Privacy Policy

Exclusively for professional clients and businesses (B2B)

1. DATA CONTROLLER

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), we inform you that the controller responsible for processing your personal data is:

Company name: VILLA INSECT S.L.

VAT Number: B09631706

Registered address: Calle Mayor 88, 02270 Villamalea, Albacete (Spain)

Email: info@forinsectfarming.com

Phone: +34 601 67 26 33

Website: www.forinsectfarming.com

VILLA INSECT S.L. operates under the following trade names: Protiberia, For Insect Farming, Protipets and Protifarm.

2. SCOPE OF APPLICATION

This Privacy Policy governs the processing of personal data of representatives, employees, or contact persons of companies, self-employed individuals, and professionals (hereinafter "Professional Client") who access and use the platform www.forinsectfarming.com in the exercise of their economic activity.

NOTICE: The store at www.forinsectfarming.com is restricted to exclusively professional use (B2B). The personal data collected relates to contact persons acting on behalf of a company or as self-employed professionals — not as end consumers.

3. PERSONAL DATA PROCESSED

3.1 Data provided by the user

When registering, placing an order, or using contact forms, we may request the following data:

• Full name of the representative or contact person.
• Corporate email address.
• Professional telephone number.
• Company name and VAT/tax identification number.
• Registered address and delivery address.
• Billing details.

3.2 Automatically collected data (Usage data)

When using the service, the following technical data is collected automatically:

• IP address and approximate geolocation data.
• Browser type and version.
• Pages visited, date and time of access, and time spent on pages.
• Unique device identifiers and diagnostic data.
• Information sent by the browser on each visit to the Service.

4. PURPOSES OF PROCESSING AND LEGAL BASIS

The GDPR requires that all processing of personal data has a legitimate legal basis. The purposes and applicable legal basis for each are set out below.

4.1 Management of the commercial relationship and performance of contract

We process your data to manage professional client registration, process orders, issue invoices, manage shipments, and handle incidents. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

4.2 Commercial and promotional communications

We may send you information about products, offers, news and events related to our business. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in the context of existing clients, or explicit consent (Art. 6(1)(a) GDPR) where this has been requested. You may object to these communications at any time.

4.3 Handling enquiries and customer service

We process your data to respond to requests, complaints and enquiries. Legal basis: legitimate interest of the controller (Art. 6(1)(f) GDPR) and performance of a contract (Art. 6(1)(b) GDPR).

4.4 Service improvement and statistical analysis

We use usage data to analyse platform behaviour, detect errors, improve user experience, and develop new features. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

4.5 Compliance with legal obligations

We retain certain data to comply with tax, commercial and accounting obligations under applicable Spanish and EU law. Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).

4.6 Business transfers

In the event of a merger, acquisition or corporate restructuring, your data may form part of the transferred assets. You will be notified in advance in such a case. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

5. DATA RETENTION PERIODS

Personal data will be retained for the period strictly necessary for the purposes described and, in any case, for the following minimum periods:

• Client and contractual data: for the duration of the commercial relationship and subsequently for 5 years, in accordance with the commercial obligations set out in the Spanish Commercial Code.
• Invoicing and tax data: 5 years from the date of invoice issuance, in accordance with the Spanish General Tax Law.
• Commercial communications data: until the data subject withdraws their consent or objects to processing.
• Usage data and technical logs: maximum 12 months, unless a longer retention period is required by law.

Once the applicable retention periods have elapsed, data will be securely deleted or anonymised.

6. RECIPIENTS AND DATA TRANSFERS

6.1 Service providers (data processors)

FOR INSECT FARMING may share personal data with service providers acting as data processors, with whom data processing agreements have been concluded in accordance with Art. 28 GDPR. These may include:

• Payment platforms (Stripe, PayPal): to process transactions securely.
• Email and communication service providers: for sending order confirmations and commercial communications.
• Web analytics services: for analysing platform usage.
• Transport and logistics companies: for managing shipments.

6.2 Other disclosures

Your data may be disclosed to:

• Public authorities and regulatory bodies: when required by legal obligation.
• Financial institutions: for the management of payments and collections.
• Group companies or affiliates: under the same data protection guarantees.

