I. PRIVACY AND DATA PROTECTION POLICY
In compliance with applicable legislation, Kumbrex, sports supplements, owned by Grow in Health S.L.U. (hereinafter also the Website), undertakes to adopt the necessary technical and organizational measures, appropriate to the level of security corresponding to the risk associated with the collected data.
Laws incorporated into this privacy policy
This privacy policy has been adapted to current Spanish and European legislation on personal data protection on the internet. Specifically, it complies with the following regulations:
Identity of the data controller
The data controller responsible for the processing of personal data collected on kumbrex.com, sports supplements, is:
Kumbrex SLU, with Tax ID (NIF/CIF) B-88048368, registered in the Central Commercial Registry with the following registration details: Sheet M-850378 IRUS: 1000447163062, electronic filing folio registration 1, represented by Aker Prevención de Riesgos Laborales, SL (hereinafter, the Data Controller).
Contact details:
Address: Hermosilla 64, 7ºB
Telephone: 914 464 968
Email: adegaray@akerprevencion
Personal data registration
In compliance with the provisions of the GDPR and LOPD-GDD, we inform you that personal data collected by Kumbrex, sports supplements, through the forms available on its pages will be incorporated and processed in our database for the purpose of facilitating, managing, and fulfilling the commitments established between Kumbrex, sports supplements, and the User, or maintaining the relationship established through the forms completed by the User, or to respond to requests or inquiries.
Likewise, in accordance with the GDPR and LOPD-GDD, unless the exception in Article 30.5 GDPR applies, a record of processing activities is maintained, specifying, according to their purposes, the processing activities carried out and other circumstances established in the GDPR.
Principles applicable to data processing
The processing of the User’s personal data shall be subject to the following principles established in Article 5 of the GDPR and Articles 4 et seq. of Organic Law 3/2018:
Categories of personal data
Only identifying data are processed. In no case are special categories of personal data processed as defined in Article 9 GDPR.
Legal basis for processing
The legal basis for processing personal data is consent. Kumbrex undertakes to obtain explicit and verifiable consent from the User for the processing of their personal data for one or more specific purposes.
The User has the right to withdraw consent at any time. Withdrawal shall be as easy as granting it and shall not condition the use of the Website, unless otherwise stated.
Purposes of processing
Personal data are collected and managed for the purpose of facilitating, managing, and fulfilling the commitments between the Website and the User, or for handling requests or inquiries.
Data may also be used for commercial personalization, operational and statistical purposes, marketing analysis, and to improve the quality, functionality, and navigation of the Website.
Data retention period
Personal data will be retained only for the minimum period necessary for the purposes of processing, and in any case for a maximum of 24 months, or until deletion is requested by the User.
Data recipients
Personal data will not be shared with third parties. If this changes, the User will be informed accordingly.
Data of minors
Only persons over 14 years of age may provide consent. For minors under 14, consent from parents or guardians is required.
Confidentiality and security of data
Kumbrex undertakes to implement appropriate technical and organizational measures to ensure data security, including SSL encryption.
However, absolute security on the internet cannot be guaranteed. In the event of a personal data breach likely to result in high risk, the User will be informed without undue delay.
All data are treated as confidential and access is restricted under legal or contractual obligations.
Rights of the User
The User has the following rights under the GDPR and LOPD-GDD:
Confidentiality and security of data
Kumbrex undertakes to implement appropriate technical and organizational measures to ensure data security, including SSL encryption.
However, absolute security on the internet cannot be guaranteed. In the event of a personal data breach likely to result in high risk, the User will be informed without undue delay.
All data are treated as confidential and access is restricted under legal or contractual obligations.
Rights of the User
The User has the following rights under the GDPR and LOPD-GDD:
- ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY
The User must read and accept this Privacy Policy in order for the Controller to process personal data as described herein.
Kumbrex reserves the right to modify this Policy due to legal, jurisprudential, or regulatory changes. Users are advised to review this page periodically.
This Privacy Policy was updated to comply with GDPR and LOPD-GDD.