Notice: Undefined offset: 1 in /home/parafina/public_html/modules/wevarnishcache/wevarnishcache.php on line 384
privacy policy - Parafina & Co

PRIVACY POLICY

1. OBJECT:
The parafina.co website (hereinafter "Website") is managed by MASAYA COMPLEMENTOS S.L. (hereinafter “MASAYA”) and the applicable security and privacy measures on this website have been defined and developed to guarantee that personal information is processed correctly in compliance with local and international safety and privacy regulations. This policy illustrates how MASAYA, directly or through its subsidiaries, collects and/or uses personal information, how this information is shared and how one may access, change or delete personal information. MASAYA acknowledges and complies with the individuals’ right to privacy regarding personal information. As proof of its commitment towards privacy, MASAYA has defined this policy within the wider scope of a global management model on privacy, to ensure total compliance with privacy as the foundation of MASAYA’s company culture. All personal information supplied by you through this website is used exclusively for the objectives described below.  
1.1 RESPONSIBILITY OF DATA PROCESSING:
Any personal information given or collected by connecting to the website will be processed by MASAYA as data controller. Personal information will be processed by the MASAYA staff deputed to handle the personal information collected in relation to your use of this Website (including, but not limited to): Staff authorised to manage the website and supply the related services, e.g. customer services, management of MASAYA Computer Systems; Staff in the finance, administration and accounting department; Staff in the marketing department. In addition, MASAYA may request its service providers to carry out some processing operations on its behalf and according to the instructions provided by MASAYA. These providers will process personal information as data processors based on adequate contractual commitments, and they include, by way of illustration: Suppliers of services to manage the Computer Systems and the Website (e.g. hosting providers, market and analyst service providers, database management and maintenance services); Suppliers of online payment services; Suppliers of order entry related services, shipping of products and/or other services available through this Website. In carrying out the activities provided by these individuals, MASAYA gives operating instructions and rules of conduct on processing personal information in compliance with this Privacy Policy.    
2. PROCEDURES FOR COLLECTING INFORMATION
MASAYA acquires personal information of users through the Websites. There are several procedures with which it is possible to obtain such information, such as for example: Registration on the Websites; Purchases made on-line, by e-mail; Browsing information of a user on the Websites; Participating in competitions, promotions, events available through the Website; Contacting and/or sending information in relation to any warranty; Contacting the customer services or any other contact point of MASAYA.  
3. TYPES OF INFORMATION COLLECTED, PURPOSE AND PROCESSING PROCEDURES
 
3.1 SOURCE OF PERSONAL INFORMATION
MASAYA processes different types of information on the user collected from different sources, such as: Information provided directly by the user; Information obtained from automatic tracking systems when using the Website and its services.      
3.2 TYPE OF PERSONAL INFORMATION
MASAYA may collect and process the following personal information of the user: 3.2.1 Information provided by the user when completing the order (e.g. name and surname; e-mail address; password; gender; country (nation); postal address and phone numbers for deliveries and contacts related mainly to the process of the order) and other information contained in any correspondence or requests sent by the user. We may also ask the user to provide some information if problems with our service on the Website are reported; 3.2.2 Information relating to the user’s social network profile, if public. If the user decides to log in through social network applications or to link his/her MASAYA account to the user’s public profiles available on social networks, and share his/her actions through the Website on those channels via the corresponding plug-ins (e.g. Facebook Connect, I like, fb share, etc.), some data published by the user on his/her social network will be collected by the Website and processed for the corresponding functions. The use of the said plug-in entails sharing the corresponding actions and information on the related social networks; 3.2.3 Information relating to the use of the Website by the user. For security purposes we process the log files related to each session when the user logins into his/her account, as well as information on payment transactions that will be processed through our provider; 3.2.4 Navigation information. When the user uses the Website, we use some technologies that automatically collect certain items of information relating to the way in which the user uses our products and services, such as the IP address or other unique code of the device (computer, mobile or other devices) employed by the user to browse the Website, identification as registered user or not, technical information that may include the URL from where a user originates, browser information, language. This information helps us to continuously improve the browsing experience and the mechanisms of purchase of our products and services, and to monitor the correct operations of the Website. This information only includes statistical data relating to the actions performed by the user, and is not intended to be associated with the user’s identifying data.    
3.3 NATURE OF PROVIDING PERSONAL INFORMATION .
When the users are requested to provide personal information, e.g. when purchasing on the Website, MASAYA will inform them what personal information is necessary for the purchase and what is optional. Failure to provide some items of information may make it impossible to finish the checkout (e.g. name and surname) or purchase the products (e.g. credit card or debit card information). The provision of other information is entirely optional, but if not provided, some of the features of the services offered by MASAYA might be unavailable or limited.    
3.4 USE OF COOKIES
To improve browsing on the MASAYA website, we use “cookies”. A cookie is a small file, generally made up of letters and numbers, which is downloaded onto a computer when the user logs onto specific websites. Cookies permit a website to recognize the user’s computer, to trace its browsing through several pages of a website and to identify those users who return to a website. Cookies do not contain information that personally identifies the user, but the personal information that we record on the user may be linked by us to information retained in the cookies and taken from them. For additional information on the use of cookies, please refer to the Cookie Policy.  
