EU Privacy Notice

1. Introduction

This Privacy Policy explains how FRUTANA®️ (“FRUTANA®️”, “we”, “us”, or “our”) processes personal data of individuals located in the European Union and European Economic Area (EU/EEA) in accordance with Regulation (EU) 2016/679 – the General Data Protection Regulation (GDPR).

This Policy applies to our websites, applications, online platforms, chatbots, digital forms, and any other online services that reference this Policy (collectively, the “Services”).

2. Data Controller

For the purposes of the GDPR, the Data Controller is:

FRUTANA®️
📧 Email: privacy@frutana.com.ec
🌐 Website: www.frutana.com.ec

3. Personal Data We Process

We may process the following categories of personal data:

3.1 Data You Provide Directly

• Full name
• Company name
• Email address
• Telephone number
• Business address (country, city)
• Tax ID / VAT number / commercial registration (where applicable)
• Shipping, logistics, and commercial details
• Contractual, quotation, or invoicing information
• Any information you voluntarily submit through forms, emails, or chat systems

3.2 Data Collected Automatically

• IP address
• Browser type and version
• Device and operating system information
• Pages visited and interaction data
• Date and time of access
• Approximate location (country or region level)

Cookies and similar technologies are used in accordance with our Cookies Policy.

4. Legal Bases for Processing (Article 6 GDPR)

We process personal data only when a lawful basis applies, including:

• Consent (Article 6(1)(a))
• Performance of a contract or pre-contractual measures (Article 6(1)(b))
• Compliance with a legal obligation (Article 6(1)(c))
• Legitimate interests pursued by FRUTANA®️, provided such interests are not overridden by your fundamental rights and freedoms (Article 6(1)(f))

Where processing is based on consent, you may withdraw your consent at any time.

5. Purposes of Processing

We process personal data for the following purposes:

• Responding to inquiries and communications
• Preparing quotations, proforma invoices, and contracts
• Managing commercial, logistics, and export operations
• Communicating with clients, suppliers, and partners
• Improving our Services and user experience
• Ensuring security, fraud prevention, and compliance
• Complying with legal, regulatory, and tax obligations

6. Data Minimization, Accuracy, and Retention

We ensure that:

• Personal data is adequate, relevant, and limited to what is necessary
• Data is accurate and kept up to date
• Personal data is retained only for as long as necessary for the purposes stated or as required by law

Data may be retained longer where necessary to establish, exercise, or defend legal claims.

7. Data Sharing and Recipients

We may share personal data with:

• Companies within the FRUTANA®️ group
• Trusted service providers acting as data processors (IT, hosting, logistics, legal, accounting, communication services)
• Public authorities or regulators where legally required

All processors are contractually bound to comply with GDPR requirements and confidentiality obligations.

8. International Data Transfers

As an international company, FRUTANA®️ may transfer personal data outside the EU/EEA.

Such transfers are conducted in compliance with Chapter V GDPR and rely on:

• Adequacy decisions of the European Commission
• Standard Contractual Clauses (SCCs)
• Other lawful transfer mechanisms

Appropriate safeguards are implemented to protect your personal data.

9. Data Subject Rights (Articles 12–22 GDPR)

You have the right to:

• Access your personal data
• Rectify inaccurate or incomplete data
• Request erasure (“right to be forgotten”)
• Restrict processing
• Object to processing based on legitimate interests
• Data portability
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority in your EU Member State

10. Exercising Your Rights

To exercise your GDPR rights, please contact:

📧 privacy@frutana.com

We will respond to your request within the time limits established by GDPR.

11. Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including protection against unauthorized access, loss, alteration, or disclosure of personal data.

12. Changes to This Policy

We may update this GDPR Privacy Policy from time to time. Any changes will be published on this page and reflected in the “Last Updated” date above.