Privacy policy

1. Who is the data controller?

The data controller and owner of the website https://www.organiccottoncolours.eco/ is ORGANIC COTTON COLOURS SL with registered office at Cl. Teulera 138, 17246 – (Santa Cristina d’Aro) – Girona, and VAT ID B55103915, a commercial company registered in the Mercantile Registry of Girona Volume 3402, Folio 102, S 8, Sheet GI 2554, I/A 36.

ORGANIC COTTON COLOURS has implemented the necessary technical and organizational measures to comply with data protection regulations.

Contact information for data protection matters is as follows:

2. What type of personal data do we process and for what purpose?

1-We may collect and process the following categories of personal data:

a. If you request information: Name, surname, email, and/or mobile phone.

b. If you contact us on behalf of a company: Your contact details, company name, your position, address, phone number, tax ID (NIF), and email address.

c. If you hire our services or make purchases as a company or consumer, any data you provide for these purposes, such as your delivery address, bank or payment details, and contact information. We process this data to fulfill the contract or provide the purchased product.

d. Communication with you: We record your communications with us via email or other means. Phone calls to our customer service may be recorded in our database.

e. Information collected when you use our website and other digital media: When you use our website, we may record your IP address, browser type, operating system, referring website, and web browsing behavior.

2- Your personal data will only be used for the following purposes:

a. Registering you in our database if you hire our services or make a purchase.

b. Carrying out the necessary commercial and administrative procedures with users of our website, customers or potential customers, as well as with our suppliers and employees.

c. Responding to your information requests, providing information about our products and services, managing the sale of our products, purchases from our suppliers, contracting our services, and complying with legal obligations arising from these activities.

d. Sending advertising and marketing communications by email, social media, or any other electronic or physical means, if you have expressly consented to receive such communications electronically. If you are registered in our customer database, we may send you commercial information related to our services without requiring prior consent.

e. Communicating with you to respond to inquiries and process complaints.

f. Contacting you to obtain your opinion on the quality of our services and products or the service received.

g. Recording data during your navigation to provide access to online content on the website, address user requests, and keep a statistical visit log. Temporarily recorded data include: date and time of the request, IP addresses or DNS names of the requesting computers, HTTP response code, browser data, country, and accessed page.

h. Processing customer and supplier data within the contractual relationship for administrative, tax, accounting, and labor obligations required by current legislation.

i. Objection or revocation. You may object to or revoke your consent to receive marketing communications at any time by following the instructions in the relevant marketing communication or by contacting us via email at [email protected] .

j. If you complete our contact form on our website, it is necessary to provide certain personal data, which will be processed to send you a response.

According to the LSSICE, we inform you that ORGANIC COTTON COLOURS does not engage in SPAM practices and will not send commercial emails without the necessary authorization. You can withdraw your consent to receive our communications at any time.

We will not process your personal data for any purpose other than those described in this Policy, except for legal obligations or court orders.

Your personal data will not be subject to decisions based on automated processing that produce legal effects on you.

3. What is the legal basis for processing your data?

The legal basis for processing your personal data is your explicit consent, which will be requested when you ask for information or when you check the corresponding box when providing your data in any of our personal data collection forms.

In the event of a commercial or contractual relationship between you and ORGANIC COTTON COLOURS, whether as a customer, supplier, or employee, the legal basis for processing your personal data will be the execution of the contractual relationship and, if applicable, compliance with the corresponding legal obligations.

If you do not provide your personal data or do not accept our privacy policy, ORGANIC COTTON COLOURS will not process your personal data. However, this may also prevent us from sending you information or providing services or entering into a contractual relationship.

4. Data retention period

How long will we keep your data?

The personal data you provide will be retained for the time necessary to manage the information you request, as well as to manage the purchase of our products or the hiring of services or for the fulfillment of any contract generated between ORGANIC COTTON COLOURS and third parties or to comply with legal obligations.

