Privacy Policy

In order to guarantee and protect the privacy and confidentiality of the personal data of the users of our website and to protect their privacy, we have drafted, in accordance with current legislation, this Privacy Policy.

The terms set out below and especially the duty of confidentiality shall be binding on all internal or external personnel who work or may work with us and who have access to the data you provide, either while browsing our website, by using our forms or during the recruitment or provision of services.

We reserve the right to modify the content of this Privacy Policy, in order to adapt it to new legislation or jurisprudence, as well as to reports or opinions issued by the Spanish Data Protection Agency or the Article 29 Working Group.

In the event that we are going to use the personal data of Users, Potential Clients or Clients in a manner different from that established in the Privacy Policy in force at the time you provide us with the data; or in the event that we are going to use them for purposes other than those indicated at the time you provide us with your data, we will make every effort to contact you as the affected party, to inform you and obtain your consent once again. Otherwise, we will not use the data for other purposes.

We advise Users to review the present text each time they access our website to make sure of the purposes and uses we can make of their data.

This Privacy Policy will be part of and will be permanently linked to the provisions of our Legal Notice, in the Legal Conditions of the contracted service and in our Cookies Policy, these texts are available to users on our website and we recommend reading them.

We will at all times indicate the date of the last update of the Privacy Policy so that Users are aware of the actual content that applies to them and the date of the last revision.

GROOTS HYDROPONICS S.L, hereinafter GROOTS, notes that this Privacy Policy is adapted to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter GDPR).

1. PERSON IN CHARGE OF THE TREATMENT

The data controller of the data collected, processed and stored through this website and on the occasion of the services provided and contracted through it, is PLANETA HUERTO, with NIF B67341479, with address at Ronda Indústria 6, 08210, Barberà del Vallès (BARCELONA). E-mail: hola@grootsfarming.com and phone 606902187. GROOTS HYDROPONICS S.L. is registered in the Mercantile Registry of Barcelona, in Volume 46690, Book 0, Folio 8, General Section, Page 528078, with Inscription or annotation 1 dated 14/01/2019.

2. DATA PROCESSING

The personal data requested in your case will consist of those that are essential to identify and meet the request of the owner of the data, resolve issues raised and provide the contracted services, such data being collected for specific purposes explicit and legitimate and not being treated such data in a manner incompatible with the purposes stated.

The owner of the data will be informed by GROOTS, prior to the collection of their data, of the points set out in this Privacy Policy, so that it can provide express consent, accurate and unambiguous for the processing of their data.

The user agrees that all personal data will be fully disclosed to GROOTS from the moment the user has initiated the hiring of the deferred payment service offered by the latter at the time of choosing the method of payment.

This acceptance extends to third parties who may need to access the files for the proper performance of the contract.

3. SOURCE OF DATA

First, it is important for Users to be aware that when personal information is provided online (e.g., through e-mail or over the Internet), it can be collected and used by others. That is why GROOTS is not responsible that such information may be collected, stored and / or processed by an unauthorized third party, as it has taken security measures that are within its power to prevent this from happening.

The origin of the data we process and store in GROOTS can come from different places:

• Through our website we collect personal data of those users who voluntarily decide to fill in the mandatory fields that we have incorporated in each of the forms on our website.

With these forms, Users may register on our website, make a query or provide a suggestion, request a quote for a particular product offered on our website / request a product offered on our website or receive, if expressly authorized by GROOTS advertising and newsletters. Through these forms, Users provide us with their data and consent to the processing of the same in accordance with the purposes indicated at the time of completing the form.

Users will be responsible for the veracity and authenticity of the data they provide through our forms, being their obligation to keep them updated at all times to avoid errors on our part. Any false or inaccurate statement that occurs as a result of the information and data provided through these forms will be the responsibility of the User.

• Information can also come through the e-mails we receive at www.grootsfarming.com. Since we make the web available to our users through the domain www.grootsfarming.com we inform that the same is hosted in the PhoenixNAP Datacenter servers hosted in the USA. who establish the corresponding security measures and ensure compliance with the RGPD.

• Users should be informed that, if the user or potential customer so desires, a meeting can be arranged by telephone. The User must provide his/her name and telephone number.

