Privacy policy

Processing Activities

What processing activities do we carry out with your personal data?

– In compliance with Regulation (EU) 2016/679 and the Organic Law Project on Personal Data Protection, we inform you that your personal data may be subject to some of the following processing activities:

TR04 – Advertising campaigns (Legal basis: Law 34/1988, of November 11, General Advertising Law.)

TR08 – Obtaining the opinion of data subjects (Legal basis: Regulation (EU) 2016/679 on data protection and LOPD.)

TR03 – Own staff selection (Legal basis: Royal Legislative Decree 3/2015, of October 23, approving the revised text of the Employment Law.)

TG01 – Own accounting and bookkeeping management, as controller. (Legal basis: Royal Decree 1514/2007, of November 16, which regulates the General Accounting Plan.)

TG25 – Data collection for own tax management (Legal basis: Law 58/2003, of December 17, General Tax Law.)

TG12 – Own labor management: data collection (Legal basis: Royal Legislative Decree 1/1994, of June 20, approving the Revised Text of the General Social Security Law.)

TR09 – Security measures for technical and organizational aspects in applied software (Legal basis: Regulation (EU) 2016/679 on data protection and LOPD.)

TE02 – Occupational risk prevention (Legal basis: Law 31/1995, of November 8, on Occupational Risk Prevention.)

TE07 – Document destruction (Legal basis: Regulation (EU) 2016/679)

TV01 – Sales / Service Provision (Legal basis: Commercial and Tax Legislation)

TE03 – Transport and/or parcel delivery service (Legal basis: Royal Decree of August 22, 1885, publishing the Commercial Code.)

TR05 – Emails (Legal basis: Commercial Code and other applicable legislation.)

TR01 – Information requests received (Legal basis: Commercial Code and other commercial provisions.)

TR07 – Incident and/or security breach management (Legal basis: Regulation (EU) 2016/679 on data protection and LOPD.)

TE04 – Management of own legal matters (Legal basis: Applicable commercial and labor legislation.) TE01 – Maintenance of computer systems (Legal basis: Commercial Code.)

Controller

Who are we?

We are the data controllers of your data. Therefore, data subjects and competent bodies are expressly, precisely, and unequivocally informed of the following aspects regarding the data controller:

Astrophytumland
N332, km 230,
46790 Xeresa,
Valencia

Tel: +34 633 28 75 58
e-Mail: pedidosastrophytumland@gmail.com

Owner: Miguel Mestre Martí

Purposes

Why do we use your personal data?

In this organization, we may process your personal data exclusively for the purposes indicated below:

To verify that all necessary technical measures are being carried out for the correct management of personal data with the applied software.

Sending commercial and/or advertising information by email.

Managing information requests received from the data subject about our products or services. Exclusive management of internal incidents detected in compliance with GDPR requirements. Carrying out advertising campaigns to promote our services and/or products.

Obtaining the opinion of data subjects.

Personnel selection to fill necessary job vacancies.

Complying with all requirements set forth in the Occupational Risk Prevention Law. Sending parcels and correspondence.

Managing any legal issues affecting the company. Managing, maintaining, and repairing computer storage systems. Actions to carry out our own labor management.

Actions to carry out our own tax and accounting management.

Complying with the principle of limitation of the retention period for personal data. Administrative management of private clients.

Carrying out the sale or provision of the contracted service.

A commercial or user profile may be created based on the information provided or obtained. It is expressly stated that, under no circumstances, will profiles be created with the data of a minor.

The personal data you provide will be kept as long as the contractual relationship lasts or, where appropriate, as long as you do not exercise your right to object or withdraw the granted consent. To do this, you can go to the corresponding section on our website or send an email to the address indicated in the section concerning the controller.

Lawfulness

Why do we use them? We are entitled to process your personal data for the following reasons:

Your unequivocal, informed, and express consent, in cases where it is legally required, without, in any case, the withdrawal of such consent conditioning the execution of other processing activities with a different legal basis, and without such withdrawal affecting the lawfulness of the processing prior to its withdrawal.

A legal obligation of the data controller.

The execution of the service provision contract and/or the sale of the corresponding products, signed by you.

