Security Policy
Privacy Policy
This Privacy Policy applies to our website, www.ersaonline.com.ar and its affiliated subdomains (collectively, our "Service") together with our application, ERSA. By accessing or using our Service, you indicate that you have read, understood and agreed to our collection, storage, use and disclosure of your personal information as described in this Privacy Policy and our Terms of Service.
Definition and Key Terms
To help explain things as clearly as possible in this Privacy Policy, whenever any of these terms are referred to, they are strictly defined as:
Cookie: small amount of data generated by a website and stored by your web browser. It is used to identify your browser, provide analytics, remember information about you, such as your language preference or login information.Company: When this policy mentions "Company", "we", "us" or "our", it refers to EMPRESA ROMERO S.A, J. R Vidal 4100, CP 3400, Corrientes, Argentina, who is responsible for your information under this Privacy Policy. Platform: website, web application or digital application for the public of ERSA. Country: where is located ERSA or the owners / founders of ERSA, in this case it is AR. Customer: refers to the company, organization or person who registers to use the ERSA Service to manage relationships with their consumers or users of the service.Li>Device: Any device connected to the Internet, such as a phone, tablet, computer or any other device that can be used to visit ERSA and use the Services. IP address: Each device connected to the Internet is assigned a number known as the Internet Protocol address (IP). These numbers are usually assigned in geographical blocks. Often, an IP address can be used to identify the location from which a device connects to the Internet. Staff: refers to those people who are employed by ERSA or are under contract to perform a service on behalf of one of the parties. Personal data: any information that directly, indirectly or in connection with other information, including a personal identification number, allows the identification of a natural person. Service: refers to the service provided by ERSA as described in the relative terms (if available) and on this platform. Third Parties: refers to advertisers, contest sponsors, promotional and marketing partners, and others who provide our content or whose products or services we believe may be of interest to you. Website: the website of ERSA, which can be accessed through this URL: www.ersaonline.com.ar You: a person or entity that is registered with ERSA to use the Services.
What information do we collect?
We collect information about you when you visit our platform, register on our site, place an order, subscribe to our newsletter, respond to a survey or complete a form. Username - Phone Numbers - Emails - Billing addresses - Debit/Credit card numbers - Age
How do we use the information we collect?
Any of the information we collect from you may be used in one of the following ways:
To personalize your experience (your information helps us better respond to your individual needs) To improve our platform (we constantly strive to improve what our platform offers based on the information and feedback we receive from you) To improve customer service (your information helps us to respond more effectively to your customer service requests and support needs) To process transactions To administer a contest, promotion, survey or other site feature To send periodic emails
When does ERSA use third-party end-user information?
EMPRESA ROMERO S.A will collect the end-user data necessary to provide the services of ERSA to our customers.
End users may voluntarily provide us with information that they have made available on social media websites. If you provide such information to us, we may collect publicly available information from the social media websites you have indicated. You can control the amount of information that social media websites make public by visiting these websites and changing their privacy settings.
When does ERSA use third-party customer information?
We receive information from third parties when you communicate with us. For example, when you send us your email address to show interest in becoming a customer of ERSA, we receive information from a third party that provides automated fraud detection services to Andesma. Occasionally, we also collect information that is made publicly available on social media websites. You can control the amount of information that social media websites make public by visiting these websites and changing their privacy settings.
Do we share the information we collect with third parties?
We may share the information we collect, both personal and non-personal, with third parties such as advertisers, contest sponsors, promotional and marketing partners, and others who provide our content or whose products or services we believe may be of interest to you. We may also share it with our existing and future affiliates and business partners, and if we are involved in a merger, asset sale or other business reorganization, we can also share or transfer your personal and non-personal information to our successors in interest.
We may hire trusted third-party service providers to perform functions and provide services to us, such as hosting andining our servers and the Platform, storing and administering databases, email administration, storage marketing, credit card processing, service and fulfilment of orders for products and services you may purchase through the Platform. We may share your personal information, and possibly some non-personal information, with these third parties to enable them to perform these services for us and for you.
