Who is responsible for your data
WeAreBio (“we”, “us”) is the controller of the personal data described in this policy. You can reach us at hello@wearebiofood.com for any question about how we handle it, including to exercise the rights set out below.
Wearebio OÜ
Registry code 14062996
Meistri 22 tn, 13517 Tallinn, Estonia
hello@wearebiofood.com
We have not appointed a Data Protection Officer. We are not required to under Article 37 GDPR: we do not carry out large-scale monitoring and we do not process special categories of data.
What we collect, and why
We only collect what you send us. We do not buy contact lists, we do not profile visitors, and we do not run advertising or analytics on this site.
Catalogue requests
When you ask for our catalogue we collect your name, company and work email address, and optionally the product or category you are interested in. We use it to send you the catalogue that fits your enquiry and to answer any follow-up.
Legal basis: Article 6(1)(b) GDPR — steps taken at your request before entering into a contract. Where no commercial relationship follows, we rely on Article 6(1)(f), our legitimate interest in responding to business enquiries.
Contact enquiries
The contact form collects your name, company, email address and, where you provide them, phone number, country, and details of the product, grade and application you are working on. We use it to answer you and to prepare a quotation or sample where you ask for one.
Legal basis: Article 6(1)(b) GDPR, and Article 6(1)(f) where no contract follows.
Email correspondence
If you write to us directly, we keep the correspondence so that we can follow the thread of a project. Legal basis: Article 6(1)(b) and Article 6(1)(f).
Server logs
Our hosting provider records the usual technical data for every request: IP address, date and time, the page requested, browser and operating system. This is used to keep the site available and to investigate abuse. Legal basis: Article 6(1)(f) — our legitimate interest in the security and stability of the service.
Who else sees it
We do not sell personal data and we do not share it for anyone else’s marketing. There is one processor, under a data processing agreement, and everything stays on their servers in Estonia:
| Who | What for | Where |
|---|---|---|
| Zone Media OÜ (zone.ee) | Hosting this website and its server logs, our email, and the database that stores what you send through the forms | Estonia (EU) |
Transfers outside the EEA
There are none. Every provider we use processes your data inside the European Union, and this website loads no fonts, scripts or other resources from outside our own servers. Nothing you send us leaves the EEA.
How long we keep it
| What | Kept for |
|---|---|
| Catalogue request that leads nowhere | 24 months from the last contact |
| Contact enquiry that leads nowhere | 24 months from the last contact |
| Records relating to a customer or supplier relationship | 7 years, as required by Estonian accounting law |
| Server logs | Retained by Zone under their own policy, typically a few weeks |
Your rights
Under the GDPR you can ask us to:
- Give you a copy of the personal data we hold about you (Article 15).
- Correct anything inaccurate or incomplete (Article 16).
- Erase it, where we no longer need it (Article 17).
- Restrict what we do with it while a dispute is resolved (Article 18).
- Send it to you or another provider in a machine-readable format (Article 20).
- Stop processing based on legitimate interest, by objecting (Article 21).
Write to hello@wearebiofood.com. We answer within one month. There is no charge unless a request is manifestly unfounded or excessive.
Where we rely on your consent, you can withdraw it at any time. Withdrawing it does not affect anything we did before you withdrew it.
Complaints
If you think we have handled your data badly, tell us first and we will try to put it right. You also have the right to complain to the Estonian Data Protection Inspectorate:
Andmekaitse Inspektsioon
Tatari 39, 10134 Tallinn, Estonia
info@aki.ee ·
www.aki.ee/en
If you live in another EU or EEA country, you may complain to your own supervisory authority instead.
Automated decisions
We do not make decisions about you by automated means and we do not profile you.
Do you have to give us your data?
No. Nothing on this site obliges you to give us anything. But we cannot send you a catalogue or answer an enquiry without at least a name and an email address, so leaving those blank means we cannot reply.
Cookies
This site does not use tracking cookies. What it does store on your device is set out in our Cookies Policy.
Changes
If we change how we handle personal data we will update this page and change the date at the top. Where a change materially affects you, we will tell you directly.
Contact
Questions about your data?
Write to us and we will answer within one month, as the GDPR requires.