Dirección y contacto:
Groots Hydroponics S.L. (B67341479)
Gran Via Seat S/N, Nave G
08760 – Barcelona (España)
The terms set out below and especially the duty of confidentiality shall be binding on all internal or external personnel who work or may work with us and who have access to the data you provide, either while browsing our website, by using our forms or during the recruitment or provision of services.
We advise Users to review the present text each time they access our website to make sure of the purposes and uses we can make of their data.
La presente Política de Privacidad, formará parte y estará unida de forma permanente a lo dispuesto en nuestro Aviso Legal, en las Condiciones Legales del servicio contratado y en nuestra Política de Cookies, estos textos están a disposición de los usuarios en nuestra página Web y de los que aconsejamos su lectura.
1. PERSON IN CHARGE OF THE TREATMENT
El responsable del tratamiento de los datos que se recopilan, tratan y almacenan a través de esta página web y con ocasión de los servicios prestados y contratados a través de la misma, es GROOTS HYDROPONICS S.L, con NIF B67341479, con domicilio en Gran Via Seat S/N, Nave G, Martorell 08760 (BARCELONA). E-mail: firstname.lastname@example.org y teléfono 690 36 22 50. GROOTS HYDROPONICS S.L. is registered in the Mercantile Registry of Barcelona, in Volume 46690, Book 0, Folio 8, General Section, Page 528078, with Inscription or annotation 1 dated 14/01/2019.
2. DATA PROCESSING
The personal data requested in your case will consist of those that are essential to identify and meet the request of the owner of the data, resolve issues raised and provide the contracted services, such data being collected for specific purposes explicit and legitimate and not being treated such data in a manner incompatible with the purposes stated.
The user agrees that all personal data will be fully disclosed to GROOTS from the moment the user has initiated the hiring of the deferred payment service offered by the latter at the time of choosing the method of payment.
This acceptance extends to third parties who may need to access the files for the proper performance of the contract.
3. SOURCE OF DATA
First, it is important for Users to be aware that when personal information is provided online (e.g., through e-mail or over the Internet), it can be collected and used by others. That is why GROOTS is not responsible that such information may be collected, stored and / or processed by an unauthorized third party, as it has taken security measures that are within its power to prevent this from happening.
The origin of the data we process and store in GROOTS can come from different places:
Through our website we collect personal data of those users who voluntarily decide to fill in the mandatory fields that we have incorporated in each of the forms on our website.
With these forms, Users may register on our website, make a query or provide a suggestion, request a quote for a particular product offered on our website / request a product offered on our website or receive, if expressly authorized by GROOTS advertising and newsletters. Through these forms, Users provide us with their data and consent to the processing of the same in accordance with the purposes indicated at the time of completing the form.
Users will be responsible for the veracity and authenticity of the data they provide through our forms, being their obligation to keep them updated at all times to avoid errors on our part. Any false or inaccurate statement that occurs as a result of the information and data provided through these forms will be the responsibility of the User.
Information can also come through the e-mails we receive at www.grootsfarming.com. Since we make the web available to our users through the domain www.grootsfarming.com we inform that the same is hosted in the PhoenixNAP Datacenter servers hosted in the USA. who establish the corresponding security measures and ensure compliance with the RGPD.
Users should be informed that, if the user or potential customer so desires, a meeting can be arranged by telephone. The User must provide his/her name and telephone number.
Finally, we also give Users the possibility to make queries and comments on topics and products that GROOTS will publish where appropriate (may moderate them based on criteria of legal and moral compliance, as well as practices of good use and ethics). Participation will be made through the participation form via comments available once the user has registered on the website. It is essential to read the web policies of this page before proceeding to comment.
Since we make the web available to our users through the domain www.grootsfarming.com informamos que la misma usa los servicios que se detallan. These providers establish the corresponding security measures and ensure compliance with the GDPR.
4. LEGITIMACY FOR DATA PROCESSING
The legal basis for the processing of Users’ data will depend on the time at which the personal data of the User, Potential Customer or Client is collected or processed:
The legal basis for the processing of data collected through the consultation and information form as well as the CHAT service will be to respond to queries or requests. These requests do not imply any contractual relationship.
5. PURPOSES OF DATA PROCESSING AND DATA RETENTION PERIODS
The purposes for which each of the treatments will be carried out by GROOTS, are set out in the various informative clauses incorporated in each of the ways of data collection – web forms, etc. -.