3.5 USE OF THE WEB BEACON
MASAYA’S website may have digital images that are recognized as web beacons (sometimes also defined as GIF or pixel tag), also tied to the use of cookies, for the purpose of collecting information on how the website is used. Web beacons may furnish some types of information found on the user’s computer, such as the time and date when the page was visited, the description of the page where the web beacon is found, or the same cookies. These web beacons may also be found in promotional e-mail messages and inside newsletters, for the purpose of confirming that the message was opened and read. MASAYA may use third party web beacons to facilitate gathering grouped statistics on the effectiveness of its advertising campaigns or on other aspects concerning the running of its websites. Use by third parties of web beacons to collect or access personal information in a non-aggregate format and for purposes other than statistics is prohibited.  
3.6 PAYMENT DETAILS
If purchases are made using the website, credit card information and other financial information of a user can be processed and used by third parties who process the purchase and payment transactions on our behalf. MASAYA may also gather additional information, such as postal code, mobile phone number and the log of the user’s transactions.  
3.7 UNDERAGE USERS’ DATA
The MASAYA website is not intended for minors under the age of 18 years and MASAYA does not intentionally collect personal information from them. If information about minors is unintentionally recorded, MASAYA will provide to cancel the personal information of those minors in a timely manner.  
4. PURPOSES OF THE PROCESSING
The information we collect, including personal information, are used for the following: To provide the services available through the Website (e.g. management of the registration process and access to the account, account management); To manage orders, to supply products and services, to process payments, to transmit orders, products, services; For the technical management of the Website and its operational functions (including logistics), including solving any technical problems, statistical analysis, tests and research; To prevent or uncover fraudulent activities or misuse that is damaging to our website or threatening the security of the transactions; To manage promotions and contests, if any; To fulfil the user’s requests (e.g. management of requests for information); To manage promotions or contest as available from time to time on the Website; To communicate with the users for purposes related to the supply of the service; To promote MASAYA’S products, service and brands, including sending commercial, promotional or information communications and periodic updates (e.g. via e-mail, phone, SMS/MMS, post and through social network) relating to MASAYA’S products, services, initiatives and events organised by, or in collaboration with, MASAYA. If the user consents to the processing of his/her data for marketing purposes, the said data may also be processed for the purpose of conducting, by post, telephone or e-mail, statistical analyses, surveys and market research relating to MASAYA’S products and services.    
5. OPT IN/OUT
During the registration process or upon check out, in case of non-registered users (guest), the user is enabled to explicitly and freely consent to having his/her data collected, processed and transferred in compliance with this Privacy Policy, for marketing purposes, including receiving commercial, promotional or information communications and periodic updates (e.g. via e-mail, phone, SMS/MMS, post and through social network) relating to MASAYA’S products, services, initiatives and events organised by, or in collaboration with, MASAYA. If the user consents to the processing of his/her data for marketing purposes, the said data may also be processed for the purpose of conducting, by post, telephone or e-mail, statistical analyses, surveys and market research relating to MASAYA’S products and services. Such consent may be subsequently changed (opt-out) by the user accessing his/her profile on the MASAYA account or sending a communication to customer service. If a user who receives e-mail messages from the website wants to opt out of receiving those communications in the future, the user may do so by following the instructions in the messages or the procedures described above in this clause. MASAYA undertakes to carry out the opt-out requests received, but a user may still receive communications from us for no more than ten business days while their request is being processed.  
6. TRANSFER AND SHARING INFORMATION
 
6.1 SHARING WITH OTHER COMPANIES OF THE GROUP OR/AND THIRD PARTIES
Other than the persons and entities listed under section 2, MASAYA may share some personal information acquired directly and indirectly from users, both within the MASAYA GROOUP for management of intra-group services (e.g. commercial communications) as well as with third parties (public bodies, suppliers of delivery services, insurance companies) for the purpose of carrying out activities targeted towards supplying the service regulated by this Privacy Policy, including dispatching the products, managing any claim, analysing data, supplying marketing assistance. Any third parties will be required to process such information in compliance with the applicable regulations. In addition, a user’s information may be shared with third parties for the following reasons: To permit a merger, acquisition or sale of all or part of our company assets; In response to proceedings; To comply with the requirements of the laws in force, to protect the safety of an individual, to protect the rights and the property of MASAYA, including the need to have the Terms and Conditions of Use observed, and to hinder deceptions or security or technical problems; To inform business partners on the use of the website and on the purchase of products available through it, as grouped statistics or, however, in a format that would not disclose the identity of a user. The use of data by third party that are not part of MASAYA GROUP, or third party not acting on MASAYA GROUP’S behalf and under instructions, is not regulated by this Privacy Policy  
6.2 SOCIAL MEDIA PLUG INS
This Website uses social media plug-ins furnished by the most important social networks (e.g. facebook.com and twitter.com). When visiting the webpage the browsing data may be transferred directly to the social networks concerned, even without a user’s direct interaction. The user acknowledges and agrees that the operation of social networks' plug-ins is managed directly by the company that manages the corresponding plug-in. When the users use the plug-ins available through the Website (e.g. log in with their access credentials to a social network, or link their MASAYA account to their account on a social network, click on the Facebook “Like” or “Share” button), the User’s browser establishes a direct connection with the server of that social network, which sends the contents of the plug-in directly to the user’s browser. MASAYA may therefore receive data relating to the user, in accordance with the social network’s terms of use and privacy policy and may add this information to the user’s data already collected through its own services. If the user opts to share information with the social networks, MASAYA will share the data with them in accordance with the user’s preferences. Any information communicated to the social network will be subject to the privacy policy and the terms and conditions of that social network. To prevent those social networks from collecting the personal information of the user, please check the relevant conditions on the social network website.  
