PRIVACY POLICY
1. USER INFORMATION
VitaTienda Europa Co S.L is responsible for the processing of the User's personal data and informs you that this data will be processed in accordance with the General Data Protection Regulation (EU) 2016/679 of April 27, 2016 (GDPR) and the Organic Law 3/2018 of December 5th (LOPDGDD), providing the following information about the processing:
Purposes of processing:
- Manage requests for information or inquiries made by the user.
- Process user registration for product acquisition, including details of what this registration entails.
- Send newsletters about new developments and promotions, only with the user’s consent.
- Moderation of comments and opinions on the platform.
- Inform about workshops and training that may be of interest to the user.
Legitimation:
This processing is based on the fulfillment of a contract and/or existing business relationship and the explicit consent provided by you when using our services and ticking the consent boxes on forms.
The personal data requested at the time of registration on this website are strictly necessary to formalize and manage the relationship with you, so if not provided, we cannot maintain such a relationship. However, this main purpose is not subject to the consent for the processing of data that are not necessary for this main activity.
Data conservation criteria:
Your data will be retained as long as there is a mutual interest to achieve the purpose of processing. When the data is no longer necessary for that purpose, it will be deleted with security measures to guarantee the anonymization or total destruction of the data.
Data communication:
In some cases, it is necessary for third parties to access the information you have provided us to be able to offer you the requested service, for example, logistics, transportation, and delivery services, and other types of services such as information technology (data storage and processing, etc.)
These third parties only have access to the personal information they need to carry out such services. They are required to keep your personal information confidential and may not use it in any other way than what we have requested.
The data of interested parties will not be communicated to any third party, except for a legal obligation.
Rights of the User:
- Right to withdraw consent at any time. Right to object and to the portability of personal data. The right is established for the data subject to receive all personal data concerning him or her that he or she has provided to a controller, provided the processing is based on consent or is necessary for the execution of a contract and is carried out by automated means.
- Right of access: The data subject shall have the right to request and obtain free information about his or her personal data undergoing processing, the origin of this data, as well as the communications made or planned to be made of them. When the data subject makes the request by electronic means, and unless he or she requests it to be provided otherwise, the information shall be provided in a commonly used electronic format. The right to obtain a copy shall not adversely affect the rights and freedoms of others.
- Right of rectification and erasure: the controller shall have the obligation to make effective the right of rectification or erasure of the data subject within ten days. Personal data whose processing does not comply with the provisions of the law, and in particular, when such data are inaccurate or incomplete, shall be rectified or erased as appropriate. The data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
- Right to restriction of processing: the data subject shall have the right to obtain from the controller restriction of processing of the data. When processing of personal data has been restricted, they may only be processed for their conservation, with the consent of the data subject, for the establishment, exercise or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest. Any data subject who has obtained restriction of processing shall be informed by the controller before the restriction is lifted.
- Right to object: the data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to processing of personal data concerning him or her (public interest and legitimate interest), including profiling based on those provisions. VitaTienda Europa Co S.L will cease to process personal data, unless it demonstrates compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or for the establishment, exercise or defense of legal claims.
Sending communications or information:
Our policy regarding the sending of information through electronic means (email, instant messaging, etc.) is limited to sending only communications that we consider of interest to our users and interested parties, in relation to the functions and activity of the company, or that you have consented to receive.
If you prefer not to receive these messages, we will offer you through these the possibility to exercise your right of cancellation and renunciation to the reception of these messages, in conformity with the provisions of Title III, article 22 of Law 34/2002 of Services of the Information Society and Electronic Commerce.
2. FORMS:
Contact:
- Purpose of processing: Respond to inquiries about our services.
- Legitimation: Based on your explicit consent.
- Data conservation criteria: Retained as long as necessary to fulfill the purpose of processing.
Registration:
- Purpose of processing: We collect this data so that you can make your purchases and thus manage the commercial relationship, manage your requests and/or orders and their payment, and also carry out procedures for advertising and commercial prospecting purposes.
- Data conservation criteria: They will be retained as long as there is a relationship with you either due to the products sold, the services offered, or the existence of some legal obligation.
- Legitimation: It is based on the consent requested through the corresponding acceptance box. In relation to the purchase, the legitimation will be based on the contract.
- Recipients: Your basic data will be transferred to the payment processing company and to the transport company to carry out the delivery of the order. All of them have regulated with us access to these data for the purpose exclusively described here. No other third parties will process your data, except for legal obligations.
Newsletter:
- Purpose of processing: Subscription to news about the products or services described on our portal.
- Data conservation criteria: They will be retained as long as there is a mutual interest to maintain the purpose of processing and when no longer necessary for that purpose, they will be deleted with adequate security measures to guarantee the pseudonymization of the data or their total destruction.
- Legitimation: By clicking the acceptance box, you are giving your consent for your data to be processed in accordance with the purposes of this form described in the privacy policy.
- Communication of the data: The data will not be communicated to third parties, except for a legal obligation.
3. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED
Users, by marking the corresponding checkboxes and entering data in the fields of the contact form or presented in download forms, expressly and freely and unequivocally accept that their data are necessary to attend their request by the provider, being voluntary the inclusion of data in the remaining fields.
The user guarantees that the data provided are true, accurate, complete, and up-to-date, being responsible for any damage or harm, direct or indirect, that could be caused as a result of non-compliance with such obligation.
In case the user provides data belonging to a third party, he or she guarantees that he or she has informed the third party of all the aspects contained in this Privacy Policy and obtained their consent to provide us their data for the purpose of processing in question.
All of this, prior to the provision of third-party data. If not all the data is provided, it is not guaranteed that the information and services provided will be completely tailored to your needs.