The personal data of our employees will be kept for the duration of their employment relationship with ORGANIC COTTON COLOURS and subsequently for the legally established periods.

Once the data has fulfilled its purpose, it will be permanently deleted. However, we may retain your data longer if necessary for compliance with legal obligations. Similarly, it may be necessary to keep the data for the time necessary for the prescription of contractual or legal responsibilities that may arise.

5. To whom will your data bé disclosed?

The data you provide will be added to a database owned by ORGANIC COTTON COLOURS. Within our organization, your personal data will be processed by authorized personnel, and, if necessary or practical to achieve the purposes mentioned above, they may be processed, in certain cases, by third parties.

The categories of recipients to whom your personal data may be communicated are as follows:

Third parties appointed as data processors, such as IT providers, consultants, advisors, and other companies.
Entities and authorities, exclusively for the purpose of complying with legal and regulatory obligations.
Other providers to whom, if applicable, your personal data may be transferred to other entities for our normal operation, such as financial institutions, insurers, logistics service providers, among others.

In any case, all of them will have previously signed the corresponding confidentiality agreement in accordance with current data protection regulations or will be subject to the duty of professional secrecy required by sectoral regulations that affect them.

6. What are your rights when you provide us with your data?

If you wish to exercise the rights granted by data protection regulations, please send an email to [email protected], specifying the right you want to exercise and attaching a copy of your national identity card or passport.

The rights you can exercise under current regulations are:

Right of Access to Data:

You have the right for the data controller to inform you whether your personal data is being processed, and if the processing is confirmed, it will enable your access by providing the following information:

The purposes of the processing.
The categories of data involved.
The period or criteria for data retention.

Right to Rectify Data:

You have the right to request the correction of your data when it is inaccurate or incomplete through an additional rectification statement.

Right to Erasure of Data:

You have the right to request the erasure of your data when:

The processing is unlawful.
You have withdrawn your consent.
It is no longer necessary for the purposes for which it was collected or processed.
You have exercised the right to object, and there are no prevailing legitimate grounds for the processing.
It must be deleted to comply with a
legal obligation.

The data subject shall not have the right for the data controller to delete their data when processing is necessary:

To exercise the right to freedom of expression and information.
To fulfill a legal obligation of the data controller.
For the formulation, exercise, or defense of legal claims.
For public interest based on current legislation for reasons of public health or for purposes of historical, statistical, or scientific research.

Right to Data Portability:

You have the right for the Data Controller to transmit your data to another Data Controller or to the data subject themselves, in a commonly used and machine-readable format, when the processing is carried out by automated means and is based on:

The data subject’s consent for specific purposes.
The execution of a contract or pre-contract with the data subject.

The right to data portability does not apply when:

Transmission is technically impossible.
It may adversely affect the rights and freedoms of others.
The processing has a mission of public interest based on current legislation.

Right to Restriction of Processing:

The data subject shall have the right to object to the processing of their data carried out by the Data Controller on grounds relating to their particular situation, when the processing is based on:

Direct marketing.
Profiling.
Legitimate interests pursued by the Controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject do not override, especially if the data subject is a child.
Historical, statistical, or scientific research, unless the processing is necessary for reasons of public interest.

Even if the data subject objects to the processing of their data, the Controller may continue processing them, as long as the legitimate interests of the Controller prevail over the interests or rights and freedoms of the data subject in a justified legal proceeding. The Controller must inform the data subject of the right to object to the processing of their data explicitly, clearly, and separately from any other information, at the time of the first communication.

Right to Object:

You have the right to object to the processing of your data or to cease processing when it is not necessary for the processing and there is a legitimate and founded reason based on your specific personal situation, unless the law provides otherwise.

Right to Not be Subject to Profiling:

The data subject shall have the right not to be subject to a profiling process whose purpose is to make individual decisions based on automated data processing, aimed at evaluating, analyzing, or predicting the following personal aspects:

Professional performance.
Economic situation.
Health.
Personal preferences or interests.
Reliability.
Behavior.
Location or movements of the individual.

