Privacy Policy

KINA CHOCOLATES, as responsible for the website in accordance with the provisions of Regulation (EU) 2016/679 of April 27, 2016 (GDPR) regarding the protection of natural persons with regard to the processing of personal data and the free circulation of these data and other current regulations regarding the protection of personal data, and with Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSICE), informs you that it has implemented the necessary security measures, of a technical and organizational nature, to guarantee and protect the confidentiality, integrity, and availability of the data entered.

The data we collect, the way we obtain it, and the purpose of the processing is as follows:

1. Contact form and/or request for information:

• Required data: Name, email, phone
• Purpose: to respond to queries and/or provide information required by the User;
• Legitimation: User consent.

2. Registration form:

• Required data: Name, email
• Purpose: for the creation of a User account and to be able to access the functionalities of the web;
• Legitimation: User consent. Your account may be blocked or canceled if there are indications of the commission of a crime by the User.

3. Newsletter subscription form:

• Required data: Email
• Purpose: send the User commercial information of interest about our products and/or services via email, SMS, social communities, or any other electronic or physical means, if the User has expressly consented;
• Legitimation: User consent.

4. If you contract the service / buy the product through our website:

• Required data: Name, email, phone, address
• Purpose: contracting our service/purchase of our product;
• Legitimation: User consent.

6. Carry out the contractual relationship and the analogous administrative, fiscal, and accounting procedures that are necessary by virtue of current legislation

• Required data: name and surname, phone, address, ID, email, signature;
• Purpose: carry out internal commercial, fiscal, and administrative management;
• Legitimation: consent of the interested party and contractual relationship.

7. Video surveillance: Security of some premises:

• Required data: image;
• Purpose: security of people, goods, and facilities (detailed information in the "video surveillance" section within this privacy policy);
• Legitimation: legitimate interest of the provider.

You can revoke your consent at any time by sending a letter with the subject "Unsubscribe" to the email address listed.

In accordance with the LSSICE, KINA CHOCOLATES does not perform SPAM practices, therefore, it does not send commercial communications by email that have not been previously requested or authorized by the User. Consequently, in all communications you will receive from the provider, the User has the possibility of revoking their express consent to receive our communications.

We will not process your personal data for any other purpose than those described, except by legal obligation or judicial requirement.

Your personal data will not be processed for automated decision-making.

Failure to provide the requested personal data or not accepting this privacy policy implies the impossibility of achieving the purposes described above.

In cases where there is a prior contractual relationship between the parties, the legitimation for the development of administrative, fiscal, and accounting obligations that are necessary by virtue of current legislation will be the prior existence of the commercial relationship established between the parties.

Your data will be kept for as long as the purpose for which it was collected lasts, by legal obligation or judicial requirement, and as long as you do not withdraw your consent or until you exercise your right of deletion or opposition, or limitation of processing. However, we will keep your data within the legally provided deadlines in the applicable provisions.

KINA CHOCOLATES will provide information to the security forces and bodies under judicial order or by obligation of a legal norm. The information provided will only be that available to the provider at that time.

The information you provide us through this website will be hosted on the servers of KINA CHOCOLATES, contracted to the company that provides the web hosting service. The processing of the entity's data is regulated by a data processing agreement between the provider and this company.

KINA CHOCOLATES will carry out international data transfers when using the following tools necessary for the development of the activity, being able to store your data. These tools are the following:

For sending commercial communications, the WIX platform is used, located in Israel, which has an adequacy decision approved by the European Commission.

For e-commerce management, WOOCOMMERCE is used, from the company Automattic, Inc, located in the USA and adhering to the EU-US Privacy Framework, approved by the European Commission.

The information you provide us both through this website and through the application will be hosted on the servers of KINA CHOCOLATES, contracted to the company that provides the web hosting service.

The processing of the data of the aforementioned entities, as well as any other tool used by the provider, is regulated by a data processing agreement between the provider and this company.

