Legal

Privacy Policy

Last update: April 8th, 2024.

1. Data controller and description

1.1. Data controller

The data controller for the processing of this website and app and its services is Yperea 459 S.L. (hereinafter Yperea), located at Post Office Box A.C. 17, Carrer Concepcion 5, 07350, Binissalem, Balearic Islands, Spain.

NIF: B16358145
Email: contact@yperea.com

1.2. Description

The acceptance of the Privacy Policy from Yperea (hereinafter “Privacy Policy”), is a necessary condition for the use of our website/app, and the provision of the service (hereinafter the "Service").

This Privacy Policy regulates the collection, processing and use of your personal and non-personal information as a user of Yperea, as of the effective date in the header.

To process your personal data, Yperea complies with current local and European legislation, as well as its development regulations.

2. Information collected

You can visit the website and use the app without providing any data, but if you want to contract our services or products, you will need to share with us some personal information. The information (personal or non-personal) collected by the Service may vary based on that.

The personal and non-personal information collected by the Service is gathered in three ways: 1) the one collected automatically 2) the one that you voluntarily provide us and 3) the one provided by third parties.

2.1. The compiled automatically

This information will consist of:

• The compiled by means of cookies or similar mechanisms stored in your device, always with your consent or according to other legal bases. Check our Cookie Policy for more information.
• The IP from which the connection is made, the type of device used and its characteristics, the version of the operating system, the type of browser, the language, the date, the country, the time of the request, the URL from which you proceed, the URL to which you are marching, the mobile network used, user ID, time of creation, time of last login, Firebase authentication ID if you login via SMS used, among others.
• Data from the use of the Service and possible bugs detected during its performance, including behavioral analytics events to map your journey on the app and track clicks or taps on buttons, as well as screens visited.
• In addition, Yperea uses Google Analytics, an analytical service provided by Google, LLC domiciled in the United States with headquarters at 1600 Amphitheater Parkway, Mountain View, California 94043. For the provision of these services, they use cookies that collect information, including the user's IP address, which will be transmitted, processed and stored by Google in the terms set on the website www.google.com. Including the possible transmission of such information to third parties for reasons of legal requirement or when said third parties process the information on behalf of Google. In any case, you can disable Google Analytics cookies from here.

2.2. The one you voluntarily provide

You can use the app anonymously.

In any case, if you decide to use the Service providing some data, this information will consist of:

• The one required to register as a user of the Service, consisting of your username and phone number. At that moment you must choose your password.

In relation to the password, as a user of the Service you will be responsible from its protection. In that sense, you will assume any damage and prejudice that could be derived from its improper use or from the transfer of it to third parties.

• The information, personal or not, that may contain the messages sent through the contact or opinion channels established through Yperea’s website or app, for example your name, email and message.
• Your contacts agenda, if you decide to share it with us to find out who is already using the Service.
• The one required by Yperea to acquire a product or subscription plan: product or service selection, name and surname, shipping address, email, zip code, province, country and payment option.
• Your email if you decide to sign up to our newsletter. If you register the email of a third party, you accept that you have that user's consent for it.
• Your photograph, name or nickname if you decide to update your profile.
• Location data such as the latitude and longitude to connect you to other users for a global meditation event. In any case, we cut off the coordinates after two decimals.
• Your app preferences, such as avatar color, if the audio is muted or not, the sound interval settings, the meditations created (for example, titles, descriptions or images), the groups created (for example, names, images or members), meditation reminders, the number of participants or unseen "invitations", among others.

2.3. The one provided by third parties

This information will consist of:

• The information provided by payment systems or credit card processors, such as the time of purchase or its amount.
• The information provided by CloudFront or Firebase in relation to behavioral analytics events or location data.

3. Rights and purposes

We inform you that the completion of the forms is voluntary. However, if you do not fill in the required fields (normally marked with an asterisk), the use of some functions of the Service will not be possible or will be limited.

The personal data provided by you is incorporated and will be processed in the Yperea’s Records of Processing Activities, in order to meet your requests, provide the requested service and keep you informed about issues related to the activity of the company and its services.

You can exercise at any time the rights of access, rectification, erasure, restriction of processing, opposition and portability of your personal data by email to: contact@yperea.com or the postal address: Polígono 9, parcela 292, Biniali, 07143 Sencelles, Balearic Islands, Spain.

In both cases you must identify yourself with your name and surname, as well as a copy of your national ID or national ID, if necessary.

In the event that you have granted consent for a specific purpose, you have the right to withdraw consent at any time, without affecting the legality of the treatment based on the consent prior to its withdrawal.

Also, if you think there is a problem with the way Yperea is handling your data, you can direct your claims to the data protection authority that corresponds, being the Spanish Agency for Data Protection indicated in the case of Spain.

4. Age

Regarding the use of the Service, you declare that you are of legal age and that you have the necessary legal capacity to be bound by this agreement, and use the Service in accordance with its terms and conditions, which you fully understand and recognize.

You declare that all the information you provide to access the Service, before and during its use, it is true, complete and accurate.

