Your data, under your control
We process your personal data in accordance with the GDPR (EU 2016/679) and Spanish LOPDGDD 3/2018, solely for the purposes described and for the strictly necessary time.
You can exercise your rights of access, rectification, erasure, objection, restriction and portability at any time by writing to info@hortibloom.eu.
Data controller
The controller of the personal data collected through this website is HortiBloom España. The identifying and contact details are:
- Controller
- HortiBloom España
- Address
- Spain
- Telephone
- +34 633 976 180
- info@hortibloom.eu
- Website
- www.hortibloom.eu
What data we process and why
We only process the data you voluntarily provide through the site's forms and features, for the following purposes:
Contact form: name, email and the content of your message, to handle and reply to your enquiry.
User account: email and access data, to create and manage your account.
Purchases and orders: name, contact details, shipping and billing address, and payment data, to process, ship and invoice your orders.
We do not collect specially protected data nor carry out profiling with legal effects on you.
Legal basis for processing
The legal basis for handling your enquiries and managing your account is your consent, given when you submit the form or register.
The legal basis for processing your orders is the performance of a contract to which you are a party. Retaining invoicing data responds to compliance with legal obligations (tax and accounting).
When we send commercial communications, we do so on the basis of your consent or legitimate interest regarding customers, always with the option to object.
Retention period
We keep your data for as long as the relationship with you continues and you do not request its erasure. Enquiry data is kept for the time necessary to handle it.
Data linked to purchases and invoicing is kept for the periods required by applicable tax and commercial regulations.
Recipients and data processors
We do not disclose your data to third parties except where legally required. To provide the service, we rely on providers acting as data processors that only process the data following our instructions:
Redsys — card payment processing. HortiBloom does not store full card details.
Amazon SES (Amazon Web Services) — sending transactional and management emails.
These providers offer adequate data protection guarantees. If any processing involved an international transfer, it would be carried out with the safeguards provided for in the GDPR.
Your rights
You can exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and data portability, as well as withdraw the consent given, by written communication to info@hortibloom.eu, indicating "Data Protection" in the subject line.
If you believe the processing does not comply with the regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Data security
We apply the technical and organisational measures necessary to guarantee the security of personal data and prevent its alteration, loss, processing or unauthorised access, taking into account the state of technology, the nature of the data and the risks to which it is exposed.