Privacy policy

This privacy policy (hereinafter, ‘Privacy Policy’) has been prepared by NATURALEBIO S.R. L (hereinafter, ‘NaturaleBio’ or the ‘Data Controller’) in order to comply with the obligation of transparency in the processing of personal data that it may carry out as data controller, in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, ‘GDPR’), and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights (hereinafter, ‘LOPDGDD’).

The information contained in this Privacy Policy allows you to consult the details of the different processing of personal data that may be carried out as a result of accessing and using the website (hereinafter, the ‘Site’), as well as the different relationships, legal or commercial, that you may have with NaturaleBio.

1. PERSON IN CHARGE OF THE TREATMENT

• Owner: NATURALEBIO S.R.L. (hereinafter, "Naturalebio")
• Address: Via Lima 7, 00198, Rome, Lazio, Italy
• VAT ID: IT16450161001
• E-mail: help@naturalebio.com

 

2. NEED TO PROVIDE PERSONAL DATA AND TYPE OF DATA PROCESSED.

We inform you that mere access to the Site does not imply any obligation to provide any personal data, except as provided in the Cookie Policy.

However, the use of certain services or functionalities of the Site requires the provision of certain personal data, indicated in the relevant forms, and implies their processing for the purposes and on the basis of legitimacy indicated in this Privacy Policy.

As a general rule, the categories of data subject to processing are as follows:

- Identification data: first name, last name, identification number (if necessary for billing purposes).
- Contact data: postal address, e-mail address, telephone number.
- Financial data: payment information
- Transaction data: information on purchases, orders, returns and transactions made by the user.
- Other data: additional information you provide us with from time to time for the processing of your request, contact, enquiry or complaint.

Refusal to provide the data requested in the mandatory forms or the data required for the execution of the contract between the parties may result in the inability to provide certain services or features, or to process requests or contracts made.

3. PURPOSE AND LEGITIMACY OF PROCESSING

The personal data provided by the user will be processed for the purposes set out in this privacy policy and, where applicable, in the various data collection forms provided in this privacy policy. In this regard, data collection has the following processing purposes:

3. 1. Handling and attention to your information and contact requests.

Purpose and legal basis: When you use one of the forms made available on the different tabs of the Data Controller's website, your personal data will be processed in order to manage and resolve your questions, complaints, requests or any other type of information that you wish to request from the entity and thus be able to send you a response in accordance with your interests.

When you contact the Data Controller using one of the forms on the site, your data will be processed on the basis of the consent of the data subject who provides it when sending the form, which may be revoked at any time without affecting the lawfulness of the processing prior to revocation, in accordance with the provisions of the ‘Rights of the data subject’ section of this Policy.

3.2. Management of orders and purchases

Purpose and legal basis: to manage users' purchase orders through the Site, the application of the execution of the contractual relationship being the legal basis that allows the processing of data.

Likewise, with the user's consent, his data may be stored and processed to expedite his future purchases through the Website.

3.3. Management of incidents, returns and/or complaints

Purpose and legal basis: handling incidents and returns of products offered on the Website, the performance of the contractual relationship being the legal basis for processing the data.

3.4. Sending newsletters

Purpose and legal basis: when you give your consent by filling in the appropriate form, your data will be processed in order to send you, by e-mail and/or other electronic means, information on the activities and products of the Data Controller.

The legitimacy of the processing described is your consent, which may be revoked at any time without affecting the lawfulness of the processing prior to revocation, as provided in the ‘Rights of the Data Subject’ section of this Policy.

3.5. Sending commercial information

Purpose and legal basis: when you give your consent by ticking the appropriate boxes, we will process your data in order to send you commercial information and/or offers on products offered by YABA Group companies. We may send you information about products of YABA Group brands directly or via other Group companies, whereby your data may be passed on to these companies, a list of which can be found here.

You may revoke your consent at any time without affecting the lawfulness of the processing prior to revocation, in accordance with the provisions of the ‘Rights of the data subject’ section of this Privacy Policy.

4. RESPONSIBILITIES OF THE DATA SUBJECT

The data subject:
- Guarantees that he/she is over fourteen (14) years of age, that he/she has sufficient legal capacity to provide personal data and that these are true, accurate, complete and up-to-date. To this end, the user is responsible for the truthfulness of all the data he/she communicates and will keep the information provided appropriately up-to-date, so that it corresponds to his/her actual situation.
- He guarantees that he has informed the third parties from whom he provides his data, if he does so, of the aspects contained in this Privacy Policy. Likewise, you guarantee that you have obtained their permission to provide your data for the aforementioned purposes.
- The user shall be responsible for any false or inaccurate information provided through the Site and for any damage, direct or indirect, that this may cause to the Data Controller or third parties.

