Data Controller
The company responsible for processing your data under this Privacy Policy is:
URBIDERMIS, S.L.
Tax Identification Number (NIF): B66435017
Address: Carretera C-251, Km. 5.6 – 08430 La Roca del Vallès (Barcelona), Spain
Email address: gdpr@urbidermis.com
Website: urbidermis.com / urbidermis.com/about-belloch-forestal-nursery
Telephone: +34 938462437
Registered in the Commercial Registry of Barcelona, Volume 44661, Folio 180, Sheet B-462777, 1st Entry.
At URBIDERMIS, S.L., we recognise the importance of protecting your personal information and are committed to processing it responsibly and in accordance with data protection laws.
This Privacy Policy is intended to regulate all aspects relating to the processing of data of the different users who browse the website or provide their personal data through the various forms available on the website.
Personal Data
Personal data is information that identifies you or makes you identifiable. Through the website, in the designated fields, we collect the personal data that the user provides to us: name, surname(s), email address, telephone number, postal address, town/city, etc., as well as any data voluntarily provided through any social networks in which the user is registered. In this case, privacy will depend on the settings configured by the user as well as on the terms and conditions of the relevant social network.
Visiting the website does not require the user to provide any personal data. However, should such data be provided, they will be processed lawfully and always subject to the principles and rights set out in Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
Purpose, Duration and Legal Basis for Processing
The data provided by the user will be processed for the following purposes:
- To respond to requests or enquiries made by the user through the contact form available on the website.
We collect and process the user’s personal data in order to handle and manage their request, enquiry or any other matter submitted through the form. These data will be retained for the time necessary to fulfil the request and for the legally established period, with a minimum retention period of 3 years.
The legal basis for processing the data is the consent granted by the user by ticking the acceptance box for our Privacy Policy before submitting the request. The user has the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.
- To improve your browsing experience on the website. These data will be retained until the user withdraws consent to their processing by deleting the cookies, and for the legally established period, with a minimum retention period of 3 years.
The legal basis for improving your browsing experience on the website is the consent granted by the user when accepting cookies. The user has the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.
- To manage our social media accounts and send you information about our activities and products. These data will be retained until the user withdraws consent to their processing and for the legally established period, with a minimum retention period of 3 years.
The legal basis for managing our social media accounts and sending information about our activities and updates is the consent granted by the user for this purpose. The user has the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.
- To register and manage an account as a “member of the URBIDERMIS Community” through the form available on the website, enabling the user to access their private service area and receive information about our activities, including commercial communications by any electronic means regarding updates to our services. These data will be retained until the user requests deregistration and for the legally established period, with a minimum retention period of 3 years.
The legal basis for processing the data is the consent granted by the user when registering through the registration form and ticking the acceptance box for our Privacy Policy before submitting the application. The user has the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.
- To send communications, bulletins or newsletters regarding URBIDERMIS, S.L. products. With the user’s consent, we collect and process personal data in order to send information about our products and services. These data will be retained until the user withdraws consent to their processing and for the legally established period, with a minimum retention period of 3 years.
The legal basis for processing the data is the consent granted by the user by ticking the acceptance box for our Privacy Policy before subscribing to the newsletter through the form provided for this purpose on the website. The user has the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.
- To manage communications submitted through the whistleblowing channel implemented by the Controller.
We will process personal data (where the communication is not anonymous) and the information provided by the data subject for the purpose of managing and resolving the report submitted through the channel accessible via the website.
The legal basis for this processing is the performance of a task carried out in the public interest, as well as compliance with a legal obligation. The data will only be retained for the time strictly necessary to determine whether an investigation into the reported facts should be initiated. In any case, after three months from the submission of the data, if the report has not proceeded, the data may only be retained in anonymised form for the purpose of evidencing the functioning of the system. If the report proceeds, the data will be deleted and blocked within the internal reporting system and retained for a period not exceeding ten years. The data may continue to be processed by the competent authority or body in the event of an investigation into the reported facts.
Personal data will only be disclosed to third parties where necessary for the adoption of disciplinary measures or for the processing of any legal proceedings that may arise, without prejudice to notifying the competent authority of facts constituting a criminal or administrative offence.
