Privacy policy

PRIVACY AND PERSONAL DATA PROTECTION POLICY

At Hifas Da Terra S.L., we take the protection of our users’ personal data very seriously, ensuring its security and confidentiality. This Privacy Policy describes how we collect, use and protect your personal information through our website and associated services.

Use of our website implies prior express acceptance of this Privacy Policy, so we recommend that you read it carefully. All operations involving the processing of personal data, whether automated or not, shall be subject to the conditions described in this document.

Operations, processes and technical procedures carried out either automatically or manually that enable the collection, storage, modification, transfer and other actions relating to personal data are considered to constitute the processing of personal data.

BASIC INFORMATION ON DATA PROTECTION

• Data Controller: Hifas Da Terra S.L.

• Purpose:

• To provide information about our products.

• To manage and respond to online enquiries.

• Sending promotions, advertising and newsletters.

• To manage the blog and social media.

• To process and manage orders.

• Legal basis: Consent of the data subject and performance of a contract.

• Recipients: Data may be disclosed to third parties only where necessary for the performance of the contract, such as to transport and logistics companies for the delivery of products, as well as in cases where there is a legal obligation.

• Rights: Access, rectify and erase data, restrict or object to processing, data portability and withdraw consent.

• Further information: You can request further information by writing via the contact page.

WHAT DOES THE PROCESSING OF PERSONAL DATA MEAN?

Operations, processes and technical procedures carried out automatically or non-automatically that enable the collection, storage, modification, transfer and other actions relating to personal data are considered to be the processing of personal data.

 

WHAT DOES USE OF THE WEBSITE ENTAIL?

Before sending any information via the website www.hifasdaterra.com, the user agrees to read this Privacy Policy and thereby gives their unambiguous, free, specific and informed consent to the processing of their personal data for the purposes indicated.

 

This express consent implies authorisation for the processing of your data by Hifas Da Terra S.L. in accordance with the terms set out in this Privacy Policy, as well as by the joint controllers and data processors with whom Hifas Da Terra S.L. has a binding contractual relationship and compliance monitoring arrangement.

  

WHO IS THE DATA CONTROLLER?

• Data Controller: Hifas Da Terra S.L.

• Tax ID: B36409290

• Address: Portamuiño, 7, Pontevedra, 36154, Pontevedra

• Email: lopd@hifasdaterra.com

• Telephone: +34 986861087

 

Hifas Da Terra S.L. guarantees the confidentiality and privacy of the personal data collected, having implemented security measures to prevent alteration, loss, unauthorised processing or access, and to ensure the integrity and security of personal data, in accordance with the provisions of applicable data protection legislation, including, but not limited to, the European Union’s General Data Protection Regulation (GDPR), as well as any national, international or regional legislation applicable to the processing of personal data in the Customer’s country of residence. 

To this end, the necessary technical measures are implemented to prevent any alteration, loss, unauthorised access or misuse of the data processed, in accordance with the nature of the data, the state of technology, and the risks to which it is exposed.

ACCEPTANCE OF THE PRIVACY POLICY

The data held by Hifas Da Terra S.L. has been collected with the user’s explicit consent, following prior notification of the purposes of the processing, which are expressly set out in this Privacy Policy. Hifas Da Terra S.L. guarantees that Users’ personal data will not be used for purposes other than those mentioned in this notice.

For our part, at Hifas Da Terra S.L. we cannot be held responsible for incidents involving personal data where these result from an attack or unauthorised access to the systems in a manner that is impossible to detect by the security measures in place, or where they are due to a lack of diligence on the part of the User regarding the safekeeping of their access passwords or their own personal data.

PURPOSE AND LEGAL BASIS OF PROCESSING

At Hifas Da Terra S.L., we use the personal data provided by users for the following purposes:

1. To manage orders, the commercial relationship and the provision of the requested services. 

2. To respond to enquiries, requests for information or support requests. 

3. To send marketing communications, newsletters and personalised recommendations, provided the user has given their consent.

