De acuerdo lo dispuesto en el
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, “
GDPR”) and the
Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (“
LOPDGDD”), we hereby inform you of our data protection policy.
1. Data Controller Information.
| Corporate name: |
SEMILLAS FITÓ, SAU |
| Tax ID (NIF): |
A08469215 |
| Postal address: |
c/ Selva de Mar, núm. 111 (08019 Barcelona) |
| Telephone: |
+ 34 933036360 |
| Email: |
info@semillasfito.com |
| Data Protection Officer (DPO) contact details: |
rgpd@semillasfito.com |
2. Purpose, lawfulness and data retention period.
Below you will find a table identifying the purpose of the processing of your personal data, that is, the reason why Semillas Fitó processes your personal data, the legal basis that allows the processing for the indicated purpose and the period of conservation of your data.
| purpose of processing |
legal basis |
retention period |
| Responding to a contact request by a user of the Tomato MonteRosa website. |
Execution of the agreement derived from completing the contact form provided on the Tomato MonteRosa website. |
Until the inquiry submitted has been answered. |
| Managing your registration as a user on the Tomato MonteRosa website. |
Execution of the agreement derived from your registration as a user on the Tomato MonteRosa website. |
Until you express your wish to unsubscribe as a user of the Tomato MonteRosa website. |
| Managing the purchase of products, as well as managing billing and shipping. |
Execution of the contract derived from the purchase of products on the Tomato MonteRosa website. |
Until the end of the contractual relationship between us. |
| Management, where applicable, of your rights as a data subject. |
Compliance with a legal obligation applicable to Semillas Fitó. |
For the time necessary to resolve requests and/or claims. |
In the event that Semillas Fitó processes your personal data for a purpose other than those listed in the table above, Semillas Fitó will inform you prior to the processing regarding its purpose and will provide any other relevant additional information according to applicable legislation, as well as request your consent, if necessary, to justify legitimate processing.
Furthermore, we inform you that, regardless of the aforementioned retention periods, we will store your data during the mandatory statute of limitations periods to comply with our legal obligations and for the management of our rights (to file or defend, if applicable, a claim), also applying the provisions of corporate regulations regarding document archiving and retention periods.
3. Data recipients: assignees and data processors.
We inform you that your data will not be
communicated to third parties, except under legal obligation.
Additionally, we inform you that, in certain cases, we may communicate your data to other entities (including companies within the Fitó Group) in their capacity as data processors for data owned by Semillas Fitó with whom, in accordance with the provisions of Article 28 of the GDPR, a contract has been formalized that legitimizes their access to personal data and includes the obligations to be observed during processing.
International transfers
Semillas Fitó does not carry out international transfers of your personal data.
Notwithstanding the above, access to your data by Data Processors may necessarily involve the international transfer of data which, in any case, will be carried out based on an adequacy decision (a third country that guarantees an adequate level of protection) or through appropriate safeguards (standard data protection clauses, binding corporate rules). This information is available to data subjects, who may request information regarding this by emailing the Data Protection Officer’s contact address.
4. Rights of the data subject.
Below we inform you that, regarding the processing of your personal data,
you have the right:
- To obtain confirmation as to whether or not Semillas Fitó is processing personal data concerning you.
- To request access, rectification of inaccurate or incomplete data and, where applicable, the erasure of your data when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
- Under certain circumstances, you may:
- request the restriction of the processing of your data, in which case we will only keep them for the exercise or defense of claims.
- for reasons related to your particular situation, object to the processing of your data, in which case we will stop processing them, except for compelling legitimate grounds or for the exercise or defense of possible claims.
- To receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and to transmit them to another controller without hindrance from us. In this sense, you may request that we transmit your personal data directly to the controller you indicate in your communication, if technically feasible.
- To withdraw your consent, if you have provided consent for a specific purpose. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
You may
exercise your rights at any time and free of charge by:
- Email to the address rgpd@semillasfito.com, digitally signed (electronic ID or other recognized certificate), or
- Written communication addressed to SEMILLAS FITÓ, SAU, at the address for data protection processing purposes: calle Selva de Mar, núm. 111, 08019 Barcelona (Ref. GDPR).
The content of your request must include: your name and surname; a photocopy of your ID, passport or other valid document that identifies you and, if necessary, the person representing you, as well as the document or electronic instrument accrediting such representation; details of the request being made and supporting documents, if necessary; an address for notification purposes; date and signature of the applicant.
You can obtain additional information by visiting the website of the Spanish Data Protection Agency
https://www.aepd.es/reglamento/derechos/index.html.
Finally, if you consider that the processing of your personal data infringes applicable regulations or if you are simply not satisfied with the exercise of your rights, you have the right to file a complaint with the Spanish Data Protection Agency.
