Privacy policy
1. DATA CONTROLLER
Company name: SAGRADA MADRE NATURAL INCENSE S.L.U. (hereinafter, the “Company” or the “Controller”).
Registered office: Plaza Vicente Iborra 8 Esc B Pta 10, CP 46003 Valencia, Spain
Tax ID (CIF): B09821570
Phone: +34 962 070 469
E-mail for data protection matters: serviceclient@sagradamadre.com
1.1. Applicable law
Our Privacy Policy has been drafted in accordance with EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and Organic Law 3/2018 of 5 December on Personal Data Protection and guarantee of digital rights.
By providing your data, you declare that you have read and understood this Privacy Policy and give your clear and express consent to the processing of your personal data in accordance with the purposes and terms set out herein.
The Company may amend this Privacy Policy to reflect legislative or case-law developments or guidance from the Spanish Data Protection Agency (AEPD). These privacy terms may be supplemented by the Legal Notice, Cookie Policy and General Terms that may apply to certain products or services where access involves specific personal data processing requirements.
1.2. Data Protection Officer
The company does not have a Data Protection Officer.
2. PURPOSES OF PROCESSING
We process your personal data for the following purposes:
- To provide information relating to the products and services offered by our company as described on this website.
- To perform the contracting of our services by accepting the relevant quotation / order and/or signing a commercial contract.
- To send you news and updates about our organisation by e-mail and/or post, as well as updates to our product and service catalogue.
2.1. Retention period
We will retain your personal data from the time you give your consent until you withdraw it or request restriction of processing. Where applicable, we will keep your data in a blocked form for the periods required by law.
3. LAWFUL BASIS AND DATA COLLECTED
The lawful basis for processing your data is the express consent given by a clear affirmative action (completing the relevant form and ticking the box accepting this policy) when you provide your personal data.
3.1. Consent to processing
By completing the forms, ticking “I accept the Privacy Policy” and submitting the data, or by sending e-mails to the Company through the accounts provided for that purpose, you confirm that you have read and expressly accepted this privacy policy and give your clear and express consent to the processing of your personal data for the stated purposes.
3.2. Categories of data
The data collected are identification data, such as: first name and surname, phone, postal address, company, e-mail address, and the IP address from which you access the data collection form.
4. SECURITY MEASURES
As part of our commitment to ensure the security and confidentiality of your personal data, we inform you that technical and organisational measures have been implemented as required to ensure the security of personal data and prevent alteration, loss, unauthorised processing or access, taking into account the state of the art, the nature of the stored data and the risks to which they are exposed, in accordance with Article 32 of GDPR (EU) 2016/679.
5. DISCLOSURE OF DATA
No disclosure of data or international transfers of your data are envisaged, except where authorised by tax, commercial and telecommunications legislation or where required by a judicial authority.
6. YOUR RIGHTS
Any data subject has the right to obtain confirmation as to whether or not we are processing personal data concerning them. Data subjects have the right to access their personal data and to request the rectification of inaccurate data or, where appropriate, erasure when, among other grounds, the data are no longer necessary for the purposes for which they were collected. In certain circumstances, data subjects may request restriction of processing, in which case we will only retain the data for the establishment, exercise or defence of legal claims. For reasons relating to their particular situation, data subjects may object to processing. The Controller will no longer process the data unless there are compelling legitimate grounds, or for the establishment, exercise or defence of legal claims.
Under applicable law you have the following rights: to request access to your personal data, to request rectification or erasure, to request restriction of processing, to object to processing, to data portability and to withdraw consent where given.
6.1. How to exercise your rights
To exercise your rights, please contact the controller and request the relevant form for the right you wish to exercise. You may also contact the competent supervisory authority for further information about your rights. Contact details for exercising your rights: phone +34 962 070 469 and e-mail: serviceclient@sagradamadre.com. Please attach a copy of a document that allows us to verify your identity.
7. CONSENT TO ELECTRONIC COMMUNICATIONS
Furthermore, in accordance with Law 34/2002 of 11 July on information society services and electronic commerce, by completing the data collection form and ticking “I agree to receive electronic communications”, you expressly consent to receiving information about the Company at your e-mail address, phone, fax or other electronic means.