We may share parts of our log file data, including IP addresses, for analytical purposes with third parties, such as web analytics partners, application developers and advertising networks. If your IP address is shared, it can be used to estimate the overall location and other technological data, such as connection speed, whether you have visited the platform in a shared location and the type of device used to visit the platform. They can add information about our advertising and what you see on the platform and then provide audits, research and reports to us and our advertisers.
We may also disclose personal and non-personal information about you to the government, law enforcement officials or private third parties as we deem, in our sole discretion, necessary or appropriate to respond to claims, legal processes (including citations), to protect our rights and interests or those of a third party, the safety of the public or any person, to prevent or stop any illegal, unethical or legally prosecutable activity, or to comply with any applicable court orders, laws, rules and regulations.
Where and when is customer and end user information collected?
ERSA will collect the personal information you send us. We may also receive personal information about you from third parties as described above.
How do we use your email address?
By submitting your email address on this platform, you agree to receive our emails. You can unsubscribe from any of these email lists at any time by clicking on the voluntary unsubscription link or other opt-out option included in the respective email. We only send emails to persons who have authorized us to contact you, either directly or through a third party. We do not send unsolicited commercial emails because we hate spam as much as you do. By submitting your email address, you also agree to allow us to use your e-mail address for customer audience targeting on sites such as Facebook, where we show tailored advertising to specific people who have opted to receive our communications. Email addresses sent only through the order processing page will be used for the sole purpose of sending you information and updates related to your order. However, if you have provided us with the same email by another method, we may use it for any of the purposes set out in this Policy. Note: If at any time you wish to unsubscribe to avoid receiving future emails, we include detailed instructions for unsubscription at the bottom of each email.
How long do we keep your information?
We only retain your information for as long as we need it to provide it to ERSA and fulfill the purposes described in this policy. This also applies to any person with whom we share your information and who performs services on our behalf. When we no longer need to use your information and it is not necessary to keep it to comply with our legal or regulatory obligations, we will remove it from our systems or depersonalize it so that we cannot identify you.
How do we protect your information?
We implement a variety of security measures to maintain the security of your personal information when you place an order, enter, send or access your personal data. We offer the use of a secure server. All confidential / credit information provided is transmitted through Secure Socket Layer (SSL) technology and then encrypted in our database of payment gateway providers only to be accessible by those authorized with special rights of access to such systems, and must keep the information confidential. After a transaction, your private information (credit cards, social security numbers, finances, etc.) is never archived. However, we cannot guarantee the absolute security of the information you transmit to ERSA, nor can we guarantee that your information on the Service will not be accessed, disclosed, altered or destroyed by a violation of any of our physical conditions, technical or management safeguards.
Could my information be transferred to other countries?
ERSA is embedded in AR. Information collected through our website, through direct interactions with you or the use of our support services may be transferred from time to time to our offices or staff, or to third parties, located worldwide, and may be viewed and hosted anywhere in the world, including countries that may not have generally applicable laws governing the use and transfer of such data. To the extent permitted by applicable law, by using any of the above, you voluntarily agree to the cross-border transfer and storage of such information.
Is the information collected through the ERSA Service secure?
We take precautions to protect the security of your information. We have physical, electronic and administrative procedures to help safeguard, prevent unauthorized access, maintain data security and use your information properly. However, neither people nor security systems are infallible, including encryption systems. In addition, people may commit deliberate crimes, make mistakes, or fail to follow policies. Therefore, although we make every reasonable effort to protect your personal information, we cannot guarantee its absolute security. If applicable law imposes an irrenunciable obligation to protect your personal information, you agree that intentional misconduct will be the standards used to measure our compliance with that obligation.
Can I update or correct my information?