• Finally, we also give Users the possibility to make queries and comments on topics and products that GROOTS will publish where appropriate (may moderate them based on criteria of legal and moral compliance, as well as practices of good use and ethics). Participation will be made through the participation form via comments available once the user has registered on the website. It is essential to read the web policies of this page before proceeding to comment.

The purpose of the processing of all this data will be the one indicated at the time of collection and detailed in the section “Purposes of processing and storage periods” of this Privacy Policy.

Since we make the web available to our users through the domain www.grootsfarming.com informs that it uses the following services. These providers establish the corresponding security measures and ensure compliance with the GDPR.

4. LEGITIMACY FOR DATA PROCESSING

The legal basis for the processing of Users’ data will depend on the time at which the personal data of the User, Potential Customer or Client is collected or processed:

• The legal basis for the processing of data collected through the form to participate by way of queries/comments to be published on the website is consent. At the time of filling out the above form, the participant accepts the provisions of this Privacy Policy or specific clause.

• The legal basis for the processing of data collected through the consultation and information form as well as the CHAT service will be to respond to queries or requests. These requests do not imply any contractual relationship.

• The legal basis for the processing of data collected through the form for sending newsletters is consent. At the time of filling out the aforementioned form, the interested party accepts the provisions of this Privacy Policy or specific clause.

• The legal basis for the processing of data collected through the registration form for the contracting of products is the existing contractual relationship. At the time of filling out the aforementioned form, the interested party accepts the provisions of this Privacy Policy or specific clause.

5. PURPOSES OF DATA PROCESSING AND DATA RETENTION PERIODS

The purposes for which each of the treatments will be carried out by GROOTS, are set out in the various informative clauses incorporated in each of the ways of data collection – web forms, etc. -.

Notwithstanding the foregoing, we detail them in full below, along with the period of data retention, carried out by GROOTS:

• Contact form / form for posting queries and / or comments and Chat service: To contact the User to resolve the query, doubt or suggestion, as well as send, if requested, username and password to access your private area.

These data will be kept on the e-mail provider’s server without any deletion period and as long as the data subject does not express his opposition. However, if the e-mails retained relate to the provision of services, they will be retained for as long as obligations may arise from the contractual relationship. (5 years – article 1964 of the Civil Code).

• Information request form: This data will be used by GROOTS, to provide you with information and contact you regarding the interest expressed with respect to our organization or our products/services.

• Registration Form: These data will be used by GROOTS for the purpose of providing the contracted service / contractual purpose of sale of products purchased by you and for internal management of the organization, accounting, tax and administrative. This data will be retained by GROOTS for as long as any liability may arise from the application of pre-contractual/contractual measures requested by the data subject (5 years – article 1964 of the Civil Code) or for a period of 6 years (art. 30 Commercial Code).

• Newsletter and advertising form: This data will be used by GROOTS to provide you with information and contact you in relation to your interest in receiving newsletters and advertising.

• Data collected through Cookies: Through the Cookies that we inform you about in our Cookies Policy, which we recommend you read, we collect data to personalize your experience and better serve your individual needs, improve our website, allow sharing comments on social networks, etc. This data will be retained in accordance with the provisions of our Cookie Policy to which we refer.

• Private area: The User will be able to access his private area with user name and password and will be able to modify or rectify his data whenever he wants, being able to exercise his opposition to the treatment in his case or suppression, in our system by contacting us at hola@grootsfarming.com This data will be retained by GROOTS for as long as any liability may arise from the performance of the contract and the provision of services (5 years – article 1964 of the Civil Code).

6. OBLIGATION TO REQUEST THE DATA PROVIDED

In order to optimally execute the services, Users must provide us with the information and personal data requested in our forms. In case of not providing all the information requested and marked as mandatory, GROOTS will not be able to offer its services / products or send, where appropriate, the requested information and therefore can not provide the services / products on which the User is interested.

7. MINORS

At GROOTS, we scrupulously comply with the requirements stipulated in the GDPR regarding data protection of minors, so we do not intentionally collect any information from children under 14 years of age. In addition, we inform Users that this Web site is intended only for persons over 18 years of age.