As a User-Interested Party, you can request the exercise of the following rights before KINA CHOCOLATES by presenting a letter to the postal address in the heading or by sending an email to info@kinachocolates.com, indicating as subject: "DATA PROTECTION: RIGHTS OF AFFECTED PARTIES".

Rights:

• Right of access: allows the interested party to know and obtain information about their personal data subject to processing.
• Right of rectification: allows correcting errors and modifying data that turn out to be inaccurate or incomplete.
• Right of deletion: allows data that is inappropriate or excessive to be deleted.
• Right of opposition: right of the interested party not to have their personal data processed or to cease it.
• Limitation of processing: involves marking the personal data kept, in order to limit its future processing, for the exercise or defense of claims.
• Data portability: provision of the data subject to processing to the interested party, so that they can transmit it to another controller, without impediments.
• Right not to be subject to automated individual decisions (including profiling): right not to be subject to a decision based on automated processing that produces effects or significantly affects.

As a User, you have the right to withdraw the consent given at any time. The withdrawal of consent will not affect the lawfulness of the processing carried out before.

You also have the right to file a claim with the control authority if you consider that your rights regarding the protection of your data may have been violated (aepd.es).

The data you provide us will be treated confidentially. The provider has adopted all the technical and organizational measures and all the levels of protection necessary to guarantee security in the processing of data and prevent its alteration, loss, theft, unauthorized processing or access, in accordance with the state of technology and nature of the stored data. Likewise, it is also guaranteed that the processing and registration in files, programs, systems or equipment, premises and centers, comply with the requirements and conditions of integrity and security established in current regulations.

The language applicable to this privacy policy is Spanish. Therefore, in case of any contradiction in any of the versions provided in other languages, the Spanish version will prevail.

We inform you that KINA CHOCOLATES may have a presence on social networks. The processing of data carried out on people who become followers on social networks (and/or perform any link or connection action through social networks) of the official pages of KINA CHOCOLATES will be governed by this section, as well as for those conditions of use, privacy policies, and access regulations that belong to the social network that proceeds in each case and previously accepted by the user.

KINA CHOCOLATES will process your data for the purposes of correctly administering its presence on the social network, informing of activities, products, or services of the provider, as well as for any other purpose that the Social Network regulations allow.

The publication of content is prohibited:

• That is allegedly illicit by national, community, or international regulations or that carries out allegedly illicit activities or contravenes the principles of good faith.
• That attempts against the fundamental rights of people, lacks courtesy on the network, annoys or may generate negative opinions in our users or third parties and in general whatever the content that KINA CHOCOLATES considers inappropriate.
• And in general that contravenes the principles of legality, honesty, responsibility, protection of human dignity, protection of minors, protection of public order, protection of private life, consumer protection, and intellectual and industrial property rights.

Likewise, KINA CHOCOLATES reserves the power to remove from the website or the corporate social network, without prior notice, those contents that are considered inappropriate.

In any case, if you send personal information through the social network, KINA CHOCOLATES will be exempt from liability in relation to the security measures applicable to this platform; and the User, in case of wanting to know them, must consult the corresponding particular conditions of the network in question.

In case the User wants to publish their opinion on the web, we inform you that the data provided will be processed to attend to the proposed suggestions, experiences, or opinions regarding the products and/or services to be published on the website and thus be able to help other users. The data will be kept as long as there is a mutual interest to maintain the purpose of the processing and when it is no longer necessary for that purpose, they will be deleted with adequate security measures to guarantee the pseudonymization of the data or total destruction of the same. Testimonials will be published on our website. The only personal data that will be published from the testimony will be your name.

Remarketing is a system that allows creating adapted or personalized ads for users who previously visited a website and in this case, ours. It is a solution associated with Google AdWords with the aim of achieving a better return on investment (ROI). Remarketing inserts a cookie on the user's computer and on sites affiliated with Google Adsense with graphic ads, a banner of the provider is shown.

Retargeting is the technique used to show on other websites, thanks to a tracking system, graphic ads to a user who has abandoned our site without completing a process that we wanted them to finish (registration, purchase, request, etc.), these ads should be mainly oriented to the conversion of the objective of our website.

