1. Controller and contact
The data controller is the owner of Binisues. Their legal identity and NIF/CIF are awaiting provision and verification by the owner. You can contact them by phone on 971 370 440 or by post at Finca Binisues, Camí dels Alocs, Desviament carretera general ME-1, Maó–Ciutadella, km 31.6, Menorca.
2. Data we handle
When you make a purchase, we handle the identification, contact, delivery and billing information you provide, the products ordered, amounts and order status. Stripe processes the data required for payment; Binisues does not receive or store your full card number.
If you use the contact form, we handle your name, email address, optional phone number, subject and message solely to respond to your enquiry. The message is sent directly through SMTP and is not stored in Supabase.
To protect checkout and the contact form against abuse, the system generates a pseudonymous identifier from network data using HMAC. The network address is neither exposed nor stored in plain text for this purpose.
3. Purposes and legal bases
- Managing the cart, order, payment, delivery and after-sales support: performance of the contract and pre-contractual measures.
- Meeting tax, accounting and consumer obligations: compliance with legal obligations.
- Preventing abuse and protecting checkout security: legitimate interest in maintaining service availability and integrity.
- Sending order confirmations and transactional notices: performance of the contract.
We do not use this data for newsletters, advertising profiles or marketing analytics.
4. Providers and transfers
We use Supabase for data infrastructure and authentication in the private administration area, Stripe to process payments and Resend to send transactional emails. These providers may process data on behalf of Binisues under their terms and applicable safeguards.
The homepage directly embeds a Google Maps map. When it loads, Google may receive technical data such as your IP address, browser information and interaction with the map, and may transfer data internationally under its own privacy policy.
5. Retention
Order data is retained throughout the commercial relationship and for the periods needed to meet legal obligations and liabilities. Technical abuse-prevention data is retained only for the operational period needed to enforce limits and remove expired records.
6. Rights
You may request access, rectification, erasure, objection, restriction or portability, where applicable, using the contact details above. You may also complain to the Spanish Data Protection Agency. We may request proportionate information to verify your identity before handling a request.
Last updated: 30 August 2026.