If we use suppliers located outside the European Economic Area and the data may be subject to an international transfer, we ensure that they are located in countries for which the European authorities have declared that they offer equivalent guarantees. We will comply with those of the European Union or, where appropriate, we will apply the mechanisms required under European regulations (such as the subscription to standard contractual clauses approved by the European Commission).

 

Judges, security forces and bodies and authorities (to comply with legal obligations or official requirements). < /strong>We may occasionally share certain information with competent authorities (judges and courts, security forces or bodies or public authorities or administrations) when necessary to comply with our legal obligations or comply with official requirements of such authorities. or public bodies in the exercise of their powers, or for the exercise of or defense against legal claims. 

 

If we eventually participate in a merger, business restructuring, transfer of assets or similar corporate operations, we may share certain data when necessary and reasonable in the context of the successful completion of the operation in accordance with our legitimate interests.

 

What is the retention period?

 

We process personal data only as long as we need to do so to provide you with our services and fulfill the purposes for which in each case we use them. you have provided, as described in this Privacy Policy. If you have registered on our Platform and have a user account with us, we will process your data until you decide to cancel your account (which you can at any time from the personal area of your account or by sending an email to info@hermeneus.es). From that moment on, we will stop processing your data except to the extent that at that time there are orders in progress or processes pending completion, until they have been completed.

 

Once the purposes for which they were collected have been fulfilled, we will stop processing your data and will only keep it to the extent We need to do so to satisfy our legal obligations until they expire (for example, to comply with our tax and billing obligations) or for the exercise or defense of claims arising from your contractual relationship with us or the treatment carried out. . In these cases, we will process the data solely for these purposes and only until our legal obligations or responsibilities expire.

 

What are your rights?

 

If we are processing your data, you can exercise the rights conferred on you by current legislation at any time. These rights include the following possibilities:

 

Access and rectification. You have the right to request access to the personal information we hold about you, as well as How to rectify your data if it is inaccurate or not updated. If you have a user account with us, you can do so from the personal area of your account; Otherwise, you can do so by contacting us.

 

Deletion. You can ask us to delete your personal information, for example, when it is no longer available. It is not necessary for the purposes for which it was collected, unless there is a legal obligation to preserve it or other legitimate reasons requiring its conservation do not prevail.

 

Objection. Under certain circumstances, you can object to us processing your personal information for certain processing purposes or activities. , even if we rely on a legitimate interest to do so. In some cases and after a case-by-case evaluation, we can demonstrate that there are legitimate reasons that justify continuing to process your personal information.

 

Limitation. Under certain legally established cases, you may have the right to request that we limit the processing of your personal information , for example, when you question the accuracy of that information, in which case you can only be kept for the exercise or defense of claims.

 

Portability. You have the right to request the portability of your data for reuse. This right allows us to receive the personal data that we have obtained from you in a structured, commonly used and mechanically readable format and, if technically feasible, to transmit it directly to another person in charge that you indicate to us.

 

When we use your data for any purpose based on your consent, you can withdraw your consent at any time. For example, you can withdraw your consent for us to use your data for marketing purposes by clicking on the “unsubscribe” option. that you will find in all our commercial communications. In any case, the legality of the processing carried out until the moment you withdraw your consent will not be affected. affected.

 

To exercise your rights, you must send us a written communication to our postal or electronic address, detailing your application and proving your identity with a copy of your DNI or equivalent official documentation. To do this, you can use the models and forms provided by the Spanish Data Protection Agency on its website www.aepd.es

 

If you consider that we have failed to comply with the applicable regulations or have not complied with your rights, you have the right to file a complaint with the corresponding data protection authority (in Spain, the Spanish Data Protection Agency, www.aepd.es). In any case, we would appreciate it if you would first give us the opportunity to resolve any questions or complaints you may have.

 

What are your obligations?

 

When you provide us with your data, you must provide us with lawful, truthful and updated data. Hermeneus World declines any type of responsibility derived from the provision of false, inaccurate or outdated data.  If you have an account with us, you can rectify or update your information at any time through your account. You must refrain from providing us with personal data of third parties and, if you do, you must previously and under your sole responsibility inform them of the points set out in this Privacy Policy and obtain their consent to do so. In no way will we be responsible of the possible consequences of not doing so. 

 

Our Platform is intended for people over 18 years of age. Therefore, if you are a minor, you must refrain from providing us with your data. By registering, users guarantee that they are of legal age and assume that Hermeneus World reserves the right to prevent the registration or delete the account of any user who does not meet this requirement or does not properly accredit it if required to do so.

 

Modifications

 

We may modify this Privacy Policy to adapt it to future regulatory changes, as a result of changes in the nature of our services or in the event that we modify the way in which we treat information. n staff. In such case, we will update the content of the Privacy Policy available on our Platform and, if the changes are significant, we will notify the changes more prominently through a notice on our Platform or we will inform you of it by email. electronic. In any case, if it is required by law, we will ask for your consent. Continuing to actively use our services after we inform you of the changes will result in your continued use of our services. acceptance of the introduced modifications. The processing of your data will be carried out in accordance with the current version of this Privacy Policy at all times.