EU Privacy Notice

Last Updated: 10 December 2023

EU Privacy Notice – FRUTANA®️

1. Introduction

This Privacy Notice explains how FRUTANA®️ processes personal data of individuals located in the European Union and European Economic Area (EU/EEA) in accordance with Regulation (EU) 2016/679 – the General Data Protection Regulation (GDPR).

2. Data Controller

For the purposes of GDPR, the Data Controller is:

FRUTANA®️
Email: privacy@frutana.com.ec
Website: www.frutana.com.ec

3. Personal Data We Process

Data You Provide Directly: Full name, company name, email, telephone, business address, Tax ID/VAT, and commercial/logistics details.
Data Collected Automatically: IP address, browser type, device info, interaction data, and approximate location.

4. Legal Bases for Processing (Article 6 GDPR)

We process personal data based on: Consent, Contractual necessity, Legal obligation, and Legitimate interests (commercial operations, fraud prevention, and risk management).

5. Purposes of Processing

We process data to respond to inquiries, prepare Proforma Invoices, manage export logistics, prevent fraud, and comply with legal or regulatory obligations.

6. Commercial & Risk Use of Data

FRUTANA®️ may use data for credit evaluation and risk analysis, which may include sharing information with financial institutions or credit insurers (e.g., Coface).

7. Data Accuracy

THE CLIENT is responsible for ensuring that all data provided is accurate. FRUTANA®️ shall not be liable for losses or delays resulting from inaccurate or incomplete information.

8. Data Minimization, Accuracy & Retention

Data is relevant and limited to what is necessary, maintained accurately, and retained only as long as required for legal compliance or the defense of legal claims.

9. Data Sharing and Recipients

We may share data with group companies, service providers (IT, logistics, legal), and authorities. All recipients are bound by confidentiality and GDPR obligations.

10. International Data Transfers

Data may be transferred outside the EU/EEA using lawful safeguards such as Adequacy decisions or Standard Contractual Clauses (SCCs).

11. Data Subject Rights (Articles 12–22 GDPR)

You have the right to access, rectify, erase, restrict, or object to processing, as well as the right to data portability and to lodge a complaint with a supervisory authority.