Agroalmena

Privacy Policy

Official Agroalmena privacy policy (GDPR).

Legal notice

Unofficial translation provided for convenience. The legally binding version is the Spanish original; in case of discrepancy, the Spanish version prevails.

Privacy Policy

AGROALMENA · Privacy Policy AGROALMENA Privacy Policy Information on the processing of personal data (GDPR and LOPDGDD) Holder: CATAUR HOLDING & MANAGEMENT, S.L. · Version 1.0 · Effective date: [●] Unofficial English translation provided for convenience. The legally binding version is the Spanish original; in case of discrepancy, the Spanish version prevails.

1. Data controller

Given the large-scale processing arising from the marketplace and, in particular, the geolocation in the alerts system (systematic monitoring), Cataur has appointed a Data Protection Officer (Art. 37 GDPR), whose contact details are included in this Policy and in the RoPA, and has carried out a Data Protection Impact Assessment (DPIA, Art. 35 GDPR) on that system.

2. Data we process

  • Identification and contact: name, surnames, Tax ID, address, telephone, e-mail.
  • Account and profile: credentials, user type, preferences, posted content.
  • Trader verification (DSA): tax and registry data of professional Sellers.
  • Subscription and billing: plan, history, billing data. Payment data are processed directly by Stripe; Cataur does not store the full card number.
  • Advertising: contact and billing data of Advertisers.
  • Security alerts: alert content and associated geolocation. Location is processed with reduced precision by zones (not the exact position of the User or of persons), for the sole purpose of locating the incident, on the basis of the issuer's consent, and is kept for a 30-day period, after which it is deleted or anonymised. Users must not include identifiable third-party data.
  • Usage data: IP address, device identifiers, activity logs, browsing data (see Cookie Policy).

3. Purposes and legal bases

Item Detail Controller CATAUR HOLDING & MANAGEMENT, S.L. Tax ID (NIF) B09936998 Address Calle Liverpool 5, 1º C, Aguadulce, 04720 Roquetas de Mar (Almería), Spain Privacy contact legal@agroalmena.com Data Protection Officer (DPO) External DPO appointed – [●] Purpose Legal basis (Art. 6 GDPR) Registration, account management and service provision Performance of the contract (6.1.b) Subscription management, charging and billing Performance of the contract (6.1.b) and legal obligation (6.1.c) Verification of professional Sellers Legal obligation – Art. 30 DSA (6.1.c) and legitimate interest (6.1.f) Posting of listings and connection Performance of the contract (6.1.b) Management and dissemination of security alerts Consent (6.1.a) and legitimate interest (6.1.f) Security, fraud prevention and content moderation Legitimate interest (6.1.f) and legal obligation (6.1.c) AGROALMENA · Privacy Policy

4. Retention periods

Data are kept while the relationship is in force and, thereafter, for the applicable statutory limitation periods (in particular, tax and accounting periods, up to 6 years; civil/commercial, up to 5 years) and those needed to address possible liabilities. They are then deleted or anonymised. Data processed on the basis of consent are kept until consent is withdrawn.

5. Recipients and processors

Cataur uses providers that process data on its behalf (processors), under a contract compliant with Art. 28 GDPR: Data may also be disclosed to Public Administrations, Law Enforcement or judicial authorities where there is a legal obligation. Between Users, the contact data in a listing are shared for the purpose of the requested connection.

6. International transfers

Some providers (e.g. Google, and potentially Stripe) may involve transfers outside the European Economic Area. In such cases, transfers are carried out with adequate safeguards (adequacy decisions or the European Commission's Standard Contractual Clauses – SCC), a copy of which may be requested at legal@agroalmena.com.

7. Third-party data and alerts

Any User posting Content warrants that they will not include third-party personal data without a lawful basis. The alerts system expressly prohibits identifying persons. Cataur will remove Content breaching this rule. A Handling of enquiries and complaints Legitimate interest / pre-contractual performance Own commercial communications Consent (6.1.a) or legitimate interest (customers, Art.

