The terms set out below and especially the duty of confidentiality will be mandatory for all internal or external personnel who work or could work with us and who have access to the data you provide us, either while browsing our website, by the use of our forms or during the contracting or provision of services.
We advise Users that each time they access our website, they review this text to make sure of the purposes and uses that we can make of their data.
1. RESPONSIBLE FOR THE TREATMENT
The person responsible for the treatment of the data that is collected, processed and stored through this website and on the occasion of the services provided and contracted through it, is PLANETA HUERTO, with NIF B67341479, residing in Ronda Indústria 6, 08210, Barberà del Vallès (BARCELONA). Email: firstname.lastname@example.org and telephone 606902187. GROOTS HYDROPONICS SL is registered in the Mercantile Registry of Barcelona, in Volume 46690, Book 0, Folio 8, General Section, Sheet 528078, with Registration or entry 1 of Date of 14 / 01/2019.
2. DATA PROCESSING
The personal data that is requested in your case will consist of those that are essential to identify and attend to the request of the owner of the data, resolve questions raised and provide the contracted services, said data being collected for specific and explicit and legitimate purposes and not said data being processed in a manner incompatible with the stated purposes.
The user agrees that all their personal data is fully transferred to GROOTS from the moment the user has started contracting the deferred payment service offered by the latter at the time of choosing the payment method.
This acceptance extends to third parties that have to access the files for the good end of the contract.
3. DATA SOURCE
First of all, it is important that Users keep in mind that, when personal information is provided online (for example, via email or via the Internet), it can be collected and used by others. For this reason, GROOTS is not responsible for the fact that said information may be collected, stored and / or processed by an unauthorized third party, since it has adopted the security measures within its reach so that this does not happen.
The origin of the data that we process and store in GROOTS can come from different places:
Through our website we collect personal data from those Users who voluntarily decide to fill in the mandatory fields that we have included in each of the forms on our website.
With these forms, Users can register on our website, make a query or provide us with a suggestion, request a quote for a specific product offered on our website / request a product offered on our website or receive, if so It is expressly authorized by GROOTS advertising and newsletters. Through these forms, Users provide us with their data and consent to their treatment in accordance with the purposes indicated at the time of completing the form.
Users will be responsible for the veracity and authenticity of the data that they provide us through our forms, being their obligation to keep them updated at all times to avoid mistakes on our part. Any false or inaccurate statement that occurs as a result of the information and data provided through these forms will be the responsibility of the User.
Information may also come through the emails we receive at www.groots.eco . Since we make the web available to our users through the domain www.groots.eco We inform that it is hosted on the PhoenixNAP Datacenter servers hosted in the USA. who establish the corresponding security measures and guarantee compliance with the RGPD.
Users should be informed that, in case the user or potential client wishes, a meeting may be established that will take place via telephone. The User must provide their name and phone number.
Finally, we also give Users the possibility of making inquiries and comments on topics and products that GROOTS will publish, where appropriate (they can moderate them based on legal and moral compliance criteria, as well as good use and ethical practices. ). Participation will be made through the participation form via comment available once the user has registered on the website itself. It is essential to read the web policies on this page before proceeding to comment.
Since we make the web available to our users through the domain www.groots.eco, we inform that it uses the services detailed. These providers establish the corresponding security measures and guarantee compliance with the RGPD.
4. LEGITIMATION FOR DATA PROCESSING
The legal basis for the treatment of User data will depend on the moment in which the personal data of the User, Potential Client or Client is collected or processed:
The legal basis for the treatment of the data collected through the consultation and information form as well as, the CHAT service will be to respond to queries or requests. These requests do not imply any contractual relationship.
5. PURPOSES OF DATA PROCESSING AND DEADLINES FOR DATA
The purposes for which each of the treatments will be carried out by GROOTS, are established in the different informative clauses incorporated in each of the data collection channels -web forms, etc.-.
Notwithstanding the foregoing, we detail them in full below, together with the data retention period, carried out by GROOTS:
Contact form / form for publication of queries and / or comments and Chat service: To be able to contact the User to resolve the query, doubt or suggestion, as well as to send, if requested, a username and password to access to your private area.
These data will be kept on the server of the email provider without deletion period and as long as the affected party does not express their opposition. Now, if the emails kept have to do with the provision of services, they will be kept for as long as the obligations of the contractual relationship may arise. (5 years - article 1964 of the Civil Code).
Information request form: These data will be used by GROOTS, to provide you with information and to contact you in relation to the interest expressed regarding our organization or our products / services.
Registration Form: These data will be used by GROOTS for the purpose of providing the contracted service / contractual purpose of selling the products purchased by you and to carry out internal organization, accounting, tax and administrative management. These data will be kept by GROOTS during the time that any type of liability derived from the application of the pre-contractual / contractual measures requested by the interested party (5 years - article 1964 of the Civil Code) may be demanded or will be kept for a period of 6 years (art. 30 Commercial Code).
Form for sending newsletters and advertising: These data will be used by GROOTS, to provide you with information and to contact you in relation to the expressed interest in receiving newsletters and advertising.
Data collected through Cookies: Through the Cookies that we inform you about in our Cookies Policy, which we recommend you read, we collect data to personalize your experience and better serve your individual needs, improve our website, allow share comments on social networks, etc. These data will be kept in accordance with the provisions of our Cookies Policy to which we refer.
Private area: The User will be able to access their private area with username and password and will be able to modify or rectify their data whenever they wish, being able to exercise their opposition to the treatment in their case or deletion, in our system by contacting us hello @ groots.eco These data will be kept by GROOTS during the time in which some type of responsibility derived from the fulfillment of the contract and the provision of the services may be demanded (5 years - article 1964 of the Civil Code).
6. OBLIGATION TO REQUEST THE DATA PROVIDED
In order to optimally execute the services, Users must provide us with the information and personal data requested on our forms. In case of not providing all the information requested and marked as mandatory, GROOTS will not be able to offer its services / products or send, where appropriate, the requested information and therefore the services / products that the User is interested in will not be able to be provided. .
At GROOTS, we scrupulously comply with the requirements stipulated in the RGPD regarding the protection of data of minors, so we do not knowingly collect any information from children under 14 years of age. In addition, we inform Users that this website is intended only for people over 18 years of age.
8. HOW WE PROTECT THE INFORMATION OF USERS, POTENTIAL CUSTOMERS OR CUSTOMERS.
GROOTS implements physical, technical and organizational measures to maintain the security of personal data and try to minimize the possibility of accidental or illegal destruction, accidental loss, unauthorized use, alteration, unauthorized modification, disclosure and / or access, as well as any other illegal form of processing of your data, in accordance with the provisions of article 32 of the RGPD.
In this sense, and taking into account the state of the art, the application costs and the nature, scope, context and purposes of the treatment, as well as the probability and seriousness risks that may affect the rights and freedoms of natural persons, appropriate measures have been established to guarantee the appropriate level of security for the existing risk.
In any case, GROOTS has implemented sufficient mechanisms to:
Guarantee the permanent confidentiality, integrity, availability and resilience of the treatment systems and services. Restore the availability and access to personal data quickly, in the event of a physical or technical incident.
Verify, evaluate and assess, on a regular basis, the effectiveness of the technical and organizational measures implemented to guarantee the safety of the treatment.
Pseudonymize and encrypt personal data, if applicable.
Notwithstanding the foregoing, as a User you acknowledge and accept that Internet security measures are not impregnable and that the networks used on the Internet are not 100% secure, so any communication sent by this means can be intercepted and / or modified by unauthorized people, so as a User you must also exercise extreme caution.
9. NOTICE OF VIOLATION OF PERSONAL DATA OR SECURITY GAPS.
The violation of personal data supposes a breach of the security of the information systems of GROOTS that causes or can cause the destruction, alteration, loss, unauthorized disclosure or access, accidental or not, to the personal data transmitted, stored or processed related with the provision of our services.In the event that the personal data that we store and / or process in GROOTS is compromised in any way, we will promptly notify those affected, and in accordance with the provisions of article 33 of the RGPD.
10. COMMUNICATION OF DATA TO THIRD PARTIES.
The personal data that users or potential customers have been able to provide us through our website, or during the provision of services, will not be sold, transferred and / or exchanged with unauthorized third parties, except by legal obligation, or in the cases established below in relation to international data transfers that we carry out from GROOTS.
On the other hand, the data of the Clients may be transferred to the Tax Administration and other Bodies of the Public Administration, if required.
11. INTERNATIONAL TRANSFERS OF DATA.
At GROOTS, we use Twitter. This social network is located in the United States. For this reason, any information that we upload to said social network means that we carry out an international transfer of data to the US since the data uploaded to our profiles is stored on the servers of said company, also located in the USA. However, GROOTS does not upload or process personal data of users through said platform, being these those who voluntarily decide to follow our page.
Twitter, Inc. 1355 Market Street # 900 San Francisco, California 94103 Phone: (415) 222-9670
At GROOTS, we use Facebook. This social network is located in the United States. For this reason, any information that we upload to said social network means that we carry out an international transfer of data to the US since the data uploaded to our profiles is stored on the servers of said company, also located in the USA. Facebook, Inc. has obtained certification of the EU-EE Privacy Shield Frameworks. USA and from Switzerland-EE. USA GROOTS also installs Facebook pixels on its website in order to interrelate it with user profiles, as well as find out the conversions produced with it.
Facebook, Inc. 1 Hacker Way 94025 Menlo Park California 94025, USA Phone: (1) - (650) -543-4800
At GROOTS, we use Google Inc .. This social network is located in the United States. For this reason, any information that we upload to said social network means that we carry out an international transfer of data to the United States since the data uploaded to our profiles is stored on the servers of said company, also located in the United States. Google Inc. and its subsidiaries in the US USA comply with the EU-EE Privacy Shields. USA and Switzerland-EE. USA GROOTS also uses the Google Analytics and Google Adwords service on its website in order to know the traceability of visits by users to its website in the first case, and to produce ads and improve sales through ads in the second case. .
Google Headquarters 1600 Amphitheater Parkway Mountain View, CA 94043 United States
At GROOTS, we use YouTube . This social network is located in the United States. For this reason, any information that we upload to said social network means that we carry out an international transfer of data to the United States since the data uploaded to our profiles is stored on the servers of said company, also located in the United States. YouTube LLC. and its subsidiaries in the USA. USA comply with the EU-EE Privacy Shields. USA and Switzerland-EE. USA However, GROOTS does not upload or process personal data of users through said platform, being these those who voluntarily decide to follow our page.
San Bruno 901 Cherry Avenue San Bruno, CA 94066 United States
At GROOTS, we use Instagram. This social network is located in the United States. For this reason, any information that we upload to said social network means that we carry out an international transfer of data to the United States since the data uploaded to our profiles is stored on the servers of said company, also located in the United States. Instagram complies with the EU-US and Switzerland-US privacy shields. However, GROOTS does not upload or process personal data of users through said platform, being these those who voluntarily decide to follow our page.
Attn: Law Enforcement Response Team 1601 Willow Road Menlo Park, CA 94025 United States
12. RIGHTS OF DATA PROTECTION.
Any person may exercise the rights of access, rectification, deletion, limitation of treatment, the right to portability, not to be subject to automated treatment, including the preparation of profiles and the right to oppose personal data that work in any of the files for which GROOTS is Responsible, requesting it by any means that records its sending and receiving, clearly expressing its desire and accompanying a photocopy of your ID and any documents necessary to prove your identity. Do not forget to indicate the reasons that justify The exercise of the right.To do this, you can send a letter, either to the email address email@example.com, or to the address Ronda Industria 6, 08210 Barberà del Vallès, (BARCELONA). We have forms available to users to exercise these rights, they can request them in our contact form. What exactly can you request?
Right of access: You can request information about whether GROOTS is treating your personal data.
Right of rectification: You can request the rectification of the data, in case these are incorrect, as well as the suppression of the same.
Right of cancellation: You can request the cancellation of the data; and in the event that there is any limitation, GROOTS will keep the data duly blocked, only for the exercise or defense of claims.
