Privacy Policy

GENERAL PRIVACY POLICY

At Colección Sur S.L. we are committed to protecting your privacy. We want to be transparent about the data we collect, how we use it and the rights you have to control your data.

1. USER INFORMATION

Colección Sur S.L., is responsible for the processing of the User’s personal data and informs you that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April 2016 (RGPD) on the protection of natural persons and Organic Law 3/2018, of 5 December (LOPDGDD), with regard to the processing of personal data and the free movement of this data, for which you are provided with the following processing information:

For what purposes do we process your personal data?

At Colección Sur S.L. we process the data of interested parties for the management and development of communications (contacting users, resolving queries, etc.) as well as to attend to the services requested and to develop our activity.

We will manage the contracting of our products in distance selling and we will manage shipments and returns.

We will manage the processing of the user’s registration so that it can be used for the purchase of the products offered.

To maintain a relationship of sending advertising and commercial communications and news about our services to users who decide to subscribe to our newsletter. If you do not wish to receive it, please send us an email to: info@kannabia.com indicating “No Publi” in the subject line.

 With regard to the publication of personal data on blogs and social networks that may share this website, personal data may be processed for the purpose of answering comments and improving our services. The privacy policy is that set by the entities responsible for those sites. We are not responsible for the personal information that each user may publish.

What kind of data do we process?

In addition to the different means of collection mentioned above, as well as the different processing purposes described above, we inform you that the types of data that we can process in our information system are:

• Identification data
• E-mail addresses.
• Postal addresses
• DNI.

How long will we keep your data?

Personal data will be retained for as long as we maintain a relationship with you as a customer or other data subject; as long as you do not request its deletion; or as long as there is a legal provision or requirement to retain it.

When the data is no longer necessary for the purposes for which it was collected, it will be deleted, ensuring its confidentiality.

What is the legitimacy for the processing of your data?

The legal basis for the processing of your personal data is the relationship maintained with you based on the fulfilment of a contract and/or commercial relationship, as well as the express consent that, where applicable, you have provided us with for additional processing such as the website contact form, and any other processing that necessarily involves the collection of your personal data, for which a clear affirmative action on the part of the interested party will be an essential requirement.

We inform you that the personal data requested at the time of registering on this website are strictly necessary to formalise and manage the relationship with you, so that if you do not provide them, we will not be able to maintain this relationship. In any case, this main purpose is not subject to consent for the processing of data that are not necessary for this main activity.

To which recipients will your data be communicated?

In some cases, it is necessary for them to access information provided to us by third parties in order to provide you with the requested service, e.g. logistics, transport and delivery services, companies that provide us with other types of services such as: information technology (storage and processing of information, etc.).

These third parties only have access to the personal information they need to perform these services. They are required to maintain the confidentiality of your personal information and may not use it in any manner other than that which we have requested.

The data of the interested parties will not be communicated to any third party, unless legally obliged to do so.

What are your rights when you provide us with and/or we process your data?

As a data subject, you may at any time ask us to exercise any of the following data protection rights:

• Access your data: You have the right to access your data to find out what personal data we are processing concerning you.
• Request rectification or erasure of your data: In certain circumstances, you have the right to rectify personal data which you consider inaccurate and which concern you, and which are processed by the entities, as well as the right to request the deletion of your data when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
• Request the restriction of the processing of your data: In certain circumstances, you have the right to ask us to restrict the processing of your data, in which case we will only retain the data for which you have requested restriction of processing for the purpose of pursuing or defending claims.
• To portability of your data: In certain circumstances, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and to have it transferred by our company to another data controller.
• Object to the processing of your data: In certain circumstances and for reasons relating to your particular situation, you have the right to object to the processing of your data, in which case we will stop processing your data unless we have to continue to do so for compelling legitimate reasons or for the exercise or defence of any claims.
• The right to lodge a complaint with the supervisory authority if you have not obtained satisfaction in the exercise of your rights, in this case with the Spanish Data Protection Agency http://www.aepd.es

We inform you that you may exercise your rights over your personal data by any of the following means:

• Postal address: Apartado de Correos nº 2, 18210 Peligros (Granada, Spain)
• E-mail address: info@kannabia.com

Data protection officer: Evalúa Protección de datos, S.L. (Evalúa Data Consulting)

• Postal address: Av. del Conocimiento 41, Centro de empresas PTS, 2ª planta, Oficina A.207, 18016, Granada.
• E-mail address: delegadodeprotecciondedatos@dataevalua.com, please state “kannabia Seed Company” in the subject line.

How should requests from individuals exercising their data protection rights be handled?

Individuals may contact your company/organisation to exercise their rights under the GDPR (rights of access, rectification, erasure, portability, etc.). Where personal data are processed by electronic means, your company/organisation must provide means for requests to be made by electronic means. Your company/organisation should respond to your request without undue delay and, in principle, within 1 month from receipt of the request.

You may ask them for additional information to confirm the identity of the person making the request.

If your company/organisation rejects the request, you should inform the individual of the reasons and of his or her right to lodge a complaint with the Data Protection Authority and to seek judicial remedy.

The processing of requests from individuals must be free of charge. Where requests are manifestly unfounded or excessive, in particular because of their repetitive nature, it may charge a reasonable fee or refuse to act.

https://commission-europa-eu.translate.goog/law/law-topic/data-protection/reform/rules-business-and-organisations/dealing-citizens/how-should-requests-individuals-exercising-their-data-protection-rights-be-dealt_en?_x_tr_sl=en&_x_tr_tl=es&_x_tr_hl=es&_x_tr_pto=sc

Sending communications or information

Our policy regarding the sending of information by telematic means (e-mail, instant messaging, etc.) is limited to sending only communications that we consider to be of interest to our users and interested parties, in relation to the functions and activity of the company, or that you have consented to receive.

If you prefer not to receive these messages, we will offer you the possibility of exercising your right to cancel and waive receipt of these messages, in accordance with the provisions of Title III, Article 22 of Law 34/2002 of Services for the Information Society and Electronic Commerce.

2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

Users, by ticking the corresponding boxes and entering data in the fields of the contact form or submitted in download forms, expressly and freely and unequivocally accept that their data are necessary for the provider to deal with their request, with the inclusion of data in the remaining fields being voluntary.

The user guarantees that the data provided are true, accurate, complete and up to date, and shall be liable for any direct or indirect damage or harm that may be caused as a result of non-compliance with this obligation.

In the event that the user provides data belonging to a third party, he/she guarantees that he/she has informed said third party of all the aspects contained in this Privacy Policy and obtained his/her consent to provide us with his/her data for the purpose of the processing in question. All of this, prior to the provision of data from a third party.

If not all data is provided, there is no guarantee that the information and services provided will be completely tailored to your needs.