This privacy policy complies with Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), Organic Law 3/2018, of December 5, on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), as well as in all matters that are not contrary to the aforementioned regulations, to Organic Law 15/1999, on the Protection of Personal Data (Data Protection Act) and its implementing regulations, and/or those that may replace or update them in the future.
Our organization is committed to the privacy of your personal data. The personal data you provide is necessary for us to provide our services and is processed lawfully, fairly, and transparently, ensuring its adequate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage through the application of technical and organizational measures.
Through this document we want to offer you, in a transparent and fair manner, all the necessary information regarding the processing of your personal data by this organization.

I.- DATA CONTROLLER IDENTITY:

MEDITERRANEAN POLYPHENOLS SL.

CIF / NIF:

B-21806567

HOME:

CL. CARRIL DE LA CONDOMINA, 3 Pta. B 3 – 30006 Murcia (Spain)

PHONE:

(+34) 968 847 325

E-MAIL: shop@granatherapy.miwebnueva.net

II.- RECIPIENTS OF PERSONAL DATA

1.– The personal data provided will not be transferred to any third party unless otherwise specified in the specific processing activities.
2.– Optionally, for the contracting of cloud computing services and/or services for sending emails, communication, as well as other related computer services, the personal data may be:

– Transferred to IT service companies located within the European Economic Area (EEA) or,

– Transferred to IT service providers located outside the EEA that are certified under the Privacy Shield framework, which provides them with adequate safeguards to ensure the security of personal data. You can find more information by visiting this link: https://www.privacyshield.gov/welcome

3.– Optionally, to administrations and other bodies when required in compliance with legal obligations.

III.- LEGAL BASIS THAT LEGITIMIZES THE PROCESSING OF PERSONAL DATA

In each specific processing of personal data, we will inform you of the legal basis that legitimizes it.

IV.- RIGHTS  ACCESS

It is the right to obtain from the controller confirmation as to whether or not they are processing personal data concerning the data subject and, where that is the case, the right of access to the personal data and the following information: the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed, the period for which the personal data will be stored or the criteria used to determine that period, the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing, the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), the existence, where applicable, of automated decision-making, including profiling, where data are transferred to third countries, and the right to be informed of the appropriate safeguards applied.

RIGHT OF RECTIFICATION

You have the right to request the correction of your personal data if it is inaccurate, including the right to complete any incomplete information. Please note that by providing us with your personal data through any means, you guarantee that it is true and accurate and agree to notify us of any changes or modifications to it. Therefore, any damage caused by the communication of erroneous, inaccurate, or incomplete information in the website forms will be the sole responsibility of the data subject.

RIGHT OF ELIMINATION

This is the right to request the erasure of your personal data when, among other reasons, it is no longer necessary for the purpose for which it was collected, or is being processed in another way, or you withdraw your consent. It should be noted that erasure will not be granted when the processing of personal data is necessary, among other reasons, for compliance with legal obligations or for the establishment, exercise, or defense of legal claims.

RIGHT TO LIMITATION

It is the right to request the limitation of the processing of your personal data, which means that in certain cases you can ask us to temporarily suspend the processing of your personal data or to keep it beyond the necessary time when you may need it.

RIGHT TO WITHDRAW CONSENT

This is the right to withdraw the consent you provided by checking “I have read and agree to the privacy policy” at any time, as specified in the corresponding “Exercise of Rights” section or in the specific processing of commercial communications or newsletters. Please note that this right will not apply if, among other cases, the processing of personal data is necessary for compliance with a legal obligation, the performance and maintenance of a contract, or for the establishment, exercise, or defense of legal claims. Furthermore, the withdrawal of consent will not have retroactive effect; that is, it will not affect the lawfulness of processing based on consent before its withdrawal.

RIGHT TO PORTABILITY

It is the right to receive the personal data concerning you that you have provided to us, in a structured, commonly used and machine-readable format, and to transmit it to another controller, provided that: the processing is based on your consent and is carried out by automated or computer means.

RIGHT OF OBJECTION

This is your right to object to the processing of your personal data based on our legitimate interest. We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.

RIGHT TO FILE A COMPLAINT WITH A SUPERVISORY AUTHORITY

If you believe that we are processing your personal data incorrectly, you can contact us or you also have the right to file a complaint with the Spanish Data Protection Agency (AEPD):
https://www.agpd.es/portalwebAGPD/index-ides-idphp.php

EXERCISE OF RIGHTS

You can exercise your rights by sending a letter to the postal address indicated above or by email shop@granatherapy.miwebnueva.net, attaching in both cases copy of your NIF/NIE/Passport or similar document.

V.- PROCESSING OF PERSONAL DATA.
GENERAL PROVISIONS

The personal data requested in each of the specific processing activities are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed, thus complying with the principle of data minimization.

The personal data requested in each of the specific treatments are strictly necessary; refusal to provide them would imply that the requested service cannot be provided.

The communication of personal data provided for in each of the specific processing activities is in some cases necessary for the execution and maintenance of a contract and in other cases for compliance with a legal obligation applicable to the data controller.

CONTACT FORM

Personal data will be processed to handle requests for information, suggestions, and complaints from users or customers.
The legal basis that legitimizes the processing of personal data is the express consent given by checking “I have read and agree to the privacy policy”.

Personal data will be kept for a period of two years from the moment it ceases to be processed, without prejudice to the exercise of the rights you have as an interested party.

E-COMMERCE FORM

Personal data will be processed to manage your online purchases by processing your orders and returns through our online services, send you notifications about the delivery status or in the event of problems with the shipment of items, manage your payments, handle any complaints or issues regarding the warranty of products or services, identify you and validate your legal age to contract, as well as for, where appropriate, the formulation, exercise or defense of claims.
The legal basis that legitimizes the processing of personal data is the express consent given by checking “I have read and agree to the privacy policy”.
Personal data will be shared with the transport company in order to deliver your order to your home, as well as with payment service providers.
Personal data will be kept until you withdraw your consent, unless it needs to be kept for the maintenance of the relationship between the parties or for the years necessary for compliance with legal obligations.