When profiling is based solely on automated processing:

The data subject shall have the right to be informed if the decision that may be made could have significant legal effects on them.
The data subject shall have the right to obtain human intervention from the Controller, to express their point of view, and to contest the decision, if the processing has been authorized by:
The explicit consent of the data subject.
A contract between the Controller and the data subject.

The right not to be subject to profiling shall not apply when the decision that may be made as a result of it is authorized by:

The explicit consent of the data subject.
A contract between the Controller and the data subject.
Processing based on current legislation.

7. Claim to the supervisory authority

In the event that you believe that ORGANIC COTTON COLOURS has violated any of your rights protected by personal data protection regulations or has breached any obligations regarding the protection of Personal Data, you have the right to file a complaint with the competent supervisory authority, which in Spain is the Spanish Data Protection Agency located at Calle Jorge Juan, 6, 28001 – Madrid. Tel. 901 100 099 – 912 663 517.

You can also submit an electronic complaint through the electronic headquarters available on their website https://www.aepd.es/

8. Legislation and jurisdiction

This privacy policy is governed in all its aspects by Regulation (EU) 2016/679 of the European Parliament and of the Council, dated April 27, 2016, regarding the protection of individuals concerning the processing of personal data and the free movement of such data.

It is also governed by Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights. Additionally, our website is subject to Law 34/2002, of July 11, on information society services and electronic commerce.

Any dispute arising from matters related to this website will be exclusively subject to the jurisdiction of the courts of the city of Barcelona.

9. Additional information

Security measures

The data you provide to us will be treated confidentially. ORGANIC COTTON COLOURS has implemented all necessary technical and organizational measures and protection levels to ensure the security of data processing and to prevent its alteration, loss, theft, unauthorized processing, or access, in accordance with the state of technology and the nature of the stored data. Likewise, it is also guaranteed that the processing and recording in files, programs, systems, or equipment, locations, and centers comply with the requirements and conditions of integrity and security established by current regulations.

Social media (privacy policy):

We inform you that ORGANIC COTTON COLOURS may have a presence on social media. The processing of data from individuals who become followers on social media (and/or perform any link or connection action through social media) of the official pages of ORGANIC COTTON COLOURS will be governed by this section, as well as by the terms of use, privacy policies, and access regulations belonging to the respective social network, which have been previously accepted by the user. ORGANIC COTTON COLOURS will process your data for the purpose of correctly managing its presence on social media, informing you about activities, products, or services of the provider, as well as for any other purpose that social media regulations allow.

The publication of content is prohibited that:

Is allegedly illegal under national, community, or international regulations, or engages in allegedly illegal activities or contravenes the principles of good faith.

Attacks fundamental rights of individuals, lacks courtesy on the network, bothers or may generate negative opinions among our users or third parties, and, in general, any content that ORGANIC COTTON COLOURS considers inappropriate.

And, in general, contravenes the principles of legality, honesty, responsibility, protection of human dignity, protection of minors, protection of public order, protection of privacy, protection of consumers, and the rights of intellectual and industrial property.

ORGANIC COTTON COLOURS also reserves the right to remove, without prior notice, from the website or corporate social network those contents that are considered inappropriate.

Communications sent through social networks will be incorporated into a file owned by ORGANIC COTTON COLOURS, and you may receive information of interest.

You can access more information, as well as check the companies that are part of our group, in this privacy policy.

In any case, if you send personal information through social media, ORGANIC COTTON COLOURS will be exempt from responsibility regarding the security measures applicable to this platform. In case you want to know them, you should consult the corresponding specific conditions of the relevant social network.

Language:

The applicable language for this Privacy Policy is Spanish. Therefore, in the event of any contradiction in any of the versions provided in other languages, the Spanish version will prevail.

10. Update

This Privacy Policy was last updated in December 2023 but may be updated at any time. We recommend checking it each time you access our website in case there have been any changes.