Privacy policy

1. Who is responsible

The controller of your personal data is:

For any question about your data, write to info@vendinginnovation.site.

2. What data we process

• Quote requests and quick orders: first and last name, email, country and, if you provide them, phone, company, tax ID or ABN, type of customer, the machine and option you are interested in, type of venue, footfall and your message.
• Customer account: first name, last name, email and password, which we store encrypted so that nobody can read it. If you add them, also company, phone, tax ID and shipping address.
• If you become a customer: orders, contracts, invoices and support requests.
• Technical data: IP address, browser and pages requested, which the servers log to work and to protect themselves against abuse. We use the country of your IP address to choose the currency of the prices we show you; it is not stored.
• Visit statistics: only if you accept analytics cookies (see the cookie policy).

Fields marked with * in the forms are needed to deal with your request; without them we cannot answer it.

The website is aimed at businesses and professionals. We do not ask for special categories of data, such as health or beliefs; please do not include them in your messages. We do not knowingly process data of children under 14.

3. What we use it for, on what legal basis and for how long

We do not make automated decisions or build profiles that affect you.

We only write to you about your request, your order or your account. We do not send newsletters or advertising. If we ever do, we will ask for your permission first and every message will let you unsubscribe.

4. Who we share your data with

We do not sell your data or give it to other companies to use for their own purposes. It is processed, on our instructions and under a data processing agreement, by the providers that serve us:

• Vercel, a United States company: website hosting and cookie-free visit statistics.
• Railway, a United States company: application server.
• Supabase, a United States company: database.
• Resend, a United States company: sending the website's emails, such as the confirmation of your request.
• Google (Ireland and United States): Google Analytics, only if you accept analytics cookies.
• Our email provider, to receive and answer your messages.

If you place an order, we share the details needed for delivery (name, address and contact phone) with the carrier or freight forwarder that ships it and with whoever installs the machine. If you ask for a lease financed by a finance company, we will pass on the details it needs to assess it, only when you ask us to.

We may also have to disclose them to the authorities, such as the Spanish Tax Agency or a court, when the law requires it.

5. Transfers outside the European Economic Area

Several of these providers are United States companies, so your data may be processed there. These transfers rely on the EU-US Data Privacy Framework (European Commission Implementing Decision (EU) 2023/1795) when the provider is certified, or on the standard contractual clauses approved by the Commission (Implementing Decision (EU) 2021/914). You can check certified companies on the official Data Privacy Framework list and ask us for more information at info@vendinginnovation.site.

If you are a customer in Australia, your data is stored outside Australia, in the European Union and the United States. If you place an order, we will share it with the Australian companies that transport or install the machine.

6. Your rights

You can ask us at any time for:

• Access: to know what data we hold about you and receive a copy.
• Rectification: to correct inaccurate or incomplete data.
• Erasure: to delete your data when it is no longer needed or we have no basis to process it.
• Objection: to stop processing it when the processing is based on our legitimate interest.
• Restriction: to keep it without using it while a complaint is resolved.
• Portability: to receive the data you gave us in a commonly used format, or have us send it to another company.
• Withdrawal of consent where you gave it, without affecting what was done before. For analytics cookies, use the "Cookie settings" button at the bottom of every page.

Write to info@vendinginnovation.site from the address you gave us or say how we can identify you. If we have reasonable doubts about your identity, we will ask for further details. We will reply within one month at most; if the request is complex, that period can be extended by two more months and we will tell you before the first month ends.

If you are not satisfied with our answer, you can complain to the Spanish Data Protection Agency at www.aepd.es, or to the data protection authority of the European Union country where you live or work.

If you are in Australia, you can also write to us to complain about how we handle your data: we will review the case and reply in writing within 30 days at most. The Office of the Australian Information Commissioner (oaic.gov.au) explains what you can do next if you are not satisfied.

7. Security

The whole website uses an encrypted connection (HTTPS). Passwords are stored encrypted with a method that does not allow them to be recovered, the session uses a cookie that no script on the page can read, and access to the admin panel is restricted. We limit repeated login attempts and form submissions.

If we suffered a security breach that puts your data at risk, we would report it to the Spanish Data Protection Agency and, where the law requires it, to you too.

8. Changes to this policy

If we change this policy, we will publish the new version here with its date. If the change is significant and we have your email, we will let you know.