8. HOW WE PROTECT THE INFORMATION OF USERS, POTENTIAL CUSTOMERS OR CLIENTS.

GROOTS implements physical, technical and organizational measures to maintain the security of personal data and seek to minimize the possibility of accidental or unlawful destruction, accidental loss, unauthorized use, alteration, unauthorized modification, disclosure and/or access, as well as any other unlawful form of processing of your data, in accordance with the provisions of Article 32 of the GDPR.

In this regard, and taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing, as well as the risks of probability and severity that may affect the rights and freedoms of natural persons, appropriate measures have been established to ensure the level of security appropriate to the existing risk.

In any case, GROOTS has sufficient mechanisms in place to:

• Ensure the confidentiality, integrity, availability and permanent resilience of the processing systems and services.Restore the availability and access to personal data quickly, in the event of a physical or technical incident.

• Verify, evaluate and assess, on a regular basis, the effectiveness of the technical and organizational measures implemented to ensure the security of the processing.

• Pseudonymize and encrypt personal data, if applicable.

Notwithstanding the foregoing, as a User you acknowledge and accept that Internet security measures are not impregnable and that the networks used on the Internet are not 100% secure, so that any communication sent by this means may be intercepted and / or modified by unauthorized persons, so that as a User you must also take extreme caution.

9. NOTICE OF PERSONAL DATA BREACHES OR SECURITY BREACHES.

A personal data breach involves a breach of security of GROOTS’ information systems that results or may result in the destruction, alteration, loss, unauthorized disclosure or access, accidental or otherwise, to personal data transmitted, stored or processed in connection with the provision of our services.In the event that personal data we store and/or process at GROOTS is compromised in any way, we will proceed to notify those affected in a timely manner, and in accordance with the provisions of Article 33 of the GDPR.

10. COMMUNICATION OF DATA TO THIRD PARTIES.

Personal data that users or potential clients may have provided to us through our website, or during the provision of services, will not be sold, transferred and/or exchanged with unauthorized third parties, except as required by law, or in the cases set out below in relation to international data transfers that we make from GROOTS.

On the other hand, Customer data may be transferred to the Tax Administration and other Public Administration Bodies, if required to do so.

11. INTERNATIONAL DATA TRANSFERS.

At GROOTS, we use Twitter. This social network is based in the United States. Therefore, any information that we upload to this social network, we make an international transfer of data to the U.S. because the data uploaded to our profiles are stored on the servers of that company, also located in the U.S.. However, GROOTS does not upload or process through this platform personal data of users, being these who voluntarily decide to follow our page.

We inform our Users that Twitter is adhered to the Privacy Shield and states in its Privacy Policy, linked above, that it complies with the aforementioned protection framework of the European Union and the United States. The list can be consulted here, and, More information on how Twitter transfers data hosted on its platform can be found here . For complaints or claims regarding data protection we provide the following information:

Twitter, Inc. 1355 Market Street #900 San Francisco, California 94103 Phone: (415) 222-9670

At GROOTS, we use Facebook. This social network is based in the United States. Therefore, any information that we upload to this social network, we make an international transfer of data to the U.S. because the data uploaded to our profiles are stored on the servers of that company, also located in the U.S.. Facebook, Inc. has obtained certification under the EU-US privacy shield frameworks. The U.S. and Switzerland-U.S. USA. GROOTS also installs Facebook pixels on its website in order to make an interrelationship with the users’ profiles, as well as to know the conversions produced with it.

As mentioned above, Facebook is a member of the Privacy Shield and states in its Privacy Policy, linked above, that it complies with the aforementioned protection framework of the European Union and the United States. More information is available at here on how Facebook transfers data hosted on its platform. For complaints or claims regarding data protection we provide the following information:

Facebook, Inc. 1 Hacker Way 94025 Menlo Park California 94025, USA Phone: (1)-(650)-543-4800

At GROOTS, we use Google Inc. This social network is located in the United States. Therefore, any information we upload to this social network, implies that we make an international transfer of data to the U.S. as the data uploaded to our profiles are stored on the servers of that company, also located in the U.S.. Google Inc. and its subsidiaries in the USA comply with the EU-US and Swiss-US Privacy Shields. USA and Switzerland-USA. USA. Also GROOTS uses Google Analytics and Google Adwords service on its website in order to know the traceability of visits by users on its website in the first case, and produce ads and improve sales through ads in the second case.

