The Owner informs you about their Privacy Policy regarding the processing and protection of personal data of users that may be collected during browsing through the Website: https://byarett.com

In this regard, the Owner guarantees compliance with the current regulations on the protection of personal data, as established in Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD GDD). It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (GDPR).

Use of the Website implies acceptance of this Privacy Policy. as well as the conditions included in the Legal Notice.

Identity of the Data Controller

• Responsable:  Nazaret Menacho Andades.
• NIF: ******89L
• Registered address:  Agroturisme Son Pons, Balearic Islands – Spain.
• Email address:  Info@byarett.com
• Website:  https://byarett.com

Principles Applied in Data Processing

In processing your personal data, the Owner will apply the following principles in accordance with the requirements of the new European data protection regulation (GDPR):

• Lawfulness, Fairness, and Transparency Principle: The Owner will always require consent for the processing of personal data, which may be for one or several specific purposes about which the Owner will inform the User beforehand with complete transparency.
• Data Minimisation Principle: The Owner will request only the data strictly necessary for the purpose or purposes for which it is requested.
• Principle of storage limitation: The Data Controller shall retain the personal data collected only for as long as strictly necessary for the purpose or purposes of the processing. The Data Controller shall inform the User of the applicable retention period according to the specific purpose.
  In the case of subscriptions, the Data Controller shall periodically review the lists and delete any records that have been inactive for a considerable period of time.
• Principle of integrity and confidentiality: The personal data collected shall be processed in such a way as to ensure its security, confidentiality, and integrity.
  The Data Controller takes the necessary precautions to prevent unauthorised access to, or misuse of, users’ data by third parties.

Collection of personal data

To browse the website, it is not necessary to provide any personal data.

The situations in which you do provide your personal data are as follows:

• When contacting us via contact forms or by sending an email.
• When posting a comment on an article or on a page.
• When subscribing through a subscription form or newsletter managed by the Data Controller. MailChimp.
• When subscribing through a subscription form or newsletter managed by the Data Controller. SendinBlue.
• When subscribing through a subscription form or newsletter managed by the Data Controller. MailPoet.

Rights

The Data Controller informs you that you have the right to:

• Request access to the stored data.
• Request rectification or erasure.
• Request the restriction of its processing.
• Oponerse al tratamiento.
• Request the portability of your data.

The exercise of these rights is personal and must therefore be exercised directly by the data subject, by requesting them directly from the Data Controller. This means that any client, subscriber, or collaborator who has provided their data at any time may contact the Data Controller to request information about the data held, how it was obtained, request the rectification of the data, object to the processing, restrict its use, or request the deletion of that data from the Data Controller’s files.

To exercise your rights, you must send your request along with a photocopy of your National Identity Document or equivalent to  the email address: Info@byarett.com

The exercise of these rights does not include any data that the Data Controller is required to retain for administrative, legal, or security purposes.

You have the right to effective judicial protection and to lodge a complaint with the supervisory authority, in this case, the Spanish Data Protection Agency, if you consider that the processing of your personal data infringes the Regulation.

Purpose of personal data processing

When you connect to the Website to send an email to the Data Controller, post a comment on an article or a page, subscribe to the newsletter, you are providing personal information for which the Data Controller is responsible. This information may include personal data such as your IP address, full name, physical address, email address, phone number, and other information. By providing this information, you give your consent for your information to be collected, used, managed, and stored by — Hostsuar — only as described on the pages:

• Legal Notice
• Privacy Policy

The personal data and the purpose of processing by the Data Controller vary depending on the information capture system:

• Contact forms: The Data Controller requests personal data which may include: full name, email address, telephone number, and website address, for the purpose of responding to Users’ enquiries..
  For example, the Data Controller uses this data to respond to messages, questions, complaints, comments, or concerns that Users may have regarding the information included on the Website, the processing of personal data, matters relating to the legal texts included on the Website, as well as any other query the User may have that is not subject to the Website’s terms and conditions.
• Comment forms: The Data Controller requests personal data which may include: full name, email address, and website address, for the purpose of responding to Users’ comments.
• Subscription forms: The Data Controller requests the following personal data: full name, email address, telephone number, and website address to manage the subscription list, send newsletters, promotions, and special offers. The personal data provided to the Data Controller will be stored on the servers of The Rocket Science Group LLC d/b/a (Mailchimp), based in the USA.