The rights you have to request updates or corrections to the information that ERSA collects depend on your relationship with Andesmer. Staff may update or correct your information as detailed in our internal company employment policies.
Customers are entitled to request the restriction of certain uses and disclosures of personally identifiable information as follows. You may contact us to (1) update or correct your personally identifiable information, (2) change your preferences with regard to communications and other information you receive from us, or (3) delete the personally identifying information held about you on our system (subject to the following paragraph), by terminating your account. Such updates, fixes, changes and deletions will have no effect on any other information that we hold or that we have provided to third parties in accordance with this Privacy Policy prior to such update, correction, change or deletion. To protect your privacy and security, we may take reasonable steps (such as requesting a unique password) to verify your identity before granting you access to your profile or making corrections. You are responsible for keeping your unique password and account information confidential at all times.
You must bear in mind that technologically it is not possible to remove all and every one of the records of the information you have provided to us from our system. The need to make backups of our systems to protect information from involuntary loss means that there may be a copy of your information in a form that cannot be deleted and that will be difficult or impossible for us to locate. Immediately after receiving your request, all personal information stored in the databases we actively use and other easily searchable means will be updated, corrected, changed or deleted, as appropriate, as soon as and to the extent reasonably and technically possible.
If you are an end user and wish to update, delete or receive any information we hold about you, you can do so by contacting the organization you are a customer of.
Personnel
If you are an ERSA employee or applicant, we collect the information you provide to us voluntarily. We use the information collected for human resources purposes to manage employee benefits and select applicants.
You may contact us to (1) update or correct your information, (2) change your preferences regarding communications and other information you receive from us, or (3) receive a record of the information we have about you. Such updates, fixes, changes and deletions will have no effect on any other information that we hold or that we have provided to third parties in accordance with this Privacy Policy prior to such update, correction, change or deletion.
Business Sales
We reserve the right to transfer information to a third party in the event of a sale, merger or other transfer of all or substantially all of the assets of ERSA or any of its corporate affiliates (as defined in this document), or the portion of ERSA, or any one of its Corporate Affiliates with which the Service is associated, or in the case that we discontinue our business or file a claim or have filed a claim against us in case of bankruptcy, reorganization or similar proceedings, provided that the third party agrees to abide by the terms of this Privacy Policy.
Affiliates
We may disclose information (including personal information) about you to our corporate affiliates. For the purposes of this Privacy Policy, "Corporate Affiliate" means any person or entity that directly or indirectly controls, is controlled by or is under common control with ERSA, whether by ownership or otherwise. Any information relating to you that we provide to our corporate affiliates will be treated by such corporate associates in accordance with the terms of this privacy policy.
Rule of Law
This Privacy Policy is governed by the laws of AR without regard to their conflict of laws provision. You agree to the exclusive jurisdiction of the courts in relation to any action or dispute arising between the parties under or in connection with this Privacy Policy, except for those individuals who may be entitled to lodge claims under the Privacy Shield or the Swiss-US Framework.
The laws of AR, excluding their conflicts of laws, shall govern this Agreement and your use of the Platform. Your use of the Platform may also be subject to other local, state, national or international laws.
By using ERSA or communicating directly with us, you agree to this Privacy Policy. If you do not agree with this Privacy Policy, you should not interact with our website or use our services. Your continued use of the website, direct interaction with us or after posting changes to this Privacy Policy that do not significantly affect the use or disclosure of your personal information will mean that you accept such changes.
Your consent
We have updated our Privacy Policy to give you complete transparency about what is set when you visit our site and how it is used. By using our platform, registering an account or making a purchase, you hereby accept our Privacy Policy and its terms.
Links to other Websites
This Privacy Policy applies only to the Services. The Services may contain links to other websites that ERSA does not operate or control. We are not responsible for the content, accuracy or opinions expressed on such websites, and such websites are not investigated, monitored, or verified by us for their precision or integrity. Please note that when you use a link to go from the Services to another website, our Privacy Policy is no longer valid. Your browsing and interaction on any other website, including those that have a link on our platform, are subject to the own rules and policies of that website. These third parties may use their own cookies or other methods to collect information about you.