Notwithstanding the foregoing, we detail them in full below, along with the period of data retention, carried out by GROOTS:
Contact form / form for posting queries and / or comments and Chat service: To contact the User to resolve the query, doubt or suggestion, as well as send, if requested, username and password to access your private area.
These data will be kept on the e-mail provider’s server without any deletion period and as long as the data subject does not express his opposition. However, if the e-mails retained relate to the provision of services, they will be retained for as long as obligations may arise from the contractual relationship. (5 years – article 1964 of the Civil Code).
Information request form: This data will be used by GROOTS, to provide you with information and contact you regarding the interest expressed with respect to our organization or our products/services.
Registration Form: These data will be used by GROOTS for the purpose of providing the contracted service / contractual purpose of sale of products purchased by you and for internal management of the organization, accounting, tax and administrative. This data will be retained by GROOTS for as long as any liability may arise from the application of pre-contractual/contractual measures requested by the data subject (5 years – article 1964 of the Civil Code) or for a period of 6 years (art. 30 Commercial Code).
Newsletter and advertising form: This data will be used by GROOTS to provide you with information and contact you in relation to your interest in receiving newsletters and advertising.
Private area: The User will be able to access his private area with user name and password and will be able to modify or rectify his data whenever he wants, being able to exercise his opposition to the treatment in his case or suppression, in our system by contacting us at email@example.com Estos datos se conservarán por GROOTS durante el tiempo en que pueda exigirse algún tipo de responsabilidad derivada de del cumplimiento del contrato y la prestación de los servicios (5 años – artículo 1964 del Código Civil).
6. OBLIGATION TO REQUEST THE DATA PROVIDED
In order to optimally execute the services, Users must provide us with the information and personal data requested in our forms. In case of not providing all the information requested and marked as mandatory, GROOTS will not be able to offer its services / products or send, where appropriate, the requested information and therefore can not provide the services / products on which the User is interested.
At GROOTS, we scrupulously comply with the requirements stipulated in the GDPR regarding data protection of minors, so we do not intentionally collect any information from children under 14 years of age. In addition, we inform Users that this Web site is intended only for persons over 18 years of age.
8. HOW WE PROTECT THE INFORMATION OF USERS, POTENTIAL CUSTOMERS OR CLIENTS.
GROOTS implements physical, technical and organizational measures to maintain the security of personal data and seek to minimize the possibility of accidental or unlawful destruction, accidental loss, unauthorized use, alteration, unauthorized modification, disclosure and/or access, as well as any other unlawful form of processing of your data, in accordance with the provisions of Article 32 of the GDPR.
In this regard, and taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing, as well as the risks of probability and severity that may affect the rights and freedoms of natural persons, appropriate measures have been established to ensure the level of security appropriate to the existing risk.
In any case, GROOTS has sufficient mechanisms in place to:
Ensure the confidentiality, integrity, availability and permanent resilience of the processing systems and services.Restore the availability and access to personal data quickly, in the event of a physical or technical incident.
Verify, evaluate and assess, on a regular basis, the effectiveness of the technical and organizational measures implemented to ensure the security of the processing.
Pseudonymize and encrypt personal data, if applicable.
Notwithstanding the foregoing, as a User you acknowledge and accept that Internet security measures are not impregnable and that the networks used on the Internet are not 100% secure, so that any communication sent by this means may be intercepted and / or modified by unauthorized persons, so that as a User you must also take extreme caution.
9. NOTICE OF PERSONAL DATA BREACHES OR SECURITY BREACHES.
A personal data breach involves a breach of security of GROOTS’ information systems that results or may result in the destruction, alteration, loss, unauthorized disclosure or access, accidental or otherwise, to personal data transmitted, stored or processed in connection with the provision of our services.In the event that personal data we store and/or process at GROOTS is compromised in any way, we will proceed to notify those affected in a timely manner, and in accordance with the provisions of Article 33 of the GDPR.
10. COMMUNICATION OF DATA TO THIRD PARTIES.
Personal data that users or potential clients may have provided to us through our website, or during the provision of services, will not be sold, transferred and/or exchanged with unauthorized third parties, except as required by law, or in the cases set out below in relation to international data transfers that we make from GROOTS.
On the other hand, Customer data may be transferred to the Tax Administration and other Public Administration Bodies, if required to do so.
