Privacy Policy
Who we are
Suggested text: Our website address is: https://exoticafruitfarms.com.
Comments
Suggested text: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
Suggested text: If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Who we share your data with
Suggested text: If you request a password reset, your IP address will be included in the reset email.
How long we retain your data
Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where your data is sent
Suggested text: Visitor comments may be checked through an automated spam detection service.
Privacy Policy
We hereby inform you, as a visitor to our website and as a user of our services, of the basic data management and data protection rules.
Our data management principles
- we process personal data lawfully and fairly and in a transparent manner for you.
- we collect personal data only for specified, explicit and legitimate purposes and do not process it in a way incompatible with those purposes.
- the personal data we collect and process is adequate, relevant and limited to what is necessary for the purposes for which it is processed.
- we will take all reasonable steps to ensure that the data we process is accurate and, where necessary, kept up to date, and we will promptly delete or rectify inaccurate personal data.
- We will store personal data in a form which permits identification of you only for the time necessary to achieve the purposes for which the personal data are processed.
- we use appropriate technical and organisational measures to ensure adequate security of personal data against unauthorised or unlawful processing, accidental loss, destruction or damage.
- we process, i.e. collect, record, organise, store and use, your personal data on the basis of your prior informed and voluntary consent and only to the extent necessary and in any case for the purposes for which they are collected, stored, organised and used.
- In some cases, the processing of your data is based on legal requirements and is mandatory, in which case we will draw your attention to this fact.
- or in certain cases, we or a third party has a legitimate interest in the processing of your personal data, such as the operation, development and security of our website.
- in the course of processing your data, in order to provide you with a high quality service, if additional processors are involved in the process, we will include these changes in this notice.
1. Information We Collect:
Reservation Information: When you make a reservation with us, we collect necessary details such as your name, contact information, payment details, and personal preferences. We may also need other personal information such as your birth date, height, weight, passport number etc.
Communication Details: Your interactions with us, including emails, phone calls, and messages, may be stored to ensure quality service and effective communication.
Marketing Preferences: If you opt to receive marketing communications, we collect information about your preferences to tailor our promotional offers and updates accordingly.
2. Data controllers
Responsible data controller ( company): Exotica Fruit Farms Ltd.
Website: https://exoticafruitfarms.com
E-mail address: hello@exoticafruitfarms.com
Registered office: Placencia Post Office
Placencia, Stann Creek
Belize
For further information on data processing, please contact us at the above e-mail or postal address. We will send you a reply within 15 days (but not later than 1 month) to the contact details you have provided.
Fióktelephely: –
Cégjegyzékszám: –
Társaságunk az adatok kezelése során – ügyfeleink színvonalas kiszolgálása érdekében – az alábbi adatfeldolgozókat veszi igénybe:
Adatkezelő (1): ________-____________
Cím (1): ____________-________
3. Data processors
We use the following data processors to process your data in order to provide a high quality service to our customers.
If we change the list of our data processors, we will reflect the changes in this notice.
Responsibilities:
A data processor may only act within the framework of the legal authorisation, only in accordance with the instructions of the controller, has a duty to restore or erase data, must comply with the technical conditions of data security in its records, must cooperate in any incident reporting.
Webmester:
Adatfeldolgozó: Musulin Béla Balázs
Cím: 7694 Hosszúhetény, Verseny u. 44.
Storage space service:
Host provider name: 23VNet KFT.
Community tax number: HU12188224
Registered office of the Shelter Provider: 1132 Budapest, Victor Hugo 11. Alfa office building A2010
Shelter provider’s website: hostit.hu
Depository email address: info@hostit.hu
Pénzügy:
Adatfeldolgozó:
Adószám:
Cím:
Billing:
…
Hírlevél küldő szolgáltatás:
Mailerlite.com
- MailerLite Limited.: (hírlevél kezelő) 38 Mount Street Upper, Dublin 2, D02 PR89 Ireland, Legal
Az adatvédelmi összefoglót ld. a 6. pontban lentebb.
Statistical and social networking, marketing analysis:
Google.com, Facebook.com, MouseFlow.com, LinkedIn.com
- Google Inc.: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, further contact details, mail system, data and file storage in the cloud, online document management, and related services Google Drive, Google Docs, Google Search Console, Google Analytics, Google AdSense, Google AdWords, YouTube, Blogger, Chrome browser support – Google Privacy Policy and Privacy Statement.
- Meta Platforms Ireland Ltd.: Merrion Road, Dublin 4, D04 X2K5, Ireland. https://about.meta.com/actions/safety/audiences/law/guidelines
- Support for other products and features offered by Facebook, Instagram, Messenger and WhatsApp – contact details for privacy policy and privacy officer.