Cookies
ERSA uses "cookies" to identify areas of our website that you have visited. A cookie is a small portion of data that your web browser stores on your computer or mobile device. We use cookies to improve the performance and functionality of our platform, but they are not essential for your use. However, without these cookies, certain features, such as videos, may not be available or you will be asked to enter your login data each time you visit the platform, as we could not remember that you had logged in previously. Most web browsers can be configured to disable the use of cookies. However, if you disable cookies, you may not be able to access the functionality of our website properly or at all. We never place personally identifiable information in cookies.
Block and disable Cookies and similar technologies
Wherever you are, you can also configure your browser to block cookies and similar technologies, but this action may block our essential cookies and prevent our website from functioning properly, and you may not be able to use all of its features and services in full. You should also be aware that you may also lose stored information (e.g. saved login details, site preferences) if you block cookies in your browser. Different browsers provide different controls. Disabling a cookie or a cookie category does not remove the cookie from your browser, you must do it yourself from your navigator, you should visit the help menu of your browser for more information.
Remarketing Services
We use remarketing services. What is remarketing? In digital marketing, remarketing (or retargeting) is the practice of posting ads on the Internet to people who have already visited your website. It makes your business look like it's "following" people on the Internet by posting ads on the websites and platforms they use most.
Payment Details
With respect to any credit card or other payment processing details you have provided to us, we are committed to ensuring that this confidential information is stored in the safest way possible.
Children's Privacy
We collect information from children under the age of 13 only to improve our services. If you are a parent or guardian and know that your child has provided us with personal data without your permission, please contact us. If we learn that we have collected personal data from anyone under the age of 13 without verifying parental consent, we take steps to remove that information from our servers.
Changes to our Privacy Policy
We may change our Service and policies, and we may need to make changes to this Privacy Policy so that they accurately reflect our Services and policies. Unless otherwise required by law, we will notify you (for example, through our Service) before making changes to this Privacy Policy and give you the opportunity to review them before they enter into force. Then, if you continue to use the Service, you will be subject to the updated Privacy Policy. If you do not wish to accept this or any updated Privacy Policy, you may delete your account.
Third-party services
We may display, include or make available third-party content (including data, information, applications, and other product services) or provide links to third party websites or services ("Servicios de terceros").
You acknowledge and agree that ERSA will not be responsible for any third-party Services, including their accuracy, integrity, timeliness, validity, copyright compliance, legality, decency, quality or any other aspect thereof. ERSA assumes and will have no obligation or liability to you or any other person or entity for the Third Party Services.
Third-party Services and links to them are provided for your convenience only and you access and use them entirely at your own risk and subject to the terms and conditions of such third parties.
Facebook Pixel
Facebook pixel is an analysis tool that allows you to measure the effectiveness of your advertising by understanding the actions people take on your website. You can use the pixel to: Make sure your ads are shown to the right people. Facebook Pixel may collect information from your device when you use the service. Facebook pixel collects information that is stored in accordance with its Privacy Policy.
Google Maps Tracking API Technologies
The Google Maps API is a robust tool that can be used to create a custom map, a search map, log functions, show live data synchronization with location, schedule routes or create a mashup, just to name a few.
The Google Maps API may collect information about you and your device for security reasons.
The Google Maps API collects information that isined in accordance with its Privacy Policy.
Information on the General Data Protection Regulation (RGPD)
We may collect and use your information if you belong to the European Economic Area (EEA), and in this section of our Privacy Policy we will explain exactly how and why this data is collected, and how we keep it protected from duplication or misuse.
What is GDPR?
The GDPR is an EU-wide privacy and data protection law that regulates how companies protect EU resident data and improves the control that EU residents have over their personal data.
