WHO PROCESSES YOUR PERSONAL DATA?

The Data Controller (hereinafter referred to as the Controller) of your personal data is:

• AD1 LABS S.L.
• NIF: B72553605
• Plaza del Campillo 7, 1º, C.P. 18009 Granada.
• info@cbdhomehub.com

The Controller has established this Privacy Policy, which covers all aspects related to the processing of your personal data through our Website https://cbdhomehub.com (hereinafter referred to as the Website).

As a User and data subject, we inform you that your personal data will be incorporated into the data processing called "WEB USERS" in the Controller's Record of Processing Activities.

The personal data we request from you through the Website is, in general, mandatory (unless otherwise specified in the required field) to fulfill the stated purposes. Therefore, if you do not provide this personal data or provide it incorrectly, we will not be able to process your request or provide the service correctly, without prejudice to the fact that the content of the Website may be freely viewed.

For more information or to clarify any doubts about the processing of your personal data, you can write to us at the postal address or email address indicated in this section. In addition, you can consult the website of the AEPD (Spanish Data Protection Agency) https://www.agpd.es/portalwebAGPD/index-ides-idphp.php.

2. FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?

The personal data you provide us through the Website is processed by the Controller for the following purposes:

• Manage your registration and login to the private area (My Account) of the Website, where you can manage your identification data, username, shipping and billing addresses, phone number, order history, your payment methods and data, as well as your username and password.
• Manage the relationship with the User as a customer, when they purchase products through the Website. This processing covers the entire commercial relationship with customers, from administrative management, payments and collections using the methods made available to you.
• Address your inquiries, requests, suggestions and complaints made through the contact form on the Website, emails, the phone number provided or through our social media profiles.
• Manage the sending of commercial communications by the Controller with information about our products, discounts and offers, greetings or similar, when you have given your express consent and subscribed to our Newsletter.

3. WHAT PERSONAL DATA OF THE USER DO WE PROCESS?

Through the Website, we collect the following categories of personal data:

• Identification data: name, surname, username or any other similar identifier. If you interact with us through social media, your social media username will also be included in this data.
• Contact data: address, phone number, city, province, billing address, shipping address, email address and phone number.
• Data derived from the contact form: information provided by the User in the Message field.
• Economic data: account number if you pay by bank transfer, for payments and returns.
• Transaction data: data of payments made by the User, as well as details of the products you have purchased.
• Profile data: username and password, purchase or order history, preferences, comments and survey responses, as well as all profile data that we may add or order notes provided by the User in the corresponding field.
• Technical data: Internet Protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in type and version, operating system and platform, and other technologies you may use on your devices to access this website.
• Usage data: relevant information about your use of our website.
• Cookie data: information that we, or third parties, collect about you through the use of cookies and similar tracking technologies.
• Marketing and communication data: data about your preferences for receiving direct marketing through our commercial communications.

We do not collect any personal data belonging to special categories of data.

4. WHAT IS THE LAWFUL BASIS FOR PROCESSING YOUR DATA?

The processing of your personal data is based on the following legal grounds:

• Execution of the sales contract with us and the correct provision of service. To manage the development and execution of the sales contract for the products you have purchased and to communicate your personal data to our suppliers, whenever necessary for the provision of the service.
• Your express consent by checking the corresponding box. To register and create a private account, as well as to address your inquiries, suggestions or requests, and to manage the sending of commercial communications through the indicated means.
• Fulfillment of legal obligations by the Controller. For fraud prevention, communication of your data to Public Administrations and to address eventual claims from third parties.

5. TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?

• Your personal data may eventually be communicated to our external suppliers, when such communication is necessary for the provision of services, specifically:
• Our parcel and courier service providers.
• Our providers of administrative, management, tax and labor advisory, and general legal services.
• Our providers of hosting, data storage and processing, commercial communication sending management, and marketing services.
• Companies that own the social networks where the Entity has a profile, provided that you communicate with us through them.
• To banks and financial entities for the management of collections and payments for the products purchased by the User.
• Our IT service providers, such as Google for email management.
• To fulfill obligations by the Controller, your personal data may be communicated to Public Administrations, whenever necessary to comply with legal obligations, or to address eventual third-party claims, by the Controller.
• For the sending of commercial communications, provided you have given your consent, your data will be communicated to our digital marketing service providers.