This website uses Mouseflow: a website analytics tool that provides session replay, heatmaps, funnels, form analytics, feedback surveys, and similar features/functionality. Mouseflow may record your clicks, mouse movements, scrolling, form fills (keystrokes) in non-excluded fields, pages visited and content, time on site, browser, operating system, device type (desktop/tablet/phone), screen resolution, visitor type (first time/returning), referrer, anonymized IP address, location (city/country), language, and similar meta data. Mouseflow does not collect any information on pages where it is not installed, nor does it track or collect information outside your web browser. If you’d like to opt-out, you can do so at https://mouseflow.com/opt-out. If you’d like to obtain a copy of your data, make a correction, or have it erased, please contact us first or, as a secondary option, contact Mouseflow at privacy@mouseflow.com.
For more information, see Mouseflow’s Privacy Policy at https://mouseflow.com/legal/company/privacy-policy/
For more information on Mouseflow and GDPR, visit https://mouseflow.com/legal/gdpr/.
For more information on Mouseflow and CCPA/VCDPA visit https://mouseflow.com/legal/ccpa.
4. Scope of the data processed - our obligation
We handle personal data responsibly and do our utmost to ensure data security.
We do NOT collect sensitive data such as ethnicity, religious beliefs, sexual life and orientation, political opinions and trade union membership, or health background, genetic or biometric information.
The data processed when subscribing to the newsletter is stored in encrypted form and cannot be accessed by anyone other than the data controller.
For statistical purposes, the analyses do not contain any personally identifiable information.
We only ask our website visitors for their personal information if they wish to register for notifications, sign up as a member or enter a prize draw.
We do not link the personal data provided in connection with registration or the use of our marketing services and we do not aim to identify our visitors.
We take appropriate technical and other measures to protect your personal information and to ensure its security, availability, and to protect it from unauthorized access, alteration, damage or disclosure and any other unauthorized use.
As part of our organisational measures, we control physical access in our buildings, provide continuous training to our employees and keep paper documents locked away with appropriate protection. Technical measures include encryption, password protection and anti-virus software. Please note, however, that the transmission of data over the Internet cannot be considered a fully secure transmission. We make every effort to make our processes as secure as possible, but we cannot take full responsibility for the transmission of data through our website, but we do maintain strict standards for the security of your data and the prevention of unlawful access to it.
5. Your data processing obligations
Why is this important for you, what should you look out for?
You voluntarily provide us with personal data when registering or contacting us, so we ask you to take care of the truthfulness, accuracy and correctness of the data you provide to us, as you are responsible for them. Incorrect, inaccurate or incomplete data may prevent you from using our services.
If you provide personal information about someone other than yourself, we will assume that you have the necessary authority to do so.
In relation to security issues, we ask for your help in carefully remembering your password to access our website and not to share this password with anyone.
6. What do I need to know about our direct marketing and newsletter data management and prize draws?
You can give your consent to us using your personal data for marketing purposes by making a declaration during registration or by subsequently modifying your personal data stored in the newsletter and/or direct marketing registration area (i.e. by clearly indicating your intention to consent). In this case, until your consent is withdrawn, we will also process your data for the purposes of direct marketing and/or sending you newsletters and will send you advertising and other mailings, information and offers and/or newsletters (§ 6 of the Grtv).
You can give your consent for direct marketing and newsletter together or separately or withdraw your consent(s) free of charge and at any time.
In all cases, the cancellation of the registration will be considered as a withdrawal of consent. Withdrawal of consent to data processing for direct marketing and/or newsletter purposes shall not be construed as withdrawal of consent to data processing in relation to our website. How is this? What is retained and on what basis if the newsletter consent is withdrawn? For consents, each consent is for a specific purpose, so registering for tomorrow and subscribing to the newsletter are two separate purposes, two separate databases, the two cannot be related.
For technical reasons, there is a 15-day time limit for each consent to be withdrawn or cancelled.
We may organise prize draws for promotional purposes, the terms and conditions of which are set out in a separate policy. In all cases, the rules of the current promotion can be found in a central link on the home page of our website.
7. Our other data processing rights
We may only transfer your data to the extent permitted by law and, in the case of our data processors, we will ensure that they cannot use your personal data for purposes that are not in accordance with your consent by setting contractual conditions.
The data controller may be contacted by the courts, public prosecutors and other authorities (e.g. police, tax authorities, National Authority for Data Protection and Freedom of Information) for information, data or documents. In such cases, we must comply with our obligation to provide the data, but only to the extent strictly necessary for the purpose of the request.
In the event of the use of misleading personal data or if one of our visitors commits a criminal offence or attacks the services of our IT system, we will delete the data of that visitor immediately upon termination of his/her registration or, if necessary, retain it for the duration of the civil liability or criminal proceedings.
Our contractors and employees involved in the processing of your data and/or the processing of your personal data are entitled to access your personal data to the extent provided in advance, subject to confidentiality obligations.
8. What are your rights and remedies?
You may withdraw your consent to data processing at any time, free of charge
- by cancelling your registration,
- withdraw consent to data processing, or
- withdrawing or requesting the blocking of consent to the processing or use of any data that must be completed during registration.
