Date of last update : 20.5.2024

Aloe Vera Farm Mallorca, in its capacity as data controller within the meaning of European Regulation 2016-679 of April 27, 2016 and the French law "Informatique et Libertés" of January 6, 1978 as amended (hereinafter referred to as the "Regulation"), attaches great importance to the protection of your personal data and your privacy.

The purpose of this policy is to inform you about how we collect, use and disclose the personal data that you provide to us via our website

In order to ensure a high level of protection that complies with the applicable regulations, this policy may be updated from time to time. Please therefore check this page regularly. Material changes will be notified to you by email. A material change is any change in the main characteristics of the processing of personal data.

If any provision of this policy is declared invalid, void or unlawful, it shall be deemed unwritten without invalidating the remaining provisions.

1) Definitions

The User is hereby informed that the following terms or expressions, if they begin with a capital letter, shall have the meaning assigned to them below when they appear in the body of this Policy and in its preamble, and regardless of whether they appear in the singular, plural, masculine or feminine form:

"Data" means any information relating to an identified or identifiable natural person as defined in Article 4(1) of the General Data Protection Regulation.

"Directive" means this Directive on the protection of personal data.

"Regulation" refers to the European Regulation 2016-679 of April 27, 2016 and the French law "Informatique et Libertés" of January 6, 1978 as amended. January 1978 as amended.

"Controller" refers to the natural or legal person, public authority, agency or any other body which, alone or jointly with others, determines the purposes and means of the processing, as defined in Article 4.7 of the GDPR.

"GDPR" refers to the General Data Protection Regulation 2016/679 of April 27, 2016. April 2016.

"Website" refers to our website

"Processor" refers to the natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller, as defined in Article 4.8 of the GDPR.

"User" refers to the users of our website.

2. what data do we collect?

We may collect the following data directly from you:

Identification data: Name, e-mail or postal address, telephone number and social networks of the person concerned;
Professional data: Company name, professional email address and profession;
Transaction data: the amount of the subscription and the credit card number;
Technical data: IP address, browser type and version and the operating system used;
Connection data: Logs, IP address, functions used, pages visited, settings selected, record of date and time of visits and search terms;
Data concerning private life: Habits, family situation, etc.
Economic and financial information: Income, bank details, sort code, financial situation, etc.
Browsing data: Cookies, trackers, traffic measurement, etc.

Transaction-related data
Login data
Identification data

As regards data collected via third parties, we may also receive your contact details and other personal information from our affiliated companies and other third parties.

Indirectly, we may also collect your data passively, as we may use tracking tools such as browser cookies and other similar technologies on our website and in the communications we send you. For more information, please see our Cookie Policy.

3. Why do we collect your data?

The legal basis for our processing of your personal data depends on the purpose for which we process it.

We collect your data:

Where it is necessary for the performance of a contract entered into with you;
Where it is necessary for us to comply with a legal obligation;
Where you have expressly consented to the processing of your personal data;
Where it is necessary for our legitimate interests;
Where it is necessary in the public interest.

4who are the recipients of your data?

Internal recipients

Your data may be processed by our internal staff.

Legal disclosures

Finally, we may also disclose your data in the following cases:

to comply with a court order, a law or legal process, including governmental and regulatory requirements;
if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Aloe Vera Farm Mallorca, its customers, or other interested parties. Such disclosure includes exchanging information with other companies and organizations as a means of protecting against fraud and counterfeiting.

5. How do we protect your data?

We have implemented technical and organizational security measures to ensure the security, integrity and confidentiality of your data.
(6) What rights do you have in relation to the processing of your data?

In accordance with the Regulation, you have a right to access and rectify your data. You also have the right to define guidelines for the whereabouts of your data in the event of your death.

In addition, provided that the conditions laid down in the GDPR for the exercise of these rights are met, you have the right to erasure of your data:

A right to erasure of your data;
A right to restriction of processing of your data;
A right to object to the processing of your data on legitimate grounds in accordance with Article 21 of the GDPR;
A right to portability of the data you have provided;

If the processing of the data is based on your consent, you may withdraw your consent at any time. However, you acknowledge that the processing that took place before you withdrew your consent remains fully valid.

In accordance with Article 12(6) of the General Data Protection Regulation, we reserve the right to ask you to prove your identity in order to exercise these rights. We inform you that we will delete the data that allows us to prove your identity as soon as we have complied with your request.

You can exercise these rights by sending an email to or a letter by post to the following address:

Calle Aragón 28-1°, 07006 Palma de Mallorca Spain

We have a period of one month to respond to any request related to the exercise of these rights. This period may be extended by two months in the event of complex or numerous requests.

Finally, you have the right to lodge a complaint with the French Commission for Data Protection and Individual Liberties (CNIL), in particular on its website: