1. DATA CONTROLLER DETAILS
Company name: Roots and Leaves SL (hereinafter, the “Company” or the “Controller”).
Tax ID (CIF): B04921201
Registered address: 04711 El Ejido, Almería, Spain
Email for data protection communications: info@rootsandleaves.es
Applicable regulations
Our Privacy Policy has been designed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and, insofar as it does not conflict with that Regulation, with the Spanish legislative framework on the protection of personal data.
By providing us with your data, you declare that you have read and understood this Privacy Policy, and you give your unequivocal and express consent to the processing of your personal data in accordance with the purposes and terms set out herein.
The Company may modify this Privacy Policy to adapt it to legislative developments, case law or interpretations by the Spanish Data Protection Agency. These privacy conditions may be supplemented by the Legal Notice, Cookies Policy and the General Terms that may apply to certain products or services, where such access involves any specific provisions regarding the protection of personal data.
2. PURPOSE OF PERSONAL DATA PROCESSING
We process your personal data for the following purposes:
- To provide you with information about the products and services offered by our company, as detailed on this website.
- To arrange the contracting of our services through the acceptance of the relevant quote/order and/or the signing of a commercial contract.
- To send you news and updates about our company by email and/or post, including updates to our product and service catalog.
Data retention period
We will retain your personal data from the moment you give us your consent until you withdraw it or request restriction of processing. In such cases, we will keep your data blocked for the periods required by law.
3. LEGAL BASIS AND DATA COLLECTED
The legal basis for processing your data is the express consent given through a clear affirmative act (completing the relevant form and ticking the box to accept this policy) at the time you provide your personal data.
Consent to process your data
By completing the forms, ticking the box “I accept the Privacy Policy” and clicking to submit your data, or by sending emails to the Company through the accounts enabled for this purpose, the User declares that they have read and expressly accepted this privacy policy, and gives their unequivocal and express consent to the processing of their personal data for the purposes indicated.
The User certifies that they are over 14 years of age and therefore have the legal capacity required to give consent to the processing of their personal data, in accordance with this Privacy Policy.
Categories of data
The data collected belongs to the category of identification data, such as: first and last name, telephone number, postal address, company, email address, as well as the IP address from which the data collection form is accessed.
4. SECURITY MEASURES
As part of our commitment to ensuring the security and confidentiality of your personal data, we inform you that we have adopted the technical and organizational measures necessary to guarantee the security of personal data and to prevent its alteration, loss, processing or unauthorized access, taking into account the state of technology, the nature of the stored data and the risks to which it is exposed, in accordance with Article 32 of the GDPR (EU) 2016/679.
5. DATA TRANSFERS
No transfers of your data or international data transfers are foreseen, except those authorized by tax, commercial and telecommunications legislation, and in cases where a judicial authority requires us to do so.
6. USER RIGHTS
Any data subject has the right to obtain confirmation as to whether or not we are processing personal data concerning them. Data subjects have the right to access their personal data, and to request the rectification of inaccurate data or, where appropriate, request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, data subjects may request the restriction of processing of their data, in which case we will only retain it for the exercise or defense of claims. For reasons related to their particular situation, data subjects may object to the processing of their data. The Controller will cease processing the data, except for compelling legitimate grounds or for the exercise or defense of possible claims.
7. HOW DO I EXERCISE MY RIGHTS?
To exercise your rights, you may send an email to the Controller, or where applicable, to the Data Protection Officer at info@rootsandleaves.es requesting the corresponding form for the right you wish to exercise. You may also contact the competent Supervisory Authority for additional information about your rights. Please remember to attach a copy of a document that allows us to identify you.