4. To ensure the security of the service and prevent fraud and misuse.

5. To comply with applicable legal obligations (tax, accounting, health or consumer protection).

We will not use your data for any purpose not stated in this privacy policy, nor will we send additional unsolicited information without your express consent. You may withdraw your consent at any time without this affecting the lawfulness of any processing carried out previously.

Data will be retained for as long as necessary to fulfil the stated purposes and, subsequently, for the applicable statutory limitation periods.

In the case of commercial communications, the data will be retained until the user withdraws their consent. Once these periods have expired, the data will be deleted or, where applicable, blocked if there is a legal obligation to retain it.

The personal data provided by Users will be incorporated into the files of Hifas Da Terra S.L. for the following purposes:

A. Customer File

• Commercial communications: In accordance with Article 6(1)(a) of the GDPR, in line with Swiss legislation (New Federal Act on Data Protection – nFADP), UK (Data Protection Act 2018 – UK GDPR) and Monaco (Law No. 1.165 of 23 December 1993 on the protection of personal data), if the User has previously given their express consent, Hifas Da Terra S.L. will use their data to send newsletters and commercial communications.

• Users may unsubscribe at any time by sending an email to lopd@hifasdaterra.com or by clicking the link included in the emails.

• Once unsubscription has been requested, Hifas Da Terra S.L. will block the User’s email address unless there is consent to continue processing or a legal reason justifying it.

With regard to the processing arising from the use of the quiz, when the user completes the quiz available on the website, www.hifasdaterra.com may process the data provided in the questionnaire, as well as the information obtained from the answers, for the purpose of generating a personalised result and offering recommendations for products or content tailored to the user’s profile. This processing may involve profiling, based exclusively on the answers provided, without this involving automated decisions with legal or significant effects on the user.

Should the user provide their contact details to receive the quiz result or to add it to their customer area, such information may be incorporated into their profile for the purposes of personalised service. The sending of commercial communications based on the quiz results will only take place where the user has given their express consent.

WHAT IS THE LEGAL BASIS FOR THE PROCESSING?

The legal basis for the various processing activities carried out by Hifas Da Terra S.L. is based on:

• For the purpose of providing a service, the processing is based on the performance of a contract between the parties. This includes the purchase and distribution of your products.

• For marketing and commercial management purposes, the processing is based on the express consent of the data subject, who authorises the sending of promotional and commercial information about our products and services.

• For purposes related to the analysis of user behaviour on the website, the processing is based on the legitimate interest of Hifas Da Terra S.L., which aims to improve the functionality of its website, adapt it to users, and offer a more personalised shopping experience.

• For purposes related to compliance with legal obligations, the processing is based on applicable regulations, such as the GDPR and the Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDD), as well as other data protection, tax, commercial and sector-specific regulations applicable at local, national and international levels, including the provisions of legislation from other countries that may be applicable.

DATA DISCLOSURE AND INTERNATIONAL TRANSFERS

Hifas Da Terra S.L. will not disclose personal data to third parties without the express consent of users, except in the following cases:

• Provision of the service: Data may be disclosed to transport and logistics companies for the sole purpose of managing the delivery of purchased products.

• Legal obligation: Where required by applicable regulations, data may be disclosed to competent authorities.

• Digital tools: Anonymised data, such as metrics and analytics generated by third-party tools integrated into the website (for example, website navigation and performance analysis), may be shared.

International Transfers

Hifas Da Terra S.L. uses tools and services whose servers are located within the European Economic Area (EEA) or in countries for which the European Commission has issued adequacy decisions. Should an international data transfer to a country without such recognition be required, appropriate safeguards will be ensured, such as standard contractual clauses approved by the European Commission or equivalent mechanisms.

INTEGRATION OF THIRD-PARTY SERVICES

Integration of the Trusted Shops Trustbadge

We have integrated the Trusted Shops Trustbadge into our Website in order to display our quality seal and the reviews collected, as well as to offer Trusted Shops’ services to buyers after they have placed an order.

This integration is necessary to fulfil our legitimate interests in promoting our offering and ensuring secure shopping, in accordance with Article 6(1)(f) of the GDPR.