The GDPR is relevant to any company that operates globally and not just to EU-based companies and EU residents. Our customers’ data is important no matter where they are, so we have implemented GDPR controls as our reference standard for all our operations worldwide.
What is Personal Data?
Any data that relates to an identifiable or identifying individual. The GDPR covers a wide range of information that could be used alone or in combination with other pieces of information to identify a person. Personal data goes beyond a person's name or email address. Some examples include financial information, political opinions, genetic data, biometric data, IP addresses, physical address, sexual orientation, and ethnic origin.
Data protection principles include requirements such as:
The personal data collected should be processed in a fair, legal and transparent manner and should only be used in a way that a person would reasonably expect.Personal data should be collected only to fulfil a specific purpose and should only be used for that purpose. Organizations must specify why they need personal data when collecting it.Personal data should not be kept longer than is necessary to fulfil its purpose.Individuals covered by the GDPR have the right to access their own personal data. You can also request a copy of your data and that your data be updated, deleted, restricted or moved to another organization.
Why is GDPR important?
The GDPR adds some new requirements regarding how should protect the personal data of the people they collect and process. It also increases betting on compliance by increasing enforcement and imposing higher penalties for non-compliance. Beyond these facts, it is simply the right thing. At ERSA we firmly believe that the privacy of your data is very important and we already have sound security and privacy practices that go beyond the requirements of this new regulation.
Individual rights of the data subject: access, portability and deletion of data
We are committed to helping our customers comply with the data subject rights requirements of the GDPR. ERSA processes or stores all personal data on suppliers that comply with the DPA and have been thoroughly reviewed. We store all conversations and personal data for a maximum of 6 years, unless your account is deleted. In this case, we will delete all data in accordance with our Terms of Service and Privacy Policy, but we will not keep it for more than 60 days.
We are aware that if you work with EU customers, you must be able to provide them with the ability to access, update, retrieve and delete personal data. We have been set up as self-service from the beginning and have always given you access to your data and to your customers' data. Our customer service team is here to answer any questions you may have about how to work with the API.
Residents of California
The California Consumer Privacy Act (CCPA) requires us to disclose the categories of Personal Information that we collect and how we use it, the types of sources from which we collect Personal Information and the third parties with whom we share it, as explained above.
We are also obliged to disclose information about the rights of residents of California under California law. You may exercise the following rights:
Right to know and access. You may submit a verifiable request for information regarding: (1) the categories of Personal Information that we collect, use or share; (2) the purposes for which we collect or use the types of personal information; (3) the category of sources from which we gather Personal Information; and (4) specific pieces of personal data that we have collected about you.Right to equal service. We will not discriminate against you if you exercise your privacy rights.Right to delete. You may submit a verifiable request to close your account and we will delete the Personal Information about you that we have collected.Require a company that sells a consumer's personal data not to sell the consumers' personal data.
If you make a request, we have one month to respond to it. If you wish to exercise any of these rights, please contact us.
We do not sell the personal information of our users.
For more information about these rights, please contact us
California Online Privacy Protection Act (CalOPPA)
CalOPPA requires us to disclose the categories of personal information that we collect and how we use it, the types of sources from which we collect personal information and the third parties with whom we share it, as explained above.
CalOPPA users have the following rights:
Right to know and access. You may submit a verifiable request for information regarding: (1) the categories of Personal Information that we collect, use or share; (2) the purposes for which we collect or use the types of personal information; (3) the category of sources from which we gather Personal Information; and (4) specific pieces of personal data that we have collected about you.Right to equal service. We will not discriminate against you if you exercise your privacy rights.Right to delete. You may submit a verifiable request to close your account and we will delete the Personal Information about you that we have collected.The right to request that a company that sells a consumer's personal data, do not sell the consumers' personal data.
If you make a request, we have one month to respond to it. If you wish to exercise any of these rights, please contact us.
We do not sell the personal information of our users.
For more information about these rights, please contact us.