There are other purposes for which the Data Controller processes personal data:

• To ensure compliance with the terms set out in the Legal Notice page and the applicable law. This may include the development of tools and algorithms that help the Website guarantee the confidentiality of the personal data it collects.
• To support and improve the services offered by this Website.

• To manage social media. The Data Controller has a presence on social media platforms. If you follow the Data Controller on social media, the processing of your personal data will be governed by this section, as well as by the terms of use, privacy policies, and access regulations of the relevant social network, which you have previously accepted.
  You can consult the privacy policies of the main social networks at these links::

  • Facebook
  • Twitter
  • Linkedin
  • YouTube
  • Instagram

  The Data Controller will process your personal data for the purpose of properly managing their presence on the social network, informing you of their activities, as well as for any other purpose permitted by the social networks’ regulations.

  Under no circumstances will the Data Controller use followers’ social media profiles to send individual advertising.

Security of personal data

To protect your personal data, the Data Controller takes all reasonable precautions and follows industry best practices to prevent its loss, misuse, unauthorised access, disclosure, alteration, or destruction.

The website is hosted at: Hostsuar. Data security is guaranteed, as they take all necessary security measures. You can consult their privacy policy for more information.

The Data Controller informs the User that their personal data will not be disclosed to third parties, except where such disclosure is required by law or when the provision of a service involves the need for a contractual relationship with a data processor. In the latter case, the data will only be disclosed to the third party when the Data Controller has the User’s express consent.

However, in some cases collaborations with other professionals may take place; in such cases, the User’s consent will be required, informing them about the identity of the collaborator and the purpose of the collaboration. This will always be done in accordance with the strictest security standards.

Content from other websites

Pages on this Website may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in exactly the same way as if you had visited the other website directly.

These websites may collect data about you, use cookies, embed additional third-party tracking code, and monitor your interaction using this code.

Cookie Policy

For this Website to function properly, it needs to use cookies, which are pieces of information stored in your web browser.

Legal basis for data processing

The legal basis for processing your data is:

• The data subject’s consent.

Categories of personal data

The categories of personal data processed by the Data Controller are::

• Identifying data.
• No categories of special category data are processed.

Retention of personal data

The personal data provided to the Data Controller will be retained until you request their deletion.

Web browsing

When browsing the Website, non-identifying data may be collected, which may include IP address, geolocation, a record of how services and sites are used, browsing habits, and other data that cannot be used to identify you.

The Website uses the following third-party analytics services::

The Data Controller uses the information obtained to gather statistical data, analyse trends, manage the site, study browsing patterns, and collect demographic information.

El Titular no se hace responsable del tratamiento de los datos personales que realicen las páginas web a las que pueda acceder a través de los distintos enlaces que contiene el Sitio Web.

Accuracy and truthfulness of personal data

You commit to ensuring that the data provided to the Data Controller is correct, complete, accurate, and up to date, as well as to keeping it properly updated.

As a User of the Website, you are solely responsible for the truthfulness and accuracy of the data submitted to the Website, releasing the Data Controller from any liability in this regard.

Acceptance and consent

As a User of the Website, you declare that you have been informed of the conditions regarding the protection of personal data, and you accept and consent to their processing by the Data Controller in the manner and for the purposes indicated in this Privacy Policy.

To contact the Data Controller, subscribe to a newsletter, or post comments on this Website, you must accept this Privacy Policy.

Changes to the Privacy Policy

The Data Controller reserves the right to modify this Privacy Policy to adapt it to legislative or judicial developments, as well as industry practices.

These policies will remain in effect until they are modified by duly published updates.