Last Updated: 10 December 2023
EU Privacy Notice – BANALYA S.A.
1. Introduction
This Privacy Notice explains how
BANALYA S.A. processes personal data of individuals located in the European Union and European Economic Area (EU/EEA) in accordance with Regulation (EU) 2016/679 – the General Data Protection Regulation (GDPR).
2. Data Controller
For the purposes of GDPR, the Data Controller is:
BANALYA S.A.
Email: privacy@banalya.com
Website: www.banalya.com
3. Personal Data We Process
- Data You Provide Directly: Full name, company name, email, telephone, business address, Tax ID/VAT, and commercial/logistics details.
- Data Collected Automatically: IP address, browser type, device info, interaction data, and approximate location.
4. Legal Bases for Processing (Article 6 GDPR)
We process personal data based on: Consent, Contractual necessity, Legal obligation, and Legitimate interests (commercial operations, fraud prevention, and risk management).
5. Purposes of Processing
We process data to respond to inquiries, prepare Proforma Invoices, manage export logistics, prevent fraud, and comply with legal or regulatory obligations.
6. Commercial & Risk Use of Data
BANALYA S.A. may use data for credit evaluation and risk analysis, which may include sharing information with financial institutions or credit insurers (e.g.,
Coface).
7. Data Accuracy
THE CLIENT is responsible for ensuring that all data provided is accurate.
BANALYA S.A. shall not be liable for losses or delays resulting from inaccurate or incomplete information.
8. Data Minimization, Accuracy & Retention
Data is relevant and limited to what is necessary, maintained accurately, and retained only as long as required for legal compliance or the defense of legal claims.
9. Data Sharing and Recipients
We may share data with group companies, service providers (IT, logistics, legal), and authorities. All recipients are bound by confidentiality and GDPR obligations.
10. International Data Transfers
Data may be transferred outside the EU/EEA using lawful safeguards such as Adequacy decisions or Standard Contractual Clauses (SCCs).
11. Data Subject Rights (Articles 12–22 GDPR)
You have the right to access, rectify, erase, restrict, or object to processing, as well as the right to data portability and to lodge a complaint with a supervisory authority.
12. Exercising Your Rights
To exercise your rights, please contact
privacy@banalya.com. Requests will be handled in accordance with GDPR timelines.
13. Changes to This Policy
We may update this Privacy Notice from time to time. Updates will be reflected in the “Last Updated” date at the top of this page.