11. INTERNATIONAL DATA TRANSFERS.
At GROOTS, we use Twitter. This social network is based in the United States. Therefore, any information that we upload to this social network, we make an international transfer of data to the U.S. because the data uploaded to our profiles are stored on the servers of that company, also located in the U.S.. However, GROOTS does not upload or process through this platform personal data of users, being these who voluntarily decide to follow our page.
Twitter, Inc. 1355 Market Street #900 San Francisco, California 94103 Phone: (415) 222-9670
At GROOTS, we use Facebook. This social network is based in the United States. Therefore, any information that we upload to this social network, we make an international transfer of data to the U.S. because the data uploaded to our profiles are stored on the servers of that company, also located in the U.S.. Facebook, Inc. has obtained certification under the EU-US privacy shield frameworks. The U.S. and Switzerland-U.S. USA. GROOTS also installs Facebook pixels on its website in order to make an interrelationship with the users’ profiles, as well as to know the conversions produced with it.
Facebook, Inc. 1 Hacker Way 94025 Menlo Park California 94025, USA Phone: (1)-(650)-543-4800
At GROOTS, we use Google Inc. This social network is located in the United States. Therefore, any information we upload to this social network, implies that we make an international transfer of data to the U.S. as the data uploaded to our profiles are stored on the servers of that company, also located in the U.S.. Google Inc. and its subsidiaries in the USA comply with the EU-US and Swiss-US Privacy Shields. USA and Switzerland-USA. USA. Also GROOTS uses Google Analytics and Google Adwords service on its website in order to know the traceability of visits by users on its website in the first case, and produce ads and improve sales through ads in the second case.
Google Headquarters 1600 Amphitheatre Parkway Mountain View, CA 94043 USA
At GROOTS, we use YouTube. This social network is based in the United States. Therefore, any information that we upload to this social network, we make an international transfer of data to the U.S. because the data uploaded to our profiles are stored on the servers of that company, also located in the U.S.. YouTube LLC. and its U.S. subsidiaries comply with the EU-U.S. Privacy Shields. The U.S. and Switzerland-U.S.-Switzerland. USA. However, GROOTS does not upload or process through this platform personal data of users, being these who voluntarily decide to follow our page.
San Bruno 901 Cherry Avenue San Bruno, CA 94066 United States
At GROOTS, we use Instagram. This social network is based in the United States. Therefore, any information that we upload to this social network, we make an international transfer of data to the U.S. because the data uploaded to our profiles are stored on the servers of that company, also located in the U.S.. Instagram complies with EU-US and Swiss-US privacy shields. However, GROOTS does not upload or process through this platform personal data of users, being these who voluntarily decide to follow our page.
Attn: Law Enforcement Response Team 1601 Willow Road Menlo Park, CA 94025 USA
12. DATA PROTECTION RIGHTS.
Any person may exercise the rights of access, rectification, deletion, limitation of treatment, the right to portability, not to be subject to automated processing, including profiling and the right to opposition of personal data contained in any of the files that is responsible GROOTS, requesting it by any means that leaves evidence of sending and receiving, clearly expressing their desire and accompanying a photocopy of your ID and any documents necessary to prove their identity.Do not forget to indicate the reasons justifying the exercise of the right, for this, you can send a letter, either to the email address firstname.lastname@example.org, o a la dirección Gran Via Seat S/N, Nave G, Martorell, (BARCELONA). Tenemos a disposición de los Usuarios formularios para el ejercicio de estos derechos, pueden solicitarlos en nuestro formulario de contacto.¿Qué puede solicitar exactamente?
Right of access: You may request information about whether GROOTS is processing your personal data.
Right of rectification: You may request the rectification of the data, in case they are incorrect, as well as their deletion.
Right of cancellation: You may request the cancellation of the data; and in case there is any limitation, GROOTS will keep the data properly blocked, only for the exercise or defense of claims.
Right of opposition: You may request that we stop processing the data in the manner stated, unless for legitimate reasons we must continue to process them, a circumstance that we will expressly state.
Right to request the limitation of processing: You may request at any time that we limit the processing of your data in any of the following cases:
When you contest the accuracy of the data processed and for a period that allows GROOTS to verify the accuracy of the data.
When the processing of the data is unlawful under current legislation and the data subject opts for the restriction of its use instead of its deletion.
When the affected party requires their data for the establishment, exercise or defense of legal claims.
Right to data portability: So that, in the event that the data are processed in an automated way, the same are returned or transferred to another company indicated by the User in a structured, automated and commonly used format.
Right of erasure: You may request the erasure of your personal data and GROOTS shall erase it without undue delay when:
The data is no longer necessary for the purposes for which it was collected or processed.
