This policy covers https://www.agrodiler.com in English. It explains what personal data we process, why, on what legal basis under the General Data Protection Regulation (GDPR), who receives it, how long we keep it and how you use your rights.
Who is responsible for your data
The controller is ARADOR IMPORT S.L., tax ID (NIF) B72830631, C/ Concejo de Vegadeo 2, bajo G, 33204 Gijón, Asturias, Spain. Write to info@agrodiler.com with any question about your data.
What data we process
- Enquiries and quotes: the name, company, e-mail address and phone number you give us, the part numbers and quantities you ask about, the delivery country and our correspondence with you.
- Orders: billing and delivery address, VAT number of a business customer, the items ordered, invoices and payment records.
- Order request form, when you use it: the same contact and order data, plus a hash of your IP address. The hash is a one-way code that we keep to block abuse and delete after 90 days.
- Technical data: the IP address and browser data that every request carries. Our server and Cloudflare process them to deliver the pages and protect the site.
- Analytics data: pages viewed and actions on the site, collected by Google Analytics 4 only after you allow analytics cookies (see the cookie section below).
Contact and delivery details are needed to prepare a quote and fulfil the order; without them we cannot do either. Analytics is optional.
Purposes and legal bases
- Answering your enquiry, preparing a quote, delivering the order and handling returns and warranty claims. Basis: steps before a contract and performance of the contract, Art. 6(1)(b) GDPR.
- Issuing invoices and keeping accounting and tax records. Basis: legal obligation under Spanish commercial and tax law, Art. 6(1)(c) GDPR.
- Protecting forms against spam and the site against attacks. Basis: our legitimate interest in a secure service, Art. 6(1)(f) GDPR.
- Web analytics to improve the site and the range. Basis: your consent, Art. 6(1)(a) GDPR, given in the cookie banner. Withdrawing it stops new collection but does not undo processing that took place before.
We make no decisions about you by automated means alone, and we do not sell personal data.
Who receives your data
Only the service providers the shop needs, and only for the service they provide to us:
- Netcup GmbH, Germany: hosting of the site and of the order database on servers in the EU.
- Cloudflare, Inc.: content delivery and protection of the site, and the Turnstile check on forms that tells people from bots.
- Resend: delivery of e-mails, such as the notice of your order request to our manager and the confirmation sent to you.
- Google Ireland Limited and Google LLC: Google Analytics 4, only with your consent. Google privacy policy: https://policies.google.com/privacy.
- The carrier that delivers your order receives your name, delivery address and phone number.
Cloudflare, Resend and Google are based in the United States or belong to US groups, so data is transferred outside the European Economic Area. These transfers rely on the EU-U.S. Data Privacy Framework where the provider is certified under it, and otherwise on the standard contractual clauses approved by the European Commission. A copy of the safeguards is available on request at info@agrodiler.com.
How long we keep data
- Orders, invoices and the related correspondence: six years, the period that article 30 of the Spanish Commercial Code sets for business records. Tax law can require some documents for longer.
- Enquiries that do not lead to an order: as long as we need to answer them and deal with follow-up questions.
- IP address hash of an order request: 90 days.
- Analytics data: according to the retention period set in Google Analytics.
- Data in your browser (cookie choice, cart): until you clear the site data in your browser.
Your rights
Under Articles 15 to 21 GDPR you have the right to:
- get a copy of your data and information on how we process it;
- have inaccurate data corrected;
- have your data erased, except data the law obliges us to keep;
- restrict processing while a question about your data is being resolved;
- receive the data you gave us in a machine-readable format (portability);
- object to processing based on our legitimate interest;
- withdraw your consent at any time.
Send your request to info@agrodiler.com. We reply within one month, as Article 12 GDPR requires, and tell you if a complex request needs more time. We ask for proof of identity only when we cannot otherwise tell that the request comes from you.
You have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or with the supervisory authority of the EU country where you live or work.
Cookies and similar technologies
Every visitor of the English-language pages sees the cookie banner, wherever you are. The Google tag is not loaded and no request goes to Google until you press Allow.
Analytics cookies (only after you press Allow)
- _ga and _ga_* — Google Analytics 4 cookies on the domain www.agrodiler.com. They tell visits and visitors apart for statistics and are kept for up to two years.
If you press Allow, the tag loads and sets its cookies; Google then receives the page address, language and an approximate location derived from your IP address. If you press Reject or close the banner, the tag stays off. After you send an order request, the event carries its value, VAT and shipping amount, but not your name, phone number or e-mail address.
Storage the site needs to work (no consent required)
- Your cookie choice, kept in the local storage of your browser, so the banner does not appear on every page.
- The cart and the lists you build on the site, kept in the local storage of your browser. They reach us only together with an order request.
To change or withdraw your choice, use the Cookie settings button on this page. On withdrawal we delete our own analytics cookies. You can also block or delete cookies in your browser settings.
Changes to this policy
When the way we process data changes, we update this page. The version published here is the one in force.