5. DATA RETENTION

The data will be processed for the time necessary to fulfill the purposes for which it was collected, to process and respond to your requests or to process the purchase of products and their shipment and, once completed, we will keep it blocked for the period of prescription of legal actions that may arise.

Data processed for sending commercial communications will be processed until you object to the processing for these purposes or, where appropriate, withdraw your consent.

6. COMMUNICATION OF DATA

Personal data may be communicated to the following entities or in the following cases:

- In compliance with the legal obligations incumbent on the Data Controller, your data may be communicated to the Public Administrations competent for the subject matter, to Courts and Tribunals, as well as to State Security Forces and Bodies, in the event of specific requests made in accordance with the regulations in force.
- To YABA Group companies for internal administrative purposes and, if you have consented to receive communications, so that YABA Group brands can send you information on their products. You can consult the list of companies that are part of the YABA Group HERE.
- Your data may also be communicated to third parties, such as couriers and/or banks, where this is necessary for the management and processing of your orders and purchases in order to execute the contractual relationship.

7. INTERNATIONAL TRANSFERS

For the above purposes, we engage carefully selected and contracted service providers (IT service providers, communication providers, etc.) to provide services. In some cases, these service providers are based or have ancillary services outside the European Economic Area (hereinafter referred to as the EEA). In these cases, the transfer of personal data to third countries takes place in accordance with EU data protection regulations and applicable national laws. In order to ensure an adequate level of protection for your data, the Data Controller applies and requires suppliers to apply appropriate safeguards to establish an adequate level of protection in accordance with legal requirements, including by entering into EU standard contractual clauses.

However, please note that some YABA Group companies are located outside the EEA, in particular in the United Kingdom, so it is possible that your data may be subject to international transfer to this country when it is necessary to communicate data between Group companies for internal administrative purposes or you have consented to the sending of commercial communications about products or services of Yaba Group companies. Where applicable, the transfer is appropriately regulated by the European Commission's adequacy decision (EU) 2021/1772, under which the UK is deemed to provide an adequate level of data protection.

In addition, the use of cookies by third parties may result in the international transfer of your personal data under the terms set out in the Cookie Policy. You can review the privacy information of third parties serving cookies on this website via our Cookie Policy.

8. RIGHTS OF THE DATA CONTROLLER

You may exercise, at any time and free of charge, by writing to help@naturalebio.com with an identity document, the rights to which you are entitled in terms of data protection and, specifically, the following rights

- Access your personal data and obtain confirmation that NATURALEBIO S.R.L. is processing personal data concerning you.
- Rectify inaccurate or incomplete data.
- To object to the processing of your personal data in certain circumstances and for reasons related to your particular situation (in particular, when the processing is based on the legitimate interest of NATURALEBIO S.R.L.).
- To revoke previously granted consent (when this is the applicable legal basis of legitimation). Revocation shall not affect the lawfulness of the processing previously carried out.
- To restrict the processing of your data, when one of the conditions provided for by the legislation applies.
- Request the deletion of your data when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

Request the portability of the data provided by the user in the cases provided for by the legislation.

Likewise, the user may lodge a complaint regarding the protection of his/her personal data with the Spanish Data Protection Agency (https://www.aepd.es/) at C/ Jorge Juan, 6, 28001 - Madrid, if he/she considers that the Data Controller has violated his/her rights recognised by the applicable data protection legislation.

9. SECURITY MEASURES

Your personal data will be treated with absolute confidentiality and with the obligation of secrecy with respect to the same, in accordance with the provisions of the applicable legislation, adopting for this purpose the technical and organisational measures necessary to guarantee the security of the data and prevent their alteration, loss, unauthorised processing or access, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed.

10. UPDATING OF THE PRIVACY POLICY

The Data Controller reserves the right to amend this Privacy Policy to adapt it to its own needs or to any legislative developments. If it does so, it will publish them on this Website so that you can access them easily at any time.

Last update: 22 April 2024
© Naturalebio - NATURALEBIO S.R.L All rights reserved.