5. Use of the data

Yperea will use the data collected to:

• Manage, improve and update the Service (the lawful basis being our legitimate interest in maintaining the Service up to date and in good condition).
• Address the issues you raise (the lawful basis being our legitimate interest in meeting the requests and doubts of our users).
• Register in the Service (the lawful basis being your consent).
• Process the single and recurring payments you make, in case you purchase a product or subscription plan (the lawful basis being the contract).
• Delivering on the shipping address the products acquired on the online shop (the lawful basis being the contract).
• Provide the service that connects you globally with other members of the app through augmented reality (the lawful basis being you consent).
• Create, process, manage and update the accounts from the users (the lawful basis being the contract or consent, depending on the case).
• Send you by email our newsletter and promotional offers (the lawful basis being, depending on the case, your consent or our legitimate interest based on the previous contractual relationship, according to art. 21.2 LSSICE). You can unsubscribe from the received email or by contacting us at contact@yperea.com. However, you will not be able to unsubscribe from certain correspondence from us, such as the messages related to the security of your data or the terms and conditions of the Service.
• Maintain the security of the Service, investigate illegal activities, enforce our terms and conditions and assist the security forces of the state in the framework of its possible investigations (the lawful basis being our legitimate interest in guaranteeing and maintaining the security of the Service and its users).

Yperea does not use automated individual decisions.

Likewise, Yperea may use the information of the users in the form of aggregated and anonymous data to be shown to third parties. You may also share statistics and demographic information about users and their use of the Service with third parties. But none of this will allow those third parties to personally identify you.

5.1. In mails and contact forms

The website of the Service has an SSL encryption that allows users to securely send your personal data through standard types of contact forms.

The personal data collected will be subject to automated processing and incorporated into the corresponding files of the registry of treatment activity and of which Yperea is the owner.

In that sense:

• We will receive your IP, which will be used to verify the origin of the message in order to offer you adequate recommendations (for example, to present the information in the correct language) and to detect possible irregularities (for example, possible attempts to cyber attack the Service), as well as data related to your ISP.
• Likewise, you can provide us with your data through telephone, email and other means of communication indicated.

Regarding the means of payment used:

Our providers of payment methods to pay for the provision of our services or products are credit or debit cards, as well as bank transfers. At no time, Yperea or its staff will have access to the payment data (for example, the verification number) that the user as a customer will provide to those third parties.

On the other hand, certain services provided through the web or app (for example, the possibility of participating in a contest or draw of promotional code) may contain particular terms and conditions. It will be necessary to accept them before participating in these promotions.

5.2. In social networks

Yperea has profiles in some of the main social networks, being responsible for the processing in relation to the data published in them (for example, photos uploaded by Yperea in which people's faces appear).

The processing that Yperea will carry out with the data within each of the aforementioned networks will be, at most, the one that the social network allows to the corporate profiles.

Therefore, Yperea will be able to inform, when the law does not prohibit it, our followers by any means that the social network allows about their activities or offers, as well as providing a personalized customer service.

In no case will Yperea extract data from social networks, unless the user's consent is expressly obtained for it.

5.3. In raffles

When participating in promotional actions organized exclusively by Yperea, the data that you transfer will be treated only by us for the purpose indicated in the statement of the action and its corresponding legal conditions.

6. Preservation of the data

Here you can check for how long we keep the personal data collected by the Service:

• The disaggregated data will be kept without a period of deletion.
• The data of the users who acquire the Service will be conserved the minimum required, being able to stay up to:
  • 5 years, according to art. 1964 of the Civil Code (personal actions without special term).
  • 6 years, according to art. 30 of the Commercial Code (accounting books or invoice, for example).
• The data of users uploaded by Yperea to their social networks will be stored from the moment the user offers his consent, or the data has been uploaded according to the legitimate interest of Yperea, until he withdraws it.
• Subscriber data to our newsletter will be stored from the moment the user subscribes until they unsubscribe.

7. Data shared with third parties

There are third parties that manage part of the Service.

Yperea requires them to comply with this Privacy Policy in whatever is applicable to them, in addition to having their own. However, Yperea will not be responsible for compliance with this policy.

Under some circumstances, Yperea may share, use or preserve with third parties any of the personal information collected:

To provide the Service:

The service providers that provide functions on our behalf, such as payment services, web hosting, analytics commercial, customer service or web marketing. These service providers may collect and have access to the information they need to perform their functions, but they are not allowed to share or use the information for any other purpose.

To cooperate with the competent authorities:

If we believe it is reasonably necessary to satisfy any law, legal process or legitimate interest. In any case, we will only provide the strictly required information.

8. Security measures

Yperea adopts all the necessary technical and organizational measures to protect the security and integrity of the personal and non-personal information collected. Both against unauthorized access and accidental alteration, loss or destruction.

In any case, Yperea cannot guarantee the absolute security of the information collected, so you must collaborate and use common sense about shared information at all times.

You understand and acknowledge that, even after their removal, personal and non-personal information may remain visible in cache or if other users have copied or stored it.

9. Changes in the Privacy Policy

We may update this Privacy Policy in the future.

We will inform you about your changes by sending a notice to the email address provided and / or placing a notice in a prominent place on our website.

10. Contact

If you have questions about this Privacy Policy, contact us at:

E-mail
contact@yperea.com

Address
Post Office Box A.C. 17, Carrer Concepcion 5, 07350, Binissalem, Balearic Islands, Spain.