The Trustbadge and associated services form part of the offering of Trusted Shops GmbH, based at Subbelrather Straße 15C, 50823 Cologne, Germany. It is implemented via a content delivery network (CDN) provider as part of the order processing. As Trusted Shops GmbH uses service providers in the United States, an adequate level of data protection is ensured. For further information on the security measures in place, please refer to the Trusted Shops Privacy Policy at the following link: https://www.trustedshops.es/aviso-legal/

Data Logging

Each time the Trustbadge is accessed, the Trusted Shops web server automatically generates a log file containing the following data:

• The visitor’s IP address.

• Date and time of access.

• Amount of data transmitted.

• Requesting internet service provider.

This data is stored in a security database and is used exclusively to detect security issues. The log files are automatically deleted within a maximum of 90 days.

Data Transfer to Trusted Shops

If the User has placed an order and opted to use Trusted Shops’ services, or if they are already registered, additional data will be transferred automatically based on the order information. In these cases, the contractual agreement between the User and Trusted Shops GmbH shall apply.

To ensure security and privacy, Trusted Shops uses a one-way encryption function to convert the User’s email address into an unrecognisable hash value prior to transmission. This value allows verification of whether the User is registered without compromising their privacy. Once verification has been carried out, the information is automatically deleted.

The processing of this data serves the legitimate interests of both our company and Trusted Shops, in relation to buyer protection and transaction rating services, in accordance with Article 6(1)(f) of the GDPR.

For further details, including the right to object to data processing, the User may consult the Trusted Shops Privacy Policy via the link mentioned above or within the Trustbadge itself.

Klarna Integration

In order to offer Users payment options via Klarna, at the time of purchase we may transmit to Klarna certain personal data provided in the contact form and in the order details.

The purpose of this process is to enable Klarna to:

• Assess the User’s eligibility to access its payment methods.

• Tailor payment options based on the User’s profile.

The processing of personal data in relation to Klarna is carried out in accordance with its Privacy Policy, which the User can consult via the following link: https://www.klarna.com/es/legal/

DATA PROCESSORS

At Hifas Da Terra S.L., we share personal information with third parties solely to provide services or carry out commercial operations, in accordance with the provisions of this Privacy Policy. When we share personal data, we do so in accordance with legal requirements regarding privacy and data security, always under contracts signed with data processors that guarantee compliance with current regulations.

SOCIAL MEDIA

Hifas Da Terra S.L. maintains social media channels on platforms such as Facebook, Instagram, Twitter and YouTube, with the aim of publishing and disseminating information about our products and services (such as mushroom extracts), interacting with users and providing a channel for customer support and social interaction.

If we share personal images or recordings on our social media channels, this will be done with the express consent of the data subjects. Should you wish to withdraw your consent or request the removal of such images or recordings, you may do so by emailing lopd@hifasdaterra.com, attaching a copy of your identity document.

By accessing our website via a social media platform, you authorise that platform to share certain personal data with Hifas Da Terra S.L.. Please note that if your social media accounts are geolocated, this location information may be visible to third parties.

You can find out more about how your data is used on social media by consulting the privacy policy of each of the platforms mentioned.

USERS’ RIGHTS

You may at any time withdraw your consent and exercise your rights of access, rectification, erasure, restriction, objection and data portability by contacting Hifas Da Terra S.L. via email at lop@hifasdaterra.com.

EXERCISING YOUR RIGHTS

At any time, the user may withdraw their consent and exercise their rights of access, rectification, erasure, restriction, objection and data portability as provided for in the applicable data protection regulations, by sending an email to lopd@hifasdaterra.com or by post to the following address: Portamuiño, 7, Pontevedra, 36154, Pontevedra.

In both cases, the user must enclose a copy of their national identity card, passport or other valid identification document.

You may also use the templates and forms for exercising these rights, which are available on the websites of the data protection authorities in your respective country. For further information, please consult the resources provided by the competent authority in your country or the website of the Spanish Data Protection Agency:

https://www.aepd.es/reglamento/derechos/index.html

WHAT DO THESE RIGHTS ENTAIL?

