PRIVACY POLICY

PRIVACY POLICY

1 – WHO IS RESPONSIBLE FOR THE TREATMENT OF YOUR DATA?

The data controller and owner of the trademark and of the website https://budlifecbd.com is Jordi Ferrer 1960, SL, a commercial company with registered office at Plaça Mestre Serrat 11 Baixos 08225 Terrassa, with NIF: B62568027 and registered in the Mercantile Registry of Barcelona – Section 8 – Page 234096 (here in after Bud Life)

Bud Life’s address is at:

c / Colom, 586 Nave 17 – 08228 Terrassa, Barcelona

T. +34 610 992 296
info@budlifecbd.com

2- FOR WHAT PURPOSE DO WE TREAT YOUR PERSONAL DATA?

At Bud Life we ​​treat the personal data you provide us with in order to respond to the request for information that you send us, provide you with information about our products, manage internally and externally the online orders you make to us, as well as comply with the obligations legal issues arising from such activities.

The data collected during your browsing is processed with the aim of providing access to the online content of the web, as well as responding to the requests of web users, keeping a statistical record of visits (IP addresses, browser data, country , page accessed, etc.) for statistical purposes or to apply measures aimed at improving the security of the web.

 

3- WHAT IS THE LEGITIMATION FOR THE PROCESSING OF YOUR DATA?

The legal basis for the processing of your personal data is your express consent when providing them to request information, or the execution of the contract that is generated when you contract any of our products. The legitimacy for the treatment of the personal data of our suppliers is based on the contractual relationship that is generated when we contract with them. The legal basis that legitimizes the processing of the personal data of our workers is based on the employment relationship that unites us.

 

4- CONSERVATION PERIOD How long will we keep your data?

The personal data that you provide us will be kept for the time necessary to manage the information you request, as well as to manage the purchases you make of our products or, for the fulfillment of any contract that is generated between JORDI FERRER 1960, SL and third parties or, the fulfillment of the legal obligations that affect us.

Once the data has met the needs for which it was collected, we will delete it permanently. However, we will keep your data for longer if it is necessary to comply with legal obligations. Likewise, it may be necessary to keep them for the time necessary for the prescription of the contractual or legal responsibilities that are generated.

 

5- TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?

Within our organization your personal data will be processed by duly authorized personnel, and, if necessary or practical to fulfill the purposes indicated above, they may be processed, in certain cases, by third parties.

The categories of recipients to whom your Personal Data may be communicated are the following:

to. Named third parties in charge of the treatment, such as IT providers, consultants and advisors and other companies.

b. entities and authorities, including, exclusively in order to comply with legal and regulatory obligations, as well as the requirements of the police authorities at their request.

c. other providers to whom, where appropriate, your personal data may be transferred to other entities, for our normal operation such as financial institutions, insurance companies, logistics service providers, among others.

In any case, all of them will have previously signed the corresponding confidentiality commitment in accordance with current personal data protection regulations or will be subject to the duty of professional secrecy required by the sectoral regulations that affect them.

 

6- WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE US WITH YOUR DATA?

If you wish to exercise the rights that the data protection regulations grant you, please send us an email to the following address info@budlifecbd.com putting in the subject the right you want to exercise and attaching a copy of your national identity document or passport or by sending the same content by post to JORDI FERRER 1960, SL c / Colom, 586 Nave 17 08228 Terrassa, Barcelona.

The Rights that current regulations recognize and that, where appropriate, you can exercise are:

Right of access to data:

You have the right for the Data Controller to inform you whether or not your personal data is being processed, and if the treatment is confirmed, it will enable your access by providing the following information:

-The purposes of the treatment.
-The categories of data in question.
-The term or criteria for data conservation.

Right of data rectification:

You will have the right for the Data Controller to rectify your data when they are inaccurate or incomplete by means of an additional rectifying statement.