6.3 DATA TRANSFER OUTSIDE THE EU
MASAYA may transfer the data acquired through this Website to companies of the MASAYA GROUP or third parties located in other countries, even those outside of the European Union, to allow the activities listed in this Privacy Policy to be carried out (e.g. hosting services). If the personal information will be transferred to countries that do not provide the same level of protection, or in any case an adequate level of protection (e.g. the United States of America), of personal information, we ensure that each service provider enters into specific contractual obligations according to the applicable data protection legislations (including the execution of the Standard Contractual Clauses as approved by the European Commission) unless we can rely on any other legal basis for transferring personal information.  
7. SECURITY AND PROTECTION OF INFORMATION
MASAYA undertakes to protect users’ information. MASAYA advises that the password is one of the protection mechanisms of the account, therefore users are invited to use a password sufficiently secure and stored in a safe place, limiting access to it on their own computers and browsers, disconnecting it after having visited the site. MASAYA also monitors the activity of the Website to avoid non-authorised circulation of credit card numbers or other personal information. Furthermore, a secure system for authorising credit card payments and identifying fraudulent activities is used. MASAYA uses the standard SSL (Secure Sockets Layer) to protect the confidentiality of your personal information. MASAYA undertakes to protect the information received from users. All personal information supplied is kept on secure servers and within its internal systems. MASAYA uses adequate safety measures to protect information from non-authorised access or non-authorised changes, and from the circulation or distribution of data. To prevent non-authorised access, to maintain the accuracy of the data and guarantee the proper use of information, MASAYA uses adequate physical, electronic and managerial procedures to safeguard and protect the information and data stored in our system. Information on purchase transactions (e.g. credit card number) is handled securely through selected suppliers that guarantee that they have adopted the most adequate security measures. Although no computer system is completely secure, MASAYA believes that the measures it has implemented reduce the possibility of security problems to an appropriate level for the type of data involved.  
8. STORAGE AND DELETION OF INFORMATION
MASAYA accesses, uses, processes, files and stores personal information collected only for the purposes described in this document and in accordance with the consent expressed by the user. Specifically, MASAYA keeps personal information consistent with: The purposes for which they were collected; The consent received from the user; Local and international regulations. Personal information is kept and deleted in accordance with MASAYA security policy for the time necessary to achieve the purposes for which data were collected and further processed, including any retention period required under the applicable legislation (e.g. retention of accounting documentation). A user may request the deletion of his/her data and of the user's account, if any; in such case, MASAYA will satisfy the user's request provided that, and to the extent, MASAYA is not required under the applicable law to retain such personal information  
9. USER'S RIGHTS IN RELATION TO PERSONAL INFORMATION
MASAYA offers tools to users to update and correct the personal information given. Every registered user may access his/her own information and update it. It is also possible for users to modify and update their preferences on how they wish to receive e-mails or other communications from MASAYA. Users may also request that their information on their account is deleted. According to the Spanish protection code, the user has certain rights, including the right to obtain confirmation at any time as to whether we keep his/her information, to be informed of such information and origin, to check their accuracy and updating, and to request his/her information is supplemented, or rectified. The user is also entitled to request that data processed in violation of the law be erased, anonymized or blocked, and to object to any further processing of this information for legitimate reasons. In order to exercise these rights and to request information relating to the users’ data we keep, you may write to the following e-mail address aloha@parafina.co. MASAYA will respond within a reasonable time frame, after verifying the writer’s identity.  
10. CONTACT INFORMATION
Should the user have questions or comments on this Privacy Policy, we may be contacted at the following e-mail address: aloha@parafina.co.  
11. CHANGES TO THE PRIVACY POLICY
This Privacy Policy may undergo changes; we suggest, therefore, that you check this Privacy Policy regularly. If MASAYA makes any changes that the company believes to be important, users will be advised through the Website.
12. LINKS TO THIRD PARTY WEBSITES
While browsing, contents may be seen that link to third party websites. MASAYA cannot access or control the cookies or the other functions used by third party's websites, and the procedures of those outside sites are not regulated by our Privacy Policy. Consequently, you should contact and/or directly consult those third parties for additional information on their privacy protection procedures.