• Right to information: The data subject must be informed in advance, expressly, precisely and unequivocally, of the existence of a data file, the possibility of exercising their rights and the identity of the data controller.

• Right of access: This allows individuals to find out about and obtain, free of charge, information regarding their personal data that is being processed.

• Right to rectification: This allows for the correction of errors, the modification of inaccurate or incomplete data, and ensures the accuracy of the information being processed.

• Right to erasure: This allows data that is inadequate or excessive to be deleted, without prejudice to the duty to block data as set out in the applicable regulations.

• Right to object: This allows the data subject to prevent the processing of their personal data or to have such processing ceased.

• Right to restriction: The user has the right to decide which personal data they do not wish to be processed again in the future, and may exercise this right where they have previously contested the accuracy of such data or where the processing is unlawful.

In the event of a restriction on processing, the restriction may be lifted if the data subject consents, if the processing affects the protection of the rights of another natural or legal person, if there is a legal proceeding justifying it, or if there is an important reason of public interest based on current legislation.

• Right to data portability: You have the right to receive the personal data you have provided, or which Hifas Da Terra S.L. has processed, in a structured, commonly used and machine-readable format, provided that the processing is carried out by automated means and is based on consent or on the performance of a contract.

The right to data portability does not apply where the transmission is technically impossible, where it may adversely affect the rights and freedoms of third parties, or where the processing serves a public interest purpose based on current legislation.

OTHER RIGHTS

• Right to be forgotten: Removal of names from search engine results lists.

• Advertising rights: Right to be excluded from telephone directories, right not to receive unsolicited advertising, rights of subscribers and users of telecommunications services.

SECURITY MEASURES APPLICABLE TO THE PROCESSING OF PERSONAL DATA

Hifas Da Terra S.L., in order to protect the personal data of its users, has security protocols in place and applies technical and organisational measures appropriate to the state of the art, taking into account the scope, context and purposes of the processing, as well as the varying likelihood and severity of risks to the rights and freedoms of data subjects. We strive to ensure the confidentiality, integrity, availability and resilience of our processing systems and services.

Furthermore, we take care to select data processors appropriately, in compliance with data protection regulations.

In particular, Hifas Da Terra S.L. has the following measures in place:

1. A privacy and security risk assessment strategy, as well as a disaster recovery plan designed to safeguard the continuity of our services and to protect our staff and our data.

2. Implementation of Technical and Organisational Security Measures: Hifas Da Terra S.L. confirms that it applies the technical and organisational measures mentioned in this section to the functions described in this privacy policy.

3. Incident Log: Used by Hifas Da Terra S.L. staff to report any incident relating to the security of information and personal data contained in the files they process.

4. Regular Training: Regular training is provided to our staff to prevent errors in data management. Hifas Da Terra S.L. undertakes not to allow access to or processing of files containing personal data by staff who have not received such training.

5. Identification and Authentication: Hifas Da Terra S.L. applies strict security measures for the identification and authentication of users accessing personal data, with access restrictions based on need.

6. Staff and contractors: We require our employees and service providers to have sufficient knowledge of information security measures.

NOTIFICATION OF PERSONAL DATA BREACHES

In the event of a personal data breach, provided that it is not unlikely that such a breach poses a risk to the rights and freedoms of natural persons, Hifas Da Terra S.L. will notify the relevant data protection authority (depending on the country in which the data subject resides) within 72 hours of becoming aware of the incident. The notification will describe the nature of the breach, the possible consequences that may arise and the measures taken or proposed to remedy the security breach. Where possible, it will also provide information on the categories and approximate number of data subjects and data affected.

Furthermore, Hifas Da Terra S.L. will notify the data subjects as soon as possible where the personal data breach poses a high risk to the rights and freedoms of natural persons, describing the possible consequences and the measures taken or proposed to address the security breach.

COOKIE POLICY

At the link and in the Cookie Policy , we inform you that this website operated by Hifas Da Terra S.L. may use cookies (small data files sent by the server to the computer of the user accessing this website) to perform certain functions that are considered essential for the proper functioning and display of the site, for sharing on social media and, in some cases, for carrying out statistical analyses and proposing improvements.