Given that some of our service providers are global, the processing of your personal data by them may involve international transfers of your data outside the European Economic Area. In the case of international transfers, we ensure that they are carried out with the security required by applicable data protection legislation and following the instructions of the AEPD. For more information, please visit the following link https://www.aepd.es/es/derechos-y-deberes/cumple-tus-deberes/medidas-de-cumplimiento/transferencias-internacionales

6. HOW LONG WILL WE RETAIN YOUR DATA?

We will retain your data as a customer for the time necessary to provide the service. Subsequently, your personal data will remain blocked and only available to the competent authorities until the responsibilities that may arise from the processing expire, after which it will be securely deleted or anonymized so that we can continue to use it for analytical purposes.

We will retain your data as a registered User of the Website until you request to unsubscribe or revoke your consent.

We will retain your data for sending commercial communications as long as the information sent to your email does not indicate any error in sending or until you revoke your consent.

7. WHAT RIGHTS DO YOU HAVE?

You can exercise the following rights, at any time and free of charge:

• Obtain confirmation as to whether or not we are processing personal data concerning you.
• Access your personal data.
• Rectify inaccurate or incomplete data.
• Request the erasure of your data.
• Revoke consent for the processing of your data, if you have given it to us, for example, for sending commercial communications.
• Request the restriction of the processing of your data when any of the conditions provided for in the regulations are met.
• Request the portability of your data.
• Object to the processing of your data, if we are using your personal data to send you commercial communications based on our legitimate interest.
• File a complaint regarding the protection of personal data with the Spanish Data Protection Agency (aepd.es).

To do this, you can contact us in writing or by email, addressed to the physical or email address indicated in section 1 of this Privacy Policy, attaching a copy of your identity document, with the reference "Data Protection".

As a User, you should bear in mind that the security of computer systems is never absolute. When personal data is provided via the internet, such information may be collected and processed by unauthorized third parties without your consent.

8. USER RESPONSIBILITY

As a User, by providing us with personal data through our forms, you declare that you are of legal age and that the personal data you have provided to us is accurate, truthful, complete and up-to-date. For these purposes, as a User, you are responsible for the veracity of all personal data you provide to us and must keep the information provided duly updated, so that it reflects your actual situation.

Furthermore, you guarantee that you have informed any third parties whose personal data you provide, if applicable, about the aspects related to the processing of their personal data contained in this Privacy Policy. Likewise, you guarantee that you have obtained their express authorization to provide us with their personal data for the indicated purposes.

9. LINKS TO THIRD-PARTY WEBSITES

Our website may include links to third-party websites, plug-ins and applications such as social networks. Clicking on those links or enabling those connections could allow third parties to collect or share data about you. The processing of personal data carried out by the owners of these websites is not included in the scope of this privacy policy. Therefore, we have no responsibility or control over the information collected by third parties or over the protection and privacy of the information you provide through such websites. We recommend that you carefully review the privacy policy of all third-party websites to understand how they collect and share your information.

We have profiles on some of the main social networks on the Internet, such as Instagram or Facebook. In these cases, the data processing we carry out will be that which the corresponding social network allows for corporate profiles.

Occasionally, and always provided that applicable regulations do not prohibit it, we may inform our followers through any means that the corresponding social network allows about activities, products and offers, as well as provide a personalized customer service. Under no circumstances do we extract data from social networks, unless the user of the social network gives express consent for this (for example, for contests, giveaways and similar activities).

Likewise, the Website does not allow the User to purchase products, so for this purpose you will be redirected to our Amazon profile, where you will be governed by the sales conditions and privacy policy stated there.

10. SECURITY MEASURES

We treat your personal data confidentially and maintain the duty of secrecy with respect to it, adopting at all times the necessary technical and organizational measures to guarantee the security of your data and thus prevent possible alterations, losses, destruction, unauthorized processing or access, according to the state of the art, the nature of the stored data and its processing, and the risks to which it is exposed.

Likewise, all our processing providers subscribe to a corresponding contract with us to ensure, as far as possible, that they comply with current data protection regulations.

11. MODIFICATIONS

We are likely to update this Privacy Policy due to regulatory changes, recommendations from competent authorities or changes in the processing of your personal data. Whenever we make such updates, you will find the latest version of our privacy policy here.