Skip to main content

Cookie Policy

 

1. What are cookies?
Cookies are small text files stored on your device (computer, tablet, smartphone, etc.) when you visit a website. These files store information about your browsing activity and preferences, enabling the website to function in an optimised and personalised way. On the Bio Bairro Marketplace, cookies help us to improve your experience by recognising your preferences on future visits and tailoring our services to your needs. Although cookies do not directly identify you, they can make your browsing experience smoother and more personalised, improving the website’s functionality.

2. How do we use cookies on the Bio Bairro Marketplace?
By accessing the Bio Bairro Marketplace, you are consenting to the use of cookies on your device, in accordance with this policy. If you choose to disable or block cookies in your browser, some features of the website may be affected, compromising your user experience. We use cookies for various purposes, including:

• Ensuring the website functions properly;
• Personalising content and adverts according to your preferences;
• Improving the platform’s performance and usability;
• Ensuring the security of online transactions.

3. Types of Cookies We Use
• Strictly Necessary Cookies: Essential for the website to function, enabling basic features such as logging in to secure areas or filling in forms. Without these cookies, parts of the website may not work properly.
• Performance Cookies: These collect anonymous and aggregated data to measure traffic and understand how users interact with the website, helping to improve its efficiency.
• Functionality Cookies: These allow the website to remember your choices (such as language or region) and provide more personalised features.
• Advertising and Social Media Cookies: Used to display relevant advertising and enable content sharing on social media. They are also used to track your browsing across various platforms, offering personalised adverts.

4. Managing Cookies
During the checkout process at Bio Bairro, we use cookies to ensure your transactions are secure. These cookies collect technical information about the device you are using to identify suspicious behaviour and prevent fraud. You can configure your browser to block or delete cookies. However, disabling essential cookies may impair your browsing experience. Please refer to the specific instructions for managing cookies in the most common browsers:

• Google Chrome
• Mozilla Firefox
• Microsoft Edge
• Safari

For more information about cookies and how to manage them, visit All About Cookies. If you do not want your visits to our website to be recorded by Google Analytics, you can choose to opt out of this tracking via Google Analytics Opt-out.

5. Changes to the Cookie Policy
The Marketplace Bio Bairro cookie policy may be updated from time to time to ensure compliance with current legal requirements or to reflect improvements to our services. We recommend that you check the policy regularly to keep up to date with any changes.

6. Data collection and processing
This section describes the personal data processed by Marketplace Bio Bairro. All data processed is documented in technical terms, including its purpose, storage and the processing carried out.

6.1. Cross-sectional data
The following data is processed for all users (both authenticated and unauthenticated).

a. Age
To comply with legal restrictions on the sale of products to minors, a (functional) cookie is stored containing the following information provided by the user.
Question: Are you aged 18 or over?
Data stored: Yes/No
Validity: 7 days
Storage: Data is stored solely in the user’s browser’s functional cookies.
Processing: The data is used solely to determine whether or not to hide products subject to age restrictions.
Deletion: The data is deleted once the cookie’s Time to Live (TTL) has expired, or upon manual deletion of the browser’s cookies.

b. Bot verification
A bot verification service is used to add a layer of security without hindering user interaction. The cookie described below is used.

• Cookie name: cf_clearance
Data stored: Verification token for automated users.
Validity: 30 seconds

c. Google Analytics
We use the Google Analytics service, which utilises cookies and other technologies to collect information about interactions on the Marketplace.

d.The Google Analytics cookie policy is available here.
• Data relating to traffic sources
Metadata relating to traffic sources is collected. If the user grants permission in the dialogue box requesting such permission, the following data is stored in session cookies.

• Cookie name: sbjs_current
Data stored: Stores information about the source of traffic for the current session: how the visitor arrived at the website during this specific visit (for example, via a search engine, direct link or marketing campaign).
Expiry: 30 minutes

• Cookie name: sbjs_current_add.
Data stored: Stores additional metadata about the origin of the current session, such as the campaign name, keyword or content used in the URL parameters (e.g. UTM tags).
Expiry: 30 minutes.

• Cookie name: sbjs_first
Data stored: Records the original source that brought the visitor to the website for the first time. This helps to identify the initial point of contact, even if the user returns later via other means.
Validity: 6 months

• Cookie name: sbjs_first_add
Data stored: Similar to sbjs_first, but contains additional details about the source of the first visit, such as campaign or keyword information.
Validity: 6 months

• Cookie name: sbjs_migrations
Data stored: Used internally by Sourcebuster to track version changes or updates to its cookie structure. Ensures backward compatibility and a smooth transition of tracking data.
Validity: 6 months.

