Privacy Policy
The Owner informs you about its Privacy Policy regarding the processing and protection of personal data of users that may be collected while browsing through the Web Site: https://shop.nutraessential.com
In this regard, the Holder guarantees compliance with current regulations on the protection of personal data, reflected in the Organic Law 3/2018 of December 5, 2018, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD GDD). It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (GDPR).
The use of the Web site implies the acceptance of this Privacy Policy as well as the conditions included in this Privacy Policy. Legal Notice.
Identity of the Responsible
- Headline: Nutra Essential Otc SL B86849981
- Address: C/La Granja 1 - - Floor 3, 28108, Alcobendas, Madrid, Spain
- E-mail: info@nutraessential.com
- Contact telephone number: +34 91 661 23 35
- Web site: https://shop.nutraessential.com
Principles applied in data processing
In processing your personal data, the Data Controller will apply the following principles that comply with the requirements of the new European Data Protection Regulation (GDPR):
- Principle of lawfulness, loyalty and transparency: The Holder will always require consent for the processing of personal data, which may be for one or more specific purposes about which the Holder will previously inform the User with absolute transparency.
- Principle of data minimization: The Data Subject shall request only the data strictly necessary for the purpose or purposes for which it is requested.
- Principle of limitation of the storage period: The Data Controller shall keep the personal data collected for the time strictly necessary for the purpose or purposes of the processing. The Data Controller shall inform the User of the corresponding retention period according to the purpose.
In the case of subscriptions, the Registrant will periodically review the lists and eliminate those registrations that have been inactive for a considerable period of time. - Principle of integrity and confidentiality: The personal data collected will be treated in such a way that their security, confidentiality and integrity is guaranteed.
The Data Controller takes the necessary precautions to prevent unauthorized access or misuse of its users' data by third parties.
Collection of personal data
You do not need to provide any personal information to browse the Web site.
Rights
The Holder informs you that about your personal data you have the right to:
- Request access to stored data.
- Request a correction or deletion.
- Request the limitation of your treatment.
- Opposing treatment.
You may not exercise your right to data portability.
The exercise of these rights is personal and therefore must be exercised directly by the interested party, requesting it directly to the Data Controller, which means that any customer, subscriber or collaborator who has provided their data at any time, can contact the Data Controller and request information about the data stored and how it has been obtained, request rectification of the same, oppose the treatment, limit its use or request the deletion of such data in the files of the Data Controller.
To exercise your rights, please send your request together with a photocopy of your National Identity Card or equivalent to the following e-mail address: info@nutraessential.com.
The exercise of these rights does not include any data that the Data Controller is obliged to retain for administrative, legal or security purposes.
You have the right to effective judicial protection and to file a complaint with the supervisory authority, in this case, the Spanish Data Protection Agency, if you consider that the processing of personal data concerning you is in breach of the Regulation.
Purpose of personal data processing
When you connect to the Website to send an email to the Owner, subscribe to its newsletter, you are providing personal information for which the Owner is responsible. This information may include personal data such as your IP address, first and last name, physical address, e-mail address, telephone number, and other information. By providing this information, you consent to your information being collected, used, managed and stored by - NUTRA ESSENTIAL OTC - only as described on the pages:
The personal data and the purpose of the processing by the Holder is different according to the information capture system:
There are other purposes for which the Data Controller processes personal data:
- To ensure compliance with the conditions set out in the Legal Notice page and applicable law. This may include the development of tools and algorithms to help the Website ensure the confidentiality of the personal data it collects.
- To support and improve the services offered by this Web Site.
- To analyze user navigation. The Owner collects other non-identifying data obtained through the use of cookies that are downloaded to the User's computer when browsing the Website whose characteristics and purpose are detailed on the page of Cookies Policy.
Personal data security
To protect your personal data, the Data Controller takes all reasonable precautions and follows industry best practices to prevent its loss, misuse, improper access, disclosure, alteration or destruction.
Your data may be incorporated into a mailing list file, for which the Holder is responsible for its management and processing. The security of your data is guaranteed, as the Holder takes all necessary security measures and guarantees that personal data will only be used for the given purposes.
The Owner informs the User that their personal data will not be disclosed to third party organizations, except that such transfer of data is covered by a legal obligation or when the provision of a service implies the need for a contractual relationship with a processor. In the latter case, the transfer of data to the third party will only be carried out when the Owner has the express consent of the User.
However, in some cases, collaborations with other professionals may be carried out, in such cases, the User's consent will be required, informing the identity of the collaborator and the purpose of the collaboration. It will always be carried out with the strictest security standards.
Content from other websites
Pages on this website may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves in exactly the same way as if you had visited the other website.
These Web sites may collect data about you, use cookies, embed additional third-party tracking code, and monitor your interaction using this code.
Cookies Policy
In order for this Web site to function properly it needs to use cookies, which is information that is stored in your Web browser.
You can consult all the information related to the policy of collection and treatment of cookies in the page of Cookies Policy.
Legitimation for data processing
The legal basis for the processing of your data is:
- The consent of the interested party.
Categories of personal data
The categories of personal data processed by the Data Controller are:
- Identifying data.
- No specially protected categories of data are processed.
Retention of personal data
The personal data provided to the Data Subject will be kept until he/she requests its deletion.