For technical reasons,we allow 30 days to register the withdrawal of consent, but please note that we may process certain data after the withdrawal of consent in order to comply with our legal obligations or to pursue our legitimate interests.
You about data processing
- request information about,
- request the rectification, modification or integration of their personal data processed by us,
- object to the processing and request the erasure and blocking of their data (except for mandatory processing),
- have legal remedies before a court,
- complain to the supervisory authority or initiate proceedings
Supervisory Authority: Data Protection Commissioner can be found here: https://www.nationalassembly.gov.bz/contact-us/
Please contact the data controller or owner of the website directly before lodging a complaint with the supervisory authority or the courts in order to discuss and resolve the problem as quickly as possible.
At your request, we will provide you with information about the personal data that we process or that is processed by us or by our data processors.
- data held about you by us
- their source,
- the purposes and legal basis of the processing,
- its duration and, if that is not possible, the criteria for determining that duration,
- the names and addresses of our processors and their activities in relation to the processing,
- the circumstances and effects of data breaches and the measures we have taken to prevent and respond to them; and
- where we transfer your personal data, the legal basis and recipient of the transfer.
We will provide you with information within 15 days (but not more than 1 month) of your request. The information will be provided free of charge unless you have already submitted a request for information in the current year for the same set of data. We will refund any charges you have already paid if we have processed the data unlawfully or if the request for information has led to a correction. We may only refuse to provide you with the information in cases provided for by law, indicating the legal position and informing you of the possibility of judicial remedy or recourse to the Authority.
We will notify you of the rectification, blocking, flagging and erasure of personal data, as well as any other person to whom we have previously disclosed the data for processing, unless the non-notification is not in your legitimate interest.
If we do not comply with your request for rectification, blocking or erasure, we will, within 15 days of receipt of the request (but not later than 1 month), inform you in writing or, with your consent, by electronic means, of the reasons for our refusal and inform you of the possibility of judicial remedy and of recourse to the Authority.
If you object to the processing of your personal data, we will consider your objection within 15 days of your request (but not later than 1 month) and inform you in writing of our decision. If we decide that your objection is justified, we will stop the processing, including any further collection and transfer, and block the data, and notify the objection and any action taken in response to it to all those to whom we have previously disclosed the personal data to which the objection relates and who are under a duty to act in order to exercise the right to object.
We will refuse to comply with the request if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. If you do not agree with our decision or if we fail to comply with the time limit, you have 30 days from the date of notification of the decision or the last day of the time limit to take legal action.
Data protection litigation falls within the jurisdiction of the courts, which may, at the option of the data subject and subject to the costs according to the applicable tariff, be brought before the courts of the place of residence or domicile of the data subject. A foreign national may also lodge a complaint with the supervisory authority of his/her place of residence.
Annexes
9. What is the main legislation applicable to our data processing activities?
- Regulation (EU) 2016/679 of the European Parliament and of the Council on the processing of personal data of natural persons (GDPR)
- Regulation (EU) No 2022/1925 of the European Parliament and of the Council of 14 September 2022 on competitive and fair markets in the digital sector and amending Directives (EU) 2019/1937 and (EU) 2020/1828 (Digital Markets) (DMA)
- …
10. Concepts
- Processor: a natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller
- Processing: any operation or set of operations which is performed upon personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure, transmission, dissemination, making available by other means, alignment, combination, restriction, erasure, destruction
- Transfer: making personal data processed by the Data Controller available to third parties
- Data Breach: a breach of security resulting in the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed
- Active visitor: visitors to the website operated by the Data Controller and to other websites accessible from the addresses specified therein, who, by providing their data, perform actions on the website
- TOS: the General Terms and Conditions published on the website, which set out the rules for the sale of products and services by the Data Controller
- Identifiable natural person: a natural person who can be identified, directly or indirectly, by reference to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity, such as name, identification number, location data, online identifier
- Recipient: a natural or legal person, public authority, agency or any other body with whom personal data is shared, whether or not a third party.
- Data subject’s consent: a freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she signifies, by a statement or by an act unambiguously expressing his or her consent, that he or she signifies his or her agreement to the processing of personal data concerning him or her
- Data subject: a natural person identified or identifiable on the basis of any information
- Third party: a natural or legal person, public authority, agency or any other body other than the data subject, the controller, the processor or the persons who, under the direct authority of the controller or processor, are authorised to process personal data
- Authority: National Authority for Data Protection and Freedom of Information
- Partner/Customer: a natural person who enters into a contract with the Data Controller for the sale of a product or the provision of a service, other than on a website
- Registration: the recording on the website of the personal data of a guest who creates a user account
- Personal data: any information relating to the data subject
- Service: the product sales and other services provided by the Data Controller to its Customers, Partners and Stakeholders on the website or otherwise, as detailed in the GTC
- Website: its web pages accessible at the URL and other addresses specified therein operated by the Data Controller