As mentioned above, Google Inc. is a member of the Privacy Shield and states in its Privacy Policy, linked above, that it complies with the aforementioned protection framework of the European Union and the United States. More information is available at here on how Google+ transfers data hosted on its platform. For complaints or claims regarding data protection we provide the following information:Google Headquarters 1600 Amphitheatre Parkway

Google Headquarters 1600 Amphitheatre Parkway Mountain View, CA 94043 USA

At GROOTS, we use YouTube. This social network is based in the United States. Therefore, any information that we upload to this social network, we make an international transfer of data to the U.S. because the data uploaded to our profiles are stored on the servers of that company, also located in the U.S.. YouTube LLC. and its U.S. subsidiaries comply with the EU-U.S. Privacy Shields. The U.S. and Switzerland-U.S.-Switzerland. USA. However, GROOTS does not upload or process through this platform personal data of users, being these who voluntarily decide to follow our page.

As mentioned above, YouTube is a member of the Privacy Shield and states in its Privacy Policy, linked above, that it complies with the European Union and U.S. privacy framework. More information is available at here on how YouTube transfers data hosted on its platform. For complaints or claims regarding data protection we provide the following information:

San Bruno 901 Cherry Avenue San Bruno, CA 94066 United States

At GROOTS, we use Instagram. This social network is based in the United States. Therefore, any information that we upload to this social network, we make an international transfer of data to the U.S. because the data uploaded to our profiles are stored on the servers of that company, also located in the U.S.. Instagram complies with EU-US and Swiss-US privacy shields. However, GROOTS does not upload or process through this platform personal data of users, being these who voluntarily decide to follow our page.

As mentioned above, Instagram is a member of the Privacy Shield and states in its Privacy Policy, linked above, that it complies with the aforementioned protection framework of the European Union and the United States. More information is available  here on how Instagram transfers data hosted on its platform. For complaints or claims regarding data protection we provide the following information:

Attn: Law Enforcement Response Team 1601 Willow Road Menlo Park, CA 94025 USA

12. DATA PROTECTION RIGHTS.

Any person may exercise the rights of access, rectification, deletion, limitation of treatment, the right to portability, not to be subject to automated processing, including profiling and the right to opposition of personal data contained in any of the files that is responsible GROOTS, requesting it by any means that leaves evidence of sending and receiving, clearly expressing their desire and accompanying a photocopy of your ID and any documents necessary to prove their identity.Do not forget to indicate the reasons justifying the exercise of the right, for this, you can send a letter, either to the email address hola@grootsfarming.com, or to the address Ronda Industria 6, 08210 Barberà del Vallès, (BARCELONA). We have at the disposal of the Users forms for the exercise of these rights, they can request them in our contact form.what exactly can you request?

• Right of access: You may request information about whether GROOTS is processing your personal data.

• Right of rectification: You may request the rectification of the data, in case they are incorrect, as well as their deletion.

• Right of cancellation: You may request the cancellation of the data; and in case there is any limitation, GROOTS will keep the data properly blocked, only for the exercise or defense of claims.

• Right of opposition: You may request that we stop processing the data in the manner stated, unless for legitimate reasons we must continue to process them, a circumstance that we will expressly state.

• Right to request the limitation of processing: You may request at any time that we limit the processing of your data in any of the following cases:

  • When you contest the accuracy of the data processed and for a period that allows GROOTS to verify the accuracy of the data.

  • When the processing of the data is unlawful under current legislation and the data subject opts for the restriction of its use instead of its deletion.

  • When the affected party requires their data for the establishment, exercise or defense of legal claims.

• Right to data portability: So that, in the event that the data are processed in an automated way, the same are returned or transferred to another company indicated by the User in a structured, automated and commonly used format.

• Right of erasure: You may request the erasure of your personal data and GROOTS shall erase it without undue delay when:

  • The data is no longer necessary for the purposes for which it was collected or processed.