Right of opposition: You can request that we stop processing the data in the manner stated, unless for legitimate reasons we must continue to process it, a circumstance that we will expressly state.
Right to request the limitation of your treatment: You can request at any time that we limit the processing of data when any of the following cases occurs:
When you challenge the accuracy of the data processed and for a period that allows GROOTS to check the accuracy of the data.
When the data processing is illegal under current legislation and the affected party chooses to restrict its use instead of deletion.
When the affected party requires their data for the establishment, exercise or defense of legal claims.
Right to data portability: So that, in the event that the data is processed in an automated way, it is returned or transferred to another company indicated by the User in a structured, automated and commonly used format.
Right of deletion: You can request the deletion of your personal data and GROOTS must delete them without undue delay when:
The data is no longer necessary in relation to the purposes for which it was collected or processed.
The affected party withdraws the consent on which the data processing is based, and there is no other legal basis for it.
The affected party opposes the treatment because this is for the direct marketing of products.
The data has been illegally processed.
The data must be erased to comply with a legal obligation at the community and / or national level.
In addition, Users have other rights, namely:
Right to withdraw the consent given: The User can withdraw the consent given for the processing of personal data for any specific purpose, when they so wish, they should only contact us exercising this right.
Right to claim before the Control Authority: Any User may contact the Control Authority, in case they consider that GROOTS is treating their data in an erroneous way. In the case of Spain, the supervisory authority is the Spanish Data Protection Agency , domiciled at C / Jorge Juan, 6, 28001-Madrid and contact telephone numbers: 901 100 099/91 266 35 17.
Our website has a Blog section where Users are allowed to post comments. Users can also share our articles through the social networks where we are present, so Users must be cautious and previously read the Conditions and Privacy Policies of the aforementioned social network.
14. SOCIAL NETWORKS
Anyone who does not want to be a "follower" of GROOTS in the social networks in which it is present, simply stop following said profile following the provisions of the Privacy Policies and Terms and Conditions of the social network in question. The data of the Users uploaded to our profiles will remain in these from the moment the User gives his consent until he withdraws it, requesting it from the platform. The treatment that GROOTS carries out within social networks will be, at most, the one that the social network allows to corporate profiles. So GROOTS may inform, when the law does not prohibit it, its followers, and, by any means that the social network allows, about its activities, contests, competitions, services, etc. as well as providing personalized customer service through the social network.
Any User may exercise their data protection rights, by contacting GROOTS at the address and email indicated in the corresponding section. In no case will GROOTS extract data from social networks if you do not have the express consent of the user for it. We strongly recommend Users to read the Privacy Policies and Terms and Conditions of the social networks where we are present.
15. RECEPTION OF CURRICULUM VITAE.
GROOTS does not support the receipt of Curriculum Vitae through the email provided on this website.
GROOTS, will manage the reception of Curriculum Vitae of candidates through the forms available in the section work with us on our website, when we have an open selection process.
In these cases, the data generated as a consequence of the participation of a selection process will be processed in order to analyze the professional profile of the candidate and to give him the possibility of participating in the personnel selection processes organized by GROOTS, in function of vacant or newly created positions. Likewise, and in the event that the candidate's profile is selected, their data may be used to process their incorporation into the GROOTS template.
In the same way, at GROOTS we treat the information that you provide us with the purpose of having a database of future candidates to fill possible vacancies in jobs in our company, adjusted to your professional profile. We inform you that no automated decisions will be made, including profiling. GROOTS will request your free, informed, specific and unequivocal consent in accordance with article 6.1.a) RGPD, to have a database of future candidates to fill possible job vacancies in our company, adjusted to your professional profile. These data will not be disclosed to third parties.
The personal data provided will be kept as long as its deletion is not requested by the interested party. In any case, we inform you that 12 months after the receipt of your CV without any job offer being presented, it will be automatically canceled from our database.
16. CONDITIONS .
We strongly recommend that Users also visit the Legal Conditions, Legal Notice and Cookies Policy sections that regulate, among many other aspects, the use, disclaimers and limitations of liability that govern this website.
Last modified May 14, 2020