To obtain these analyses, this website may automatically store certain information in the server logs through the use of cookies. For example, the IP address is considered personal data. Hifas Da Terra S.L. uses cookies that record IP addresses during access to and navigation of this website, to analyse and measure access and time spent on the various pages of the site, and to draw conclusions about website traffic trends. However, Hifas Da Terra does not link IP addresses or other data generated by the use of cookies, nor the results of metrics, to personally identifiable information, nor does it use them to collect personal data, although on occasion they may be used to target advertising or segment users to whom it is directed.

As a user, you should be aware that we use internet tools and platforms that install cookies over which we have no control; therefore, the owners of these tools may use such data for other purposes, for which we accept no responsibility.

For this reason, we recommend that you read the Cookie Policy to find out about our cookies and our policy regarding them.

CHILDREN’S PRIVACY

In accordance with the guidelines set out in data protection regulations, children under the age of 14 must not provide their personal data to Hifas Da Terra S.L. without the prior consent of their parents or guardians, unless specific provisions in the relevant country apply that alter this minimum age.

Should Hifas Da Terra S.L. discover that personal data has been provided by a minor, it will attempt to obtain the consent of the guardian or legal representative, or will automatically delete the data.

USER RESPONSIBILITY

As a user, you accept and guarantee that the personal data you provide is accurate, and you are solely liable for any direct or indirect damage or loss that may be caused to Hifas Da Terra S.L., as the controller of this website, or to third parties, if you complete any form with false information or data belonging to third parties, thereby causing deception, damage or loss.

Please inform us of any changes to the data provided by contacting us via the form on the contact page. 

THIRD-PARTY LINKS

Hifas Da Terra S.L. accepts no liability for links to third-party websites that may be included on this site, as it has no control over their content, availability, quality, legality or accuracy. The presence of such links is for information purposes only and in no way implies any relationship, recommendation, endorsement or supervision by Hifas Da Terra S.L. in relation to them.

Access to these links is at the user’s sole responsibility, and the user must review and accept the terms of use, privacy policies and any other applicable regulations of the linked websites. In accordance with current regulations on digital services and the liability of intermediation service providers, Hifas Da Terra S.L. shall not be liable, either directly or indirectly, for any damage or loss arising from access to, use of, or reliance on the content of external links.

EXPRESS PROHIBITION ON USERS SHARING THIRD-PARTY DATA

Hifas Da Terra S.L. expressly prohibits users from sharing, providing or disclosing to anyone third-party data that they may obtain as a result of contact, interaction or browsing or consultation via this website, unless they can provide proof of the express authorisation of the user whose data they intend to disclose. Images of individuals are also considered personal data, and no one may use them without the express consent of the data subject.

As a user, you acknowledge that you accept responsibility and undertake to hold Hifas Da Terra S.L. harmless from any possible claim, penalty, fine or sanction that it may be obliged to bear as a result of your failure to comply with the duty described above.

If you provide us with personal data relating to other individuals, you must do so with their consent and after having informed them in advance of the terms contained in this Privacy Policy.

APPLICABLE LAW AND JURISDICTION

Hifas Da Terra S.L. is based in Spain and is therefore governed by Spanish and European data protection laws. It also complies with current privacy and e-commerce regulations in the countries to which it ships goods, adapting its procedures to the applicable legal requirements.

The User accepts that any claims or complaints against Hifas Da Terra S.L. arising from or related to the use of this website, and more specifically to the processing of their personal data, shall be resolved by the competent court in accordance with applicable law. Should the User qualify as a consumer under the terms of the General Law for the Protection of Consumers and Users, the competent court shall be that of the consumer’s place of residence.

If the User accesses this site from a location outside Spain, they are responsible for complying with all applicable local and international laws.

AMENDMENTS

Hifas Da Terra S.L. may amend this privacy policy at any time by publishing it on this website, which will always state the date of the latest applicable update.

Last updated: 2 December 2025