PRIVACY:
The General Data Protection Regulation (RGPD).
Since the 25th of May 2018, the General Data Protection Regulation (hereinafter RGPD) comes into force. The RGPD is the regulation on the protection of natural persons with regard to the processing of personal data and the free circulation of these data. It is a European level regulation, so any European company or company that does business in the European Union that handles personal information of any kind must abide by it. In Spain, the current RGPD will replace the Organic Law on the Protection of Personal Data (LOPD) approved by the General Courts on the 13th of December 1999.
The RGPD requires any company that handles personal information of its clients to communicate the nature of the data it processes, for what purposes it does so and what type of processing operations it carries out. When providing further information it must be communicated at the time of collecting personal data, as well as the ARCO rights that must be reported (i.e. access, rectification, deletion, limitation, portability and opposition). This new law also requires that the relationship between the responsible of the company and the information handler must be established. In addition, the RGPD indicates that the company is responsible for selecting and implementing the most appropriate security measures and organizational procedures in data processing to prevent cyber attacks.
HOW ARE WE GOING TO WORK WITH YOUR DATA?
Raices de la Tierra is the owner of the website www.raicesdelatierra.com.
Raices de la Tierra informs you that we respect current legislation regarding the protection of natural persons with regard to the processing of personal data and the free circulation of these data (RGPD). For this, we have adopted the necessary security measures and organizational procedures to avoid the loss, misuse, alteration, unauthorized access and theft of the personal data provided, having taken into account the technology, the nature of the data facilitated and the risks to which they are exposed.
HOW DO WE OBTAIN YOUR PERSONAL DATA AND WHAT INFORMATION CAN WE OBTAIN ABOUT YOU?
The customers of Raices de la Tierra provide us with the following information: name, surname, email, telephone, postal address and purchases. Interested parties only provide us with their email. This database is owned by Raices de la Tierra and is duly declared and registered in the General Registry of Data Protection.
DATA CONSENT FOR THE MANAGEMENT OF YOUR PURCHASE
The simple fact when sending your personal data to Raices de la Tierra will mean your consent for your incorporation into our Database and all related communication.
DATA CONSENT FOR THE MANAGEMENT OF THE NEWSLETTER TO WHICH YOU SUBSCRIBE
We will invite you to our newsletter through a tool that will ask for your consent.
WHAT ARE YOUR RIGHTS REGARDING THE DATA WE KEEP FOR SENDING THE NEWSLETTER?
In accordance with Art. 6, section 1, paragraph 1, letter a of the RGPD, if we have previously obtained your express consent to register for our newsletter, we will use the data necessary for this to send commercial communications in accordance with to said consent. Consent is given at the time of registration.
You can unsubscribe from the newsletter at any time, by clicking on the “unsubscribe” link in the e-mail with said communication, or by sending a message to our contact address.
As an interested party, you have the following rights, in accordance with the General Data Protection Regulation (RGPD):
.In accordance with art. 15 RGPD, the right to obtain information about the personal data that concerns you and that we process.
.In accordance with art. 16 RGPD, the right to obtain without undue delay the rectification or completion of the personal data that concerns you.
.In accordance with art. 17 RGPD, the right to obtain the deletion of personal data that concerns you, as long as the treatment is not necessary: – to exercise the right to freedom of expression and information; for the fulfillment of a legal obligation; for reasons of public interest, or for the formulation, exercise or defense of claims.
.In accordance with art. 18 RGPD, the right to obtain the limitation of the processing of your data when: – you contest the accuracy of the data; the treatment is illegal and you oppose the deletion of the data; we no longer need the data but you need it for the formulation, exercise or defense of claims, or you have opposed the treatment under article 21 RGPD.
.In accordance with art. 20 RGPD, the right to receive the personal data that concern you and that you have provided us, in a structured format, of common use and mechanical reading, or to request that they be transmitted to another person in charge.
.In accordance with art. 77 RGPD, the right to claim.
.Veracity of the data.
The user guarantees that the personal data provided to Raices de la Tierra is accurate and is responsible for communicating any changes.
WHAT KIND OF DATA PROCESSING OPERATIONS DO WE CARRY OUT?
To process your data, Raices de la Tierra uses the famous cookies, as well as Google Analytics services. We analyze your data in order to improve the service (i.e. facilitate navigation, improve the shopping experience, design products and / or services more adapted to consumer needs, etc.).
Maximum time that the data will be kept.
Your data will be saved for 5 years, taking as the starting date the day of your last purchase (in case you are a customer) or the last day you have opened an email from us (in case you are only a subscriber to our newsletter).
What rights do you have when providing your data and how can you exercise them?
In addition to the right to be informed of the way in which we are doing it in this clause, you have the rights that are listed below:
Right of access to your data:
To know what data is being processed, for what purposes, the origin of the same and if we have communicated it to third parties.
Right to rectify your data:
In case we have incomplete or incorrect information about you.
Right to delete your data:
If the purpose for which you provided the data has disappeared, the treatment is not lawful, or you revoke your consent, as well as other assumptions provided by law.
Right of limitation:
If you want to put limits on the processing of your data.
Right to portability:
To receive your data in an electronic format and to be able to transmit them to another person in charge.
Right of objection:
In order to prevent us from treating your data for certain purposes, although this is only possible in the cases established by law.
Right to withdraw consent:
You can revoke the consent given at any time, without retroactive effect. We will send you a confirmation once we have removed your data from our database.
Handing over information to third parties:
Raices de la Tierra subcontracts the courier services to a third party, who will have access to the buyer’s data. This access will not be considered in any case as a communication of the data by Raices de la Tierra to the aforementioned third parties, but must be understood as a mere provision of the service. In all these cases, Raices de la Tierra has signed legally enforceable data processing contracts with said third parties, where, among other terms, the purpose of access to the data and the security conditions are detailed. In addition, they will not be able to transmit this data to third parties, they can only use them to process the order.