The information we collect thanks to these functions is collected by the cookies of Meta, "X", Doubleclick, Google AdWords. You can know the data collected by these cookies in the following privacy policies of each service: Meta, "X", Doubleclick, Google AdWords.

If you do not want this information to be collected by these cookies, disable the use of Google cookies through Google's ad settings. You can also disable the use of cookies from a third-party provider through the Network Advertising Initiative opt-out page.

This type of service allows interacting with social networks or other external platforms. The interactions and information obtained by the provider will always be subject to the user's privacy settings on each social network. In case a service is installed that allows interacting with social networks, it is possible that, even if users do not use the service, it collects web traffic data related to the pages where they are installed.

GOOGLE ADWORDS:

AdWords is a Google platform intended for ADVERTISERS who want to advertise on GOOGLE. The provider uses Google AdWords, which is Google's advertising platform. This allows creating campaigns and ads to show them on other websites. When generating an ad, the audience can be segmented by:

• Place;
• Demographic data (age, sex, etc.);
• Interests (activities, hobbies, etc.);
• What they buy on the internet and through other channels;
• Etc.

From the moment the user leaves their data in the form enabled to join the subscription newsletter, the data obtained through Google AdWords is subject to this privacy policy. In no case will the information from Google be used for a different purpose.

The provider may select and publish customer testimonials to the Services. These witnesses may contain personally identifiable information, such as your name and/or city, state, or country in which you live. If you wish your name or testimony to be removed or deleted from the web, you must communicate with the provider with the contact details mentioned above.

The processing of data carried out on people who make a query through WhatsApp of KINA CHOCOLATES will be governed by this section, as well as those conditions of use, privacy policies, and access regulations that belong to the application that proceed in each case and previously accepted by the user. KINA CHOCOLATES will process your data for the purpose of correctly administering your query, as well as any other purpose of the administrative management of the service. Your data is shared with WhatsApp Ireland Limited, whose technical security measures ensure the confidentiality, integrity, and availability of your information, as indicated in its own privacy policy and with WhatsApp LLC, a company located in the USA and adhering to the Data Privacy Framework approved by the European Commission. No further assignments are foreseen, except by legal obligation or judicial requirement. Your data will be kept as long as the purpose for which it was obtained lasts and, once it is no longer necessary, it will be kept duly blocked, archived, and preserved for the legally established time. The use of KINA CHOCOLATES WhatsApp for sending content that is not necessary for the response to the query and that is illicit by national or international regulations that attempt against the fundamental rights of people and in general that contravene the principles of legality, honesty, responsibility, protection of private life, consumer protection, and intellectual and industrial property rights is prohibited.

Images are captured for the purpose of preserving the security of people and goods, as well as facilities.

The user is informed by means of a video surveillance sign located in a place prior to the camera and sufficiently visible that informs that the facilities are under video surveillance.

No assignments are foreseen, except to the Security Forces and Bodies, nor will any international data transfer be carried out.

The images will be kept for a maximum period of 30 days from their capture. Once this period has elapsed, the images must be canceled, in accordance with current regulations. Which provides: "cancellation will give rise to the blocking of data, being kept only at the disposal of Public Administrations, Judges, and Courts, for the attention of possible responsibilities arising from the processing, during the limitation period of these. Once the cited period has been met, deletion must proceed."

KINA CHOCOLATES reserves the right to modify this policy to adapt it to legislative or jurisprudential developments.

The consent given, both for the processing and for the transfer of the data of the interested parties, is revocable at any time by communicating it to KINA CHOCOLATES in the terms established in this Policy for the exercise of rights. This revocation will in no case have retroactive character.

In general, the relations between KINA CHOCOLATES with the Users of its telematic services, present on this website, are subject to Spanish legislation and jurisdiction to which the parties expressly submit, being competent for the resolution of all conflicts derived or related to its use the Courts and Tribunals of the provider's domicile (if not considered as a consumer for the purposes of the TRLGDCU) or the user (if considered as a consumer for the purposes of the TRLGDCU).