LEGAL NOTICE

Identity of the responsible party: Alimentación Natural Naturfood SLAddress: Avenida Andalucía, 14 (Pedro Muñoz, Ciudad Real).Spain. Data Protection Officer: sac@alimentacion-naturfood.comTelephone: +34 620 58 33 64

We collect personal data that you provide directly to us or that is generated through your use of our services. The types of data we may collect include:Identifying information: Name, surname, email address, telephone number, postal address, identity document (if necessary to comply with legal obligations).Contact information: Email address, phone number, postal address.Financial data: Payment information (such as credit card numbers or bank details) to process transactions, where applicable.Usage data: Information about how you interact with our services, such as pages visited, browsing time, clicks, preferences, and technical data such as IP address, device type, operating system, and browser used.Data collected automatically: Cookies, tracking pixels, and other similar technologies that collect information about your browsing (see our Cookie Policy for more details).Sensitive data: If we collect sensitive data (e.g., health data, political opinions, religious beliefs), we will only do so with your explicit consent and when strictly necessary.We do not collect personal data from minors without the verifiable consent of their parents or legal guardians, in compliance with Article 8 of the GDPR.

We use your personal data for the followeing purposes:Provision of services: To manage your account, process orders, provide customer support and personalize your experience with our services.Compliance with legal obligations: To comply with legal, tax, or regulatory requirements, such as invoicing and fraud prevention.Communications: To send you information about our products, services, promotions, or updates, provided that you have given your consent or there is a legitimate interest.Service improvement: To analyze how our services are used in order to optimize their performance, fix errors, and improve the user experience.Security: To protect our services and users against unauthorized acces, fraud, or any unlawful activity.Marketing and advertising: To send you personalized commercial communications, provided that you have given your consent, or to conduct market research.

The processing of your personal data is based on one or more of the following legal bases, as established in the GDPR:Consent (Art. 6.1.a GDPR): When you give us your explicit permission to process your data, for example, by subscribing to our newsletter or accepting non-essential cookies.Performance of a contract (Art. 6.1.b GDPR): When processing is necessary to fulfill a contract, such as the provision of a service or the delivery of a product.Legal obligation (Art. 6.1.c GDPR): When we must comply with legal regulations, such as tax or audit requirements.Legitimate interest (Art. 6.1.f GDPR): When processing is necessary for our legitimate interests, such as improving our services or preventing fraud, provided that your fundamental rights and freedoms do not override those interests.

We do not sell or rent your personal data to third parties. However, we may share your data with:Service providers: Third parties that help us operate our services, such as payment processors, web hosting services, or analytics tools (e.g., Google Analytics). These providers are contractually obligated to protect your data and only use it under our instructions.Competent authorities: When necessary to comply with legal obligations, such as judicial or administrative requirements.Business partners: In the event that we collaborate with other companies to offer you joint services, always with your consent or under a contract that guarantees the protection of your data.In the case of international data transfers outside the European Economic Area (EEA), we ensure that they are carried out with appropriate safeguards, such as standard contractual clauses approved by the European Commission or adequacy agreements.

We will retain your personal data only for as long as necessary to fulfill the purposes described in this policy or to comply with legal obligations. For example:Data related to commercial transactions will be kept for the time required by tax regulations (generally 4 to 6 years in Spain).Contact details for commercial communications will be kept until you withdraw your consent or exercise your right to object.Usage data will be retained for a reasonable period for analysis and service improvement, unless you request its deletion.Once the data is no longer needed, it will be securely deleted or anonymized.

In accordance with the GDPR and Spanish legislation, you have the following rights regarding your personal data:Access: To know what data we have about you and how we process it.Rectification: Correcting inaccurate or incomplete data.Erasure ("right to be forgotten"): Request the deletion of your data when it is no longer needed.Limitation of processing: Restricting the use of your data in certain circumstances.Portability: Receive your data in a structured format or request its transfer to another controller.Objection: To object to the processing of your data, for example, for direct marketing purposes.Right not to be subject to automated decisions: Right not to be subject to decisions based solely on automated processing, including profiling.Withdrawal of consent: You may withdraw your consent at any time, without affecting the lawfulness of the previous processing.To exercise these rights, you can contact us at the email address provided or by mail to the address indicated above. We will respond to your request within a maximum of 30 days, unless the complexity of the request requires more time.If you believe that your rights have not been respected, you can file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es or with the data protection authority in your country.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. These measures include:Encryption of sensitive data during transmission and storage.Access controls to limit who can access your data.Regular security audits to identify and mitigate risks.However, no system is completely infallible, so in the event of a security breach, we will notify you as required by the GDPR and take steps to mitigate any impact.

Our website uses cookies and similar technologies to enhance your experience, analyze site usage, and deliver personalized advertising. For more information, please see our Cookie Policy .

Our services are not directed to individuals under the age of 16, unless we have the explicit consent of their parents or legal guardians. If we discover that we have collected data from a minor without such consent, we will delete it immediately.

If we operate in countries outside the EEA, we may transfer your data to third parties in those countries, always ensuring an adequate level of protection through:European Commission compliance agreements.Standard contractual clauses approved by the EU.Other safeguards in accordance with applicable regulations.

We reserve the right to update this Privacy Policy to reflect changes in our practices or applicable law. We will post any changes on this page and, if the changes are significant, we will notify you by email or through a notice on our website.

If you have any questions, concerns, or complaints about this Privacy Policy or the processing of your data, you can contact us at:- Email: sac@alimentacion-naturfood.com- Telephone: +34 620 58 33 64