• Cookie name: sbjs_session
Data stored: Stores session-level data, such as timestamps and session duration, to help distinguish between multiple visits. Expires at the end of the browser session.
Validity: Session (expires when the browser is closed)

• Cookie name: sbjs_udata
Data stored: Contains anonymous technical details about the user’s browser, device and, potentially, geolocation (based on IP address). This data enables accurate source tracking, but does not contain any personally identifiable information.
Validity: 6 months
Storage: The data is stored in the user’s browser cookies (non-functional). When placing an order, the data is used to add metadata to the order.
Processing: The data is used for statistical analysis.
Right to be forgotten: The data subject may request the deletion of their data. As the metadata listed above is not necessary for compliance with any legal obligation, it will be deleted.

6.2. Orders
The Marketplace allows both authenticated and unauthenticated users to place orders. For authenticated users, the data already present in the user’s profile is used to pre-fill the corresponding fields in the order.

The details associated with the order, listed below, are required to complete the purchase and arrange delivery.
• First name and surname
• Tax Identification Number (optional)
• Address: Includes first name, surname, company name (optional), country, street address, postcode, town/city, district, telephone number, Tax Identification Number (optional)
• Email address: Required for transactional communications relating to the order. The address is verified during the order completion process to ensure the communication channel is valid.
• Telephone number: Required to arrange the delivery of orders.
• Payment details: For the payment methods “Direct Transfer to the Seller(s)” and “In-store payment”, no payment details are stored; payment verification is carried out manually by the sellers. For payments made via the payment gateway (SIBS Gateway), only SIBS transaction identifiers are stored; no personal or payment details of the customer are stored.
Storage: The data is stored in a high-availability cloud database based in the European Union (the AWS RDS service hosted in the Frankfurt data centre is used). Personal data that allows a person to be identified will be encrypted.

Processing: The data collected is used to complete the purchase and arrange delivery, and to fulfil other associated legal obligations.
Retention: Data collected from unregistered users is retained only for the period necessary to fulfil the purposes for which it was collected, namely the processing of the order, delivery of the product(s), and compliance with legal obligations, such as tax or accounting requirements.

6.3. Authenticated users
The data listed below is collected at the time of user registration.
• Email address
• Password: A hash is created from the value, which cannot be reversed.
Users may add the following details when managing their account.
• First name and surname
• Billing address: Includes first name, surname, company name (optional), country, address, postcode, town/city, district, telephone number, tax identification number (optional)
• Delivery address: Includes first name, surname, company name (optional), country, address, postcode, town/city, district, telephone number, tax identification number (optional)

The user profile also includes the following data.
• List of shops followed.
• Comments posted on shops listed on the Marketplace.
Processing: The data is used to carry out the necessary functions (e.g. dispatch of orders, customer notifications).
Deletion: The data collected will be deleted at the account holder’s request. If the user deletes their account, this will trigger the automatic deletion of the account holder’s profile data.
Portability: The data subject may request the portability of their data. An email containing all data recorded on the Marketplace platform relating to the data subject will be sent.

6.4. Shops and Sellers
a. Sellers
The personal data associated with a seller is the same as that associated with a registered user. Please refer to the ‘Authenticated users’ section.
In addition to the standard data, a seller is associated with Shops managed by them, the details of which are described below.

b. Shops
The details associated with a Shop on the Marketplace are listed below.
• Identification: Name; GPS coordinates
• Address: Street address; Postcode; Country; Region
• Contact details: Email; Telephone number
• Direct payments: IBAN; MBWay number; SPIN number
• Transactional communications: Number for SMS communications
Storage: The data is stored in a high-availability cloud database based in the European Union (the AWS RDS service hosted in the Frankfurt data centre is used).
Processing: The data collected is used to complete the purchase and its delivery, and to fulfil other associated legal obligations.
Retention: The data collected is retained only for the period necessary to fulfil the purposes for which it was collected, namely the fulfilment of the order, delivery of the product(s), and compliance with legal obligations, such as tax or accounting obligations. The seller may request the removal of data from the Marketplace administrator, who will delete all data not required to fulfil legal obligations.
Portability: The data subject may request the portability of their data. An email containing all data recorded on the Marketplace platform relating to the data subject will be sent.