Web Browsing
As you browse the Website, non-identifying data may be collected, which may include, IP address, geolocation, a record of how services and sites are used, browsing habits and other data that cannot be used to identify you.
The Web site uses the following third-party analytics services:
The Owner uses the information obtained to obtain statistical data, analyze trends, administer the site, study browsing patterns and to gather demographic information.
The Holder is not responsible for the processing of personal data by websites that you can access through the various links contained in the Website.
Accuracy and veracity of personal data
You agree that the data provided to the Holder are correct, complete, accurate and current, as well as to keep them properly updated.
As User of the Website is solely responsible for the accuracy and correctness of the data submitted to the Website exonerating the Holder of any liability in this regard.
Acceptance and consent
As User of the Web Site declares to have been informed of the conditions on protection of personal data, accepts and consents to the processing of such data by the Holder in the manner and for the purposes stated in this Privacy Policy.
To contact the Owner, subscribe to a newsletter or make comments on this Web site you must accept this Privacy Policy.
Changes in the Privacy Policy
The Owner reserves the right to modify this Privacy Policy to adapt it to new legislation or jurisprudence, as well as to industry practices.
These policies shall remain in effect until modified by other duly published policies.
Identity and contact details of the person in charge of personal data processing
- IDENTIFICATION DATA: NUTRA ESSENTIAL OTC S.L. ("NUTRA ESSENTIAL").
- Registered office: C/ La Granja 1, 3rd floor, 28108 Alcobendas, Madrid.
- C.I.F number B86849981.
- Registered in the Mercantile Registry of Madrid in Volume 31642, folio 18, Section 8, Page M 569384.
- Contact e-mail: info@nutraessential.com
- Contact telephone number: 34 91 661 23 35
In compliance with the provisions of the General Data Protection Regulation (GDPR), EU Regulation 2016/679 of April 27, 2016 and in compliance with the duty of information contained in Article 10 of Law 34/2002 of July 11, Services of the Information Society and Electronic Commerce, we inform you as a user that the personal data and information you provide will be incorporated into a personal data file whose ownership will be NUTRA ESSENTIAL OTC, SL.
Purposes of Treatment:
The purposes of the processing of your personal data will be the following:
- Respond and follow up on the contact request requested by you.
- To process and follow up on orders for products you purchase through this website and manage the contractual relationship arising from the purchase of products.
- The sending of commercial and promotional communications if you have expressly authorized us to do so.
As long as you do not inform us to the contrary, we will understand that the personal data you have provided to us have not been modified and that you agree to notify us of any variation and that we have your consent to use them for the aforementioned purposes.
Legitimation
The legal basis for the processing of your personal data is your consent, which you may withdraw at any time.
What are your rights
You may exercise your rights of access, rectification, suppression, limitation, opposition, portability, and the right not to be subject to automated individualized decisions, rights that may be exercised by sending a request by mail to the registered office at C/ La Granja, 1, 28128 Alcobendas- Madrid and/or by e-mail to: info@nutraessential.com.
The user may exercise the following rights against the Data Controller, as recognized in the RGPD:
- Right of accessto obtain information about your specific personal data and the processing of such data.
- Right of rectification: This is the user's right to have his personal data modified.
- Right of suppression: It is the user's right, unless otherwise provided by law, to obtain the deletion of personal data when it is no longer necessary for the purposes for which it was collected or processed or when the user has withdrawn consent.
- Right to limitation of processing: It is the user's right to limit the processing of his personal data.
- Right to data portabilityIf the processing is carried out by automated means, the user shall have the right to receive from the Controller his personal data in a structured, commonly used and machine-readable format and to transmit it to another Controller, where technically feasible.
- Right of oppositionThis is the user's right not to have his or her personal data processed or to have the processing of such data stopped.
- Right not to be subject to a decision based solely on automated processing, including profilingThe right of the user not to be subject to an individualized decision based solely on the automated processing of his personal data, including profiling.
In order to exercise these rights it will be necessary to attach a copy of your ID card.
Data retention period
Your personal data will be kept for as long as necessary for the provision of the service you have been provided or as long as you do not withdraw your consent. Subsequently, the data will be deleted in accordance with the provisions of the data protection regulations which implies its blocking, being available only at the request of Judges and courts, the Public Prosecutor or the competent Public Administrations during the period of limitation of actions that may arise and, after this, its complete elimination.
We remind you of your right to file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) at www.aepd.es in those cases in which you consider that there has been a violation of the applicable data protection regulations.
Communications of data to third parties
In order to fulfill your request, it may be necessary for your data to be communicated by Nutra Essential to companies that provide services to us such as postal services, after-sales services, and third parties that help us provide digital and digital commerce services and payment service providers.
The processing of personal data is carried out within the territory of the European Union. If at any time processing is carried out outside the territory of the European Union, it will always be carried out in places declared as countries with an adequate level of data protection.
Security and Confidentiality Measures
Nutra Essential undertakes to adopt the necessary and appropriate technical and organizational measures, so as to ensure the security of personal data collected and to prevent the accidental or unlawful destruction, loss or alteration of such personal data or unauthorized communication or access to such data and undertakes to notify the user without undue delay when a breach of security of personal data occurs.
Personal data will be treated as confidential by the Data Controller, its employees, associates, and any person to whom it makes the information accessible.