- To carry out security checks in order to distinguish between human users and bots and thereby prevent fraud. This processing is carried out through the use of a Cloudflare Turnstile. These data will be retained for as long as they are necessary for the purpose or until the user changes their IP address or browser, or deletes the associated cookies.
The legal basis for this processing is the legitimate interest of the Data Controller in ensuring the security of systems, preventing fraudulent access and protecting services against abusive use.
Disclosure or Communication of Personal Data and International Transfers
Your data will not be disclosed or transferred to third parties unless there is a legal obligation to do so or where service providers linked to the Controller act as data processors.
Our servers are located within the European Union and, as a general rule, we engage service providers that are also located within the European Economic Area or in countries recognised as providing an adequate level of data protection.
If we need to use external service providers requiring the transfer of personal data outside the European Union or to countries not recognised as providing an adequate level of protection, we will ensure the security and lawfulness of the processing of your data by means of adequacy decisions, standard contractual clauses, binding corporate rules, exceptions or any other instrument approved by the supervisory authority that provides adequate safeguards for international data transfers.
Updating of Data
In order for us to keep personal data up to date, it is important that the user informs us whenever there has been any modification to their data; otherwise, we cannot be held responsible for their accuracy.
The user guarantees that the personal data provided are truthful and that all information supplied corresponds to their real situation, is up to date and accurate, and undertakes to communicate any modifications.
Third-Party Data
If the user provides third-party data to URBIDERMIS, S.L. for any purpose, the user guarantees that such data have been obtained lawfully, that the affected persons have been informed in advance and that their consent to communicate the data has been obtained, and that the information provided is accurate and truthful.
Mandatory Nature of the Information Requested
All our forms identify mandatory fields with an asterisk (*). If the user does not complete these fields or does not tick the acceptance box for the Privacy Policy, the information cannot be submitted.
Use of Passwords
In order to access the Private Area, the USER must “Log In” and enter the email address and password generated through the registration form, in accordance with the complexity rules established at any given time on the website.
Users are responsible for the proper safekeeping and confidentiality of any identifiers and/or passwords selected during registration and undertake not to transfer their use to third parties or allow access to unauthorised persons.
Likewise, users are obliged to notify the Controller immediately of any event that may allow the improper use of identifiers and/or passwords, such as theft, loss or unauthorised access, in order for their immediate cancellation to proceed.
Rights of Data Subjects
You have the right to access your data and obtain confirmation as to whether they are being processed, as well as a copy of the personal data undergoing processing. You have the right to update your data and request the rectification of inaccurate data or request erasure where the data are no longer necessary for the purposes for which they were collected. You may request restriction of the processing of your data and object to their processing by withdrawing your consent, as well as exercise your right to data portability. Likewise, you have the right not to be subject to decisions based solely on the automated processing of your personal data. You may exercise your rights by contacting us at gdpr@urbidermis.com.
If you believe that your rights have not been properly addressed, you have the right to lodge a complaint with the supervisory authority at www.aepd.es.
Processing of Data of Minors
Any person providing data through the forms on this website and consenting to their processing declares that they are over 14 years of age. Access to and use of the portal by persons under this age is prohibited. Should the Controller detect at any time that a minor under the age of 14 has provided personal data, such data will be deleted. Likewise, parents or guardians may at any time contact URBIDERMIS, S.L. in order to block the access account of minors in their care who may have registered using false identity details.
Social Media
The purpose of platforms such as Facebook, Twitter, Instagram, etc., and other social networks is to provide visibility and dissemination for the activities carried out by our organisation. These platforms store personal data on the servers of the respective services and are governed by their own privacy policies. Users are advised to review and read the terms of use and privacy policy of the relevant social network upon registration, taking into account the various configuration options relating to the privacy settings of the user profile on the social network.
Likewise, the Controller reserves the right to remove from its social media any information published by third parties that violates the law, encourages unlawful conduct or contains messages that infringe upon the dignity of individuals or institutions. The Controller also reserves the right to block or report the profile responsible for such messages.
Processing of Cookies
A cookie is a small file that is downloaded and stored on the user’s computer when accessing a website. Cookies enable the website, among other things, to store and retrieve information about the browsing habits of the user or their device and, depending on the information they contain and how the device is used, may be used to recognise the user.
Users have the option to prevent the generation of cookies by selecting the corresponding option in their browser settings. Further information can be obtained by reading our Cookies Policy.