The data subject withdraws the consent on which the data processing is based, and there is no other legal basis for doing so.
The data subject objects to the processing because the purpose of the processing is direct marketing of products.
The data has been processed illegally.
The data must be deleted in order to comply with a legal obligation at EU and/or national level.
In addition, Users have other rights, namely:
Right to withdraw the consent given: The User may withdraw the consent given for the processing of personal data for any specific purpose, when he/she wishes to do so, by simply contacting us exercising this right.
Right to complain to the Control Authority: Any User may address to the Control Authority, in case he/she considers that GROOTS is treating his/her data in an erroneous way. In the case of Spain, the supervisory authority is the Spanish Data Protection Agency, address at C/ Jorge Juan, 6, 28001-Madrid and contact telephone numbers: 901 100 099 / 91 266 35 17.
Our website has a Blog section where Users are allowed to post comments. Users may also share our articles through the social networks where we are present, so Users should be cautious and read beforehand the Terms and Privacy Policies of the mentioned social network.
14. SOCIAL NETWORKS
No obstante lo anterior, a través de los perfiles, GROOTS no comparte ni comunica ninguna información personal de los Usuarios, “seguidores” de Twitter, Facebook, etc.Aprovechamos la presente Política de Privacidad para informar a los Usuarios que, el perfil de GROOTS en las citadas redes sociales, está abierto al público en general, sin limitación de acceso a otros usuarios, con la finalidad de que nuestra marca, servicios, concursos, certámenes, etc. sean vistos por la mayor cantidad de personas posibles. It is for this reason that, in the event that Users, followers of our profiles, post personal information on our wall, it will be their sole responsibility.
Any User may exercise the rights of data protection by contacting GROOTS at the address and email address indicated in the section corresponding to them. In no case will GROOTS extract data from social networks without the express consent of the user to do so.we strongly recommend Users to read the Privacy Policies and Terms and Conditions of the social networks where we are present.
15. RECEIPT OF CURRICULUM VITAE.
GROOTS, does not admit the reception of Curriculum Vitae through the e-mail address provided in this web page.
GROOTS, gestionará la recepción de Currículum Vitae de candidatos a través de los formularios disponibles en el apartado “Únete al equipo” de nuestra página web, cuando dispongamos de un proceso de selección abierto.
Le informamos que conforme dispone el Reglamento (UE) 2016/679 del Parlamento Europeo y del Consejo, de 27 de abril de 2016, relativo a la protección de las personas físicas en lo referente al tratamiento de datos personales y a la libre circulación de estos, que los datos personales facilitados y recogidos en esta solicitud de empleo o currículum vitae, serán tratados e incluidos automatizadamente en los ficheros de datos personales bajo responsabilidad de la persona que los ceda, donde se recogen y almacenan los datos personales con la finalidad exclusiva de formar parte en los procesos de selección de personal, bolsa de trabajo y contratación que se lleven a cabo.
El interesado otorga su consentimiento para el tratamiento de sus datos personales con la finalidad anteriormente mencionada. En el supuesto de producirse alguna modificación de sus datos personales, le solicitamos, nos lo comunique por escrito con la única finalidad de mantener actualizada su solicitud de empleo o currículum vitae. El titular de los datos personales consiente expresa e inequívocamente a que sus datos personales se cedan a otras organizaciones interesadas en determinados perfiles de trabajo. Groots Hydroponics, garantiza el buen uso de la información, y en especial, la plena confidencialidad de los datos de carácter personal contenidos en nuestros ficheros, así como el pleno cumplimiento de las obligaciones en materia de protección de datos de carácter personal.
De acuerdo con lo establecido en el Reglamento (UE) 2016/679 del Parlamento Europeo y del Consejo, de 27 de abril de 2016, relativo a la protección de las personas físicas en lo referente al tratamiento de datos personales y a la libre circulación de estos, Groots Hydroponics se compromete a respetar su confidencialidad en el
tratamiento de sus datos personales, y le informa que tiene derecho a ejercitar los derechos ARCO (derecho de acceso, rectificación, cancelación y oposición) de sus datos personales mediante solicitud escrita, adjuntando fotocopia del D.N.I., dirigida a email@example.com.
Si tiene preguntas o inquietudes sobre nuestra Política de Privacidad o sobre cómo manejamos su información personal, contáctenos a través de nuestro correo electrónico de soporte al cliente firstname.lastname@example.org.