The legal basis for processing your data is a legitimate interest of the controller. This interest is based on a prior proportionality or balancing test between the legitimate interest of the controller and the interests or rights and freedoms of the data subjects. This balancing has involved assessing the interest, assessing the impact of the processing on the data subjects, balancing the two aforementioned concepts, and implementing additional safeguards. Since the final balancing favors the controller, the processing can be carried out in accordance with applicable personal data protection regulations. For any questions or clarification, you can contact us via the email provided in the section corresponding to the data controller.

Recipients

With whom can we share your personal data?

Your personal data will be communicated to the following companies and organizations: Tax Agency
State Public Employment Service General Social Security Treasury Banks and credit unions

Your personal data will not be transferred to any third country or international organization.

Sources

What data do we process and how did we obtain it?

Your personal data will be incorporated into the following files, owned by the organization:

FG01 Own accounting management
FG02 Own labor management
FG15 Own tax management. Data collection FE01 IT maintenance
FE02 Occupational risk prevention FE03 Transport and shipping
FE04 Own legal matters
FR01 Information requests received FR03 Own personnel selection FR04 Advertising campaigns
FR05 Emails
FR07 Incident and/or security breach management FR08 Obtaining data subjects' opinions
FR09 Software and hardware security FE07 Document destruction
FP01 Customers

The personal data we process in our organization comes from the following sources: The data subject themselves

Rights

What rights can you exercise?

We guarantee the exercise of your rights regarding the processing of your personal data.
In particular, we inform you that you have the right to:

Obtain confirmation as to whether your data is being processed.

Exercise the right to access the personal data we hold, obtaining information on the purposes of the processing, the category of data processed, possible recipients, the retention period, the origin of the data, and, where appropriate, profiling or automated decision-making.

Exercise the right to rectification. For these purposes, we remind you that the personal data we hold must always be a true reflection of reality, so do not hesitate to exercise your right if any data changes, is modified or canceled. You guarantee that the personal data you have provided to us by any means is true and accurate, and you undertake to notify any change or modification thereof, being solely responsible for any loss or damage caused to the controller or any third party due to the communication of erroneous, inaccurate or incomplete information.

For reasons related to your particular situation, you may object to the processing of your data, in which case our organization will stop processing the data, unless there are legitimate reasons that prevent it.

Request the erasure of your personal data when, among other reasons, they are no longer necessary for the purposes described above or we no longer have the legitimacy to process them.

Request the portability of your data, when the processing is carried out by automated means and provided that it is linked to our entity based on a signed contract or you have given consent for the processing carried out. In these cases, you will have the right to receive your personal data in a structured, commonly used and machine-readable format, or to have them transmitted directly to another controller, when technically possible.

In certain circumstances, you may request the restriction of the processing of your data, in which case we will only retain them for the exercise or defense of claims.

Object to automated decision-making, including profiling.
These rights can be exercised free of charge, except in legally stipulated cases, by written request signed by you or, where appropriate, by your representative, addressed to the controller, at the addresses provided for this purpose in the first section, or physically at any of our establishments.

You also have the right to lodge complaints, either with the Spanish Data Protection Agency (on the website https://www.agpd.es/) or with the corresponding supervisory authority.

Likewise, you may appeal to the Courts of Justice to claim compensation.

Finally, you have the right to withdraw your consent, with the same ease with which you granted it. To do this, you can go to our website, where you will find the necessary information to quickly and easily cancel the authorization granted to us to make these communications. You can also send an e-mail to the address indicated in the section concerning the controller.

We also inform you that for each processing of your personal data, the possible threats and impacts that may arise as a consequence are determined, mitigating or eliminating, if possible, the potential damages, through the application of the corresponding security measures that are periodically reviewed to determine their effectiveness.

Our control system also allows us to comply with the principles of data processing, being able to demonstrate to the data subject the principle of limitation to the purpose of processing, the principle of limitation to the retention period, the principle of data minimization, as well as the principle of integrity and confidentiality.
Finally, we also inform you that you will periodically receive surveys that will allow us to know your opinion on any suggestion related to the processing of your personal data, as well as to be able to comply with the principle of transparency and accuracy of the processed data.

For any questions or clarification, you can contact us via the email provided in the first section. Without further ado, sincerely,

The Controller.