21.2 LSSI)

Analytics and non-essential cookies Consent (6.1.a) Compliance with legal obligations (tax, requests) Legal obligation (6.1.c) Purpose Legal basis (Art. 6 GDPR) Provider Function Stripe Payments Europe, Ltd. Payment processing and billing Google (Firebase, Maps Platform) Push notifications, infrastructure, maps Microsoft (Microsoft 365) Corporate e-mail and communications SMS/OTP provider [●] SMS verification and authentication Hosting provider [●] Hosting of the Platform AGROALMENA · Privacy Policy breaching User shall be responsible for the unlawful processing vis-à-vis the data subject and shall hold Cataur harmless.

8. Data subjects' rights

Data subjects may exercise the rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw consent at any time, by writing to legal@agroalmena.com and proving their identity. They may also lodge a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es, if they consider that their rights have not been respected.

9. Security measures

Cataur applies appropriate technical and organisational measures (Art. 32 GDPR): encryption in transit, access control, strong authentication, activity logging and back-ups, reviewed periodically. Data breaches: in the event of a personal data breach, Cataur will notify the AEPD without undue delay and, where required, within a maximum of 72 hours (Art. 33 GDPR), and will communicate it to the affected data subjects where there is a high risk to their rights (Art. 34 GDPR), in accordance with its internal breach-management procedure.

10. Minors

The Platform is not directed at persons under 18. If a minor's registration is detected, their account and data will be deleted.

11. Changes to this Policy

Cataur may update this Policy to adapt it to legal or service changes. Material changes will be communicated by appropriate means. The version in force will always be available on the Platform.

12. Language

This Policy is issued in Spanish; any translation is provided for convenience and, in the event of discrepancy, the Spanish version shall prevail.

Cookie Policy

AGROALMENA · Cookie Policy AGROALMENA Cookie Policy Information and consent management (Art. 22.2 LSSI and AEPD Guidance) Holder: CATAUR HOLDING & MANAGEMENT, S.L. · Version 1.0 · Effective date: [●] Unofficial English translation provided for convenience. The legally binding version is the Spanish original; in case of discrepancy, the Spanish version prevails.

1. What are cookies?

Cookies are small files downloaded onto the User's device when accessing certain pages or apps, allowing browsing information to be stored and retrieved. Other tracking technologies (pixels, mobile SDKs, local storage) are treated as equivalent to cookies.

2. Legal basis and consent

Under Art. 22.2 LSSI and the AEPD Cookie Guidance, technical or necessary cookies do not require consent. The rest (preferences, analytics and advertising) are installed only with the User's prior, free, specific and informed consent, given through the configuration panel. The User may accept all, reject all (with the same ease) or configure them, and may withdraw their choice at any time via the “Cookie settings” link. Merely continuing to browse does not constitute valid consent.

3. Types of cookies we use

By purpose: By owner: first-party (managed by Cataur) and third-party (managed by providers such as Google). By duration: session (deleted on closing) and persistent (remaining for a set period).

4. Detailed list of cookies

The following table will be completed with the actual technical audit of the Platform before launch (name, owner, purpose and expiry of each cookie): Category Purpose Consent Technical / necessary Access, session, security, load balancing, basic operation Not required Preferences Remember language, region and User options Required Analytics Measure and analyse usage to improve the service Required Advertising Display/measure advertising (contextual or, where applicable, personalised) Required Cookie Owner Purpose Expiry [●] First-party User session Session AGROALMENA · Cookie Policy

5. How to manage or disable cookies

  • From the cookie settings panel of the Platform, permanently accessible.
  • From the browser settings or the mobile device's operating system, where cookies can be blocked or deleted. Disabling technical cookies may prevent the Platform from working properly.

6. Cookies and personal data

Where cookies process personal data, the Privacy Policy applies. The User may exercise their rights and obtain further information on processors and international transfers in that document.

7. Updates

This Policy may be updated in line with regulatory or technical changes. Periodic review is recommended. Last updated: [●]. This Policy is issued in Spanish; in the event of discrepancy, the Spanish version shall prevail. _ga / ga* Google Analytics (if Analytics is used) Up to 24 months [●] First/third-party [●] [●] Cookie Owner Purpose Expiry