  • The data subject withdraws the consent on which the data processing is based, and there is no other legal basis for doing so.

  • The data subject objects to the processing because the purpose of the processing is direct marketing of products.

  • The data has been processed illegally.

  • The data must be deleted in order to comply with a legal obligation at EU and/or national level.

In addition, Users have other rights, namely:

• Right to withdraw the consent given: The User may withdraw the consent given for the processing of personal data for any specific purpose, when he/she wishes to do so, by simply contacting us exercising this right.

• Right to complain to the Control Authority: Any User may address to the Control Authority, in case he/she considers that GROOTS is treating his/her data in an erroneous way. In the case of Spain, the supervisory authority is the Spanish Data Protection Agency, address at C/ Jorge Juan, 6, 28001-Madrid and contact telephone numbers: 901 100 099 / 91 266 35 17.

13. BLOG.

Our website has a Blog section where Users are allowed to post comments. Users may also share our articles through the social networks where we are present, so Users should be cautious and read beforehand the Terms and Privacy Policies of the mentioned social network.

14. SOCIAL NETWORKS

GROOTS is present on Twitter, Facebook, Linkedin, Google+ and YouTube, without prejudice that it may use others in the future.That is why, through this Privacy Policy, is recognized responsible for the treatment in relation to the data published by GROOTS on such platforms, as well as the data that Users send privately to GROOTS in order to be extracted – for example, communications for GROOTS to attend an inquiry.

Notwithstanding the foregoing, through the profiles, GROOTS does not share or communicate any personal information of Users, “followers” of Twitter, Facebook, etc.We take this Privacy Policy to inform Users that the profile of GROOTSPLANETA HUERTO in these social networks, is open to the general public, without limitation of access to other users, in order that our brand, services, contests, contests, etc. are seen by as many people as possible. It is for this reason that, in the event that Users, followers of our profiles, post personal information on our wall, it will be their sole responsibility.

Anyone who does not wish to be a “follower” of GROOTS on the social networks where GROOTS is present, need only unfollow that profile following the provisions of the Privacy Policy and Terms and Conditions of the social network in question. User data uploaded to our profiles will remain in these from the time the User gives his/her consent until he/she withdraws it by requesting it from the platform. The treatment that GROOTS performs within social networks, will be at most, the social network allows corporate profiles. So GROOTS may inform, where not prohibited by law, to his followers, and by any means that allows the social network, about their activities, contests, competitions, contests, services, etc. and provide personalized customer service through the social network.

Any User may exercise the rights of data protection by contacting GROOTS at the address and email address indicated in the section corresponding to them. In no case will GROOTS extract data from social networks without the express consent of the user to do so.we strongly recommend Users to read the Privacy Policies and Terms and Conditions of the social networks where we are present.

15. RECEIPT OF CURRICULUM VITAE.

GROOTS, does not admit the reception of Curriculum Vitae through the e-mail address provided in this web page.

GROOTS, will manage the reception of Curriculum Vitae of candidates through the forms available in the section works with us of our web page, when we have an open process of selection.

In these cases, the data generated as a consequence of the participation in a selection process will be processed with the purpose of analyze the candidate’s professional profile and be able to give him/her the opportunity to participation in personnel selection processes organized by GROOTS, according to vacant or newly created positions. Likewise, and in case the candidate’s profile is selected, their data may be used to process their incorporation to the GROOTS staff.

In the same way in GROOTS we treat the information that provide us with the purpose of having a database of future candidates to cover possible vacancies in jobs in our company , adjusted to your professional profile. Please be informed that no automated decisions will be made, including profiling. GROOTS will request your free, informed, specific and unequivocal consent in accordance with Article 6.1.a) RGPD, to have a database of data of future candidates to fill possible vacancies in job positions of our company, adjusted to your professional profile. This data will not be disclosed to third parties.

The personal data provided will be kept as long as is not requested by the interested party. In any case, we inform you that after 12 months from the reception of your resume without any job offer from , it will be automatically deleted from our database.

16. CONDITIONS.

We strongly recommend that Users also visit the Legal Conditions, Legal Notice and Cookie Policy sections that regulate, among many other aspects, the use, disclaimers and limitations of liability that govern this website.