Right to Delete the data:
The interested party will have the right for the Data Controller to delete their data, when:
-The treatment is illegal.
-The interested party has withdrawn their consent.
-They are no longer necessary in relation to the purposes for which they were collected or processed.
-The interested party has exercised the right of opposition and other legitimate reasons for the treatment do not prevail.
-The data must be deleted to fulfill a legal obligation of the Data Controller.

The interested party will not have the right for the Data Controller to delete their data when the treatment is necessary:

-To exercise the right to freedom of expression and information.
-To comply with a legal obligation of the Data Controller.
-For the formulation, exercise or defense of claims.
-For public interest based on current legislation for reasons of public health or for historical, statistical or scientific research purposes.

Right of data portability:

You have the right for the Data Controller to transmit your data to another Data Controller or to the same interested party, through a structured format of regular use and mechanical reading, when the treatment is carried out by automated means and is based on:

-The consent of the interested party for specific purposes.
-The execution of a contract or pre-contract with the interested party.

The right to data portability will not apply when:

-The transmission is technically impossible.
-It may negatively affect the rights and freedoms of third parties.
-The treatment has a mission of public interest based on current legislation.

Right of limitation of treatment:

The interested party will have the right to oppose the processing of their data carried out by the Data Controller for reasons related to their particular situation, when the treatment is based on:

-Direct marketing.
-Profile development.
-Legitimate interest of the Responsible or third parties, provided that the interests or rights and freedoms of the interested party do not prevail, especially if it is a child.
-Historical, statistical or scientific research, unless the treatment is necessary for reasons of public interest.

Even if the interested party opposes the processing of their data, the Responsible may continue to process them as long as the legitimate interest of the Responsible prevails over the interests or rights and freedoms of the interested party in a judicial procedure that justifies it.
The Responsible Party must inform the interested party of the right to object to the processing of their data explicitly, clearly and separately from any other information, at the time of the first communication.

Right of opposition:

It is the right not to carry out their treatment or to cease it when their consent for the treatment is not necessary, due to the concurrence of a legitimate and well-founded reason, referred to their specific personal situation, that justifies it. , and provided that a Law does not provide otherwise.

Right not to be the subject of profiling:

The interested party will have the right not to be the object of profiling whose purpose is to adopt individual decisions based on automated data processing and aimed at evaluating, analyzing or predicting the following personal aspects:

-Professional performance.
-Economic situation.
-Health.
-Personal preferences or interests.
-Reliability.
-Behaviour.
-Location or movements of the person.

When profiling is based solely on automated processing:

-The interested party will have the right to be informed if the decision that may be taken may produce legal effects that significantly affect them.
-The interested party will have the right to obtain human intervention from the Responsible Party, to express their point of view and to challenge the decision, if the treatment has been authorized by:
-The explicit consent of the interested party.
-A contract between the Responsible and the interested party.

It will not apply to the right not to be the object of profiling when the decision that may be taken as a result of it is authorized by:

-The explicit consent of the interested party.
-A contract between the Responsible and the interested party.
-A treatment based on current legislation.

 

7-CLAIM BEFORE THE CONTROL AUTHORITY:

In the event that you consider that Bud Life has violated any of your rights protected by the personal data protection regulations or that it has violated any obligation regarding the protection of Personal Data, you have the right to file a claim with the supervisory authority competent authority that in Spain is the Spanish Data Protection Agency located at Calle Jorge Juan, 6. 28001 – Madrid. Tel. 901 100 099 – 912 663 517

You can also file an electronic claim through the electronic headquarters that is available on its website https://www.aepd.es/

 

8-LEGISLATION AND JURISDICTION

This privacy policy is governed in each and every one of its extremes by Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons with regard to to the processing of personal data and the free circulation of these data.
It is also governed by Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights. Likewise, our website is governed by Law 34/2002, of July 11, on information society services and electronic commerce.

Any dispute that arises from matters related to this website will be subject exclusively to the jurisdiction of the courts of the city of Barcelona.

 

9-UPDATE

This Privacy Policy was last updated in September 2020 but may be updated at any time. We recommend that you consult it each time you access our page in case it has been altered.