6.3 International transfers

Where any service provider is located outside the European Economic Area (EEA), FOR INSECT FARMING will ensure that such transfers are carried out with appropriate safeguards in accordance with Art. 46 GDPR, by means of one of the following mechanisms:

• Adequacy decision by the European Commission.
• Standard contractual clauses approved by the European Commission.
• Other legally recognised transfer mechanisms.

7. DATA SUBJECT RIGHTS

In accordance with the GDPR and LOPDGDD, data subjects may exercise the following rights at any time:

• Access: obtain confirmation as to whether their data is being processed and access it.
• Rectification: request the correction of inaccurate or incomplete data.
• Erasure ('right to be forgotten'): request the deletion of data when it is no longer necessary for the purpose for which it was collected.
• Objection: object to the processing of their data, in particular for direct marketing purposes.
• Restriction of processing: request the restriction of processing in certain circumstances.
• Data portability: receive their data in a structured, commonly used and machine-readable format.
• Withdrawal of consent: withdraw consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.

To exercise any of these rights, the data subject may contact us at:

Email: info@forinsectfarming.com

Postal address: Calle Mayor 88, 02270 Villamalea, Albacete (Spain)

The request must include the data subject's full name and a copy of their identity document or equivalent. FOR INSECT FARMING will respond within a maximum period of one month from receipt of the request.

Right to lodge a complaint with a supervisory authority: If you consider that the processing of your data infringes applicable regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD) at www.aepd.es, or with the competent supervisory authority in your country of residence within the EU.

8. COOKIES AND TRACKING TECHNOLOGIES

FOR INSECT FARMING uses cookies and similar tracking technologies (web beacons, tracking pixels, scripts) to analyse the use of the Service, personalise the experience, and improve platform performance.

8.1 Types of cookies used

• Essential cookies (session): strictly necessary for the operation of the website and user authentication. No consent required.
• Preference cookies (persistent): store user preferences (language, access settings). Consent required.
• Analytical cookies (persistent): allow analysis of user behaviour on the platform for statistical and service improvement purposes. Consent required.
• Marketing cookies (persistent): used to personalise communications and measure the effectiveness of campaigns. Consent required.

Users may configure their browser to reject all cookies or to receive a notification when a cookie is sent. For further information, please consult the Cookies Policy available at www.forinsectfarming.com.

9. MINORS

Access to and use of www.forinsectfarming.com is restricted to professionals and businesses. The platform is not directed at minors in any case. In accordance with Art. 7 of the LOPDGDD, the minimum age for providing consent to data processing in Spain is 14 years.

FOR INSECT FARMING does not knowingly collect data from persons under the age of 14. If it is discovered that data from a minor has been collected without the consent of their legal representatives, immediate steps will be taken to delete that data. If you become aware of such a situation, please notify us at info@forinsectfarming.com.

10. DATA SECURITY

FOR INSECT FARMING has implemented the technical and organisational measures necessary to ensure the security of personal data and to prevent its alteration, loss, unauthorised processing, or access, taking into account the state of technology, the nature of the data, and the risks to which it is exposed.

However, no data transmission or storage system is completely secure. FOR INSECT FARMING cannot guarantee the absolute security of information transmitted over the Internet. In the event of a security breach affecting your data, the competent authorities will be notified and, if necessary, the affected data subjects will be informed, in accordance with Art. 33 and 34 GDPR.

11. LINKS TO THIRD-PARTY WEBSITES

The Service may contain links to third-party websites not managed by FOR INSECT FARMING. We recommend reviewing the privacy policy of each website visited. FOR INSECT FARMING assumes no responsibility for the content or privacy practices of third-party websites.

12. CHANGES TO THIS PRIVACY POLICY

FOR INSECT FARMING reserves the right to modify this Privacy Policy to reflect changes in legislation, case law, or business practice. Any changes will be published on this page and communicated via a prominent notice on the Service and/or by email, with sufficient advance notice before taking effect.

We recommend reviewing this Privacy Policy periodically. Changes will take effect upon publication on the website, unless a later date is specified.

13. CONTACT

For any queries relating to this Privacy Policy or to the processing of your personal data, please contact us at:

Email: info@forinsectfarming.com

Phone: +34 601 67 26 33

Contact form: www.forinsectfarming.com

Postal address: Calle Mayor 88, 02270 Villamalea, Albacete (Spain)

VILLA INSECT S.L. | FOR INSECT FARMING | www.forinsectfarming.com

This document applies exclusively to B2B commercial relationships – June 2026