1. Data Controller

  • Entity Name: Paulownia Natural Growers CB
  • Tax ID (NIF): E98733595
  • Registered Address: Heroi Romeu 9 – 8, 46008 Valencia, Spain
  • Contact Email: info@paulownia.app
  • Website: https://paulownia.app

2. Information We Collect and Purpose of Processing We process personal data provided directly by users or collected automatically during the use of our Website for the following purposes:

  • Contractual Relationship and Order Fulfillment: Managing orders, inquiries, product customization, billing, and logistics services.
  • Customer Support and Inquiries: Processing requests submitted through contact forms, email communications, or interactive tools on the site.
  • Commercial Communications and Newsletters: Sending promotional emails, news, or updates regarding our products and services, provided you have granted explicit consent or where an existing customer relationship permits it.
  • Website Analytics and Performance: Analyzing user interactions and browsing habits to optimize website performance, security, and user experience.

3. Legal Basis for Data Processing The legal bases legitimizing the processing of your data are:

  • Contractual Necessity: Execution of a contract or implementation of pre-contractual measures requested by the user.
  • Explicit Consent: Granted by accepting this policy through clear affirmative actions, such as checking opt-in boxes on web forms or interacting with our cookie consent manager.
  • Legitimate Interest: To ensure system security, prevent fraud, and send relevant commercial updates to existing clients regarding similar products or services.
  • Legal Obligation: Compliance with applicable tax, legal, and accounting regulations.

Providing the requested personal data is necessary to complete your requests. Incomplete or inaccurate data may prevent us from providing the requested services.

4. Data Retention Period Personal data will be retained for as long as necessary to fulfill the specific purposes for which it was collected, including maintaining an active commercial relationship. Once no longer required, data will be kept securely blocked during the mandatory statutory limitation periods to meet potential legal, administrative, or tax liabilities, after which it will be permanently erased or anonymized.

5. Recipients and Third-Party Data Service Providers Your personal data will not be sold, rented, or transferred to third parties, except under legal obligation or when necessary to deliver our services. To operate our platform effectively, data may be accessed by trusted third-party service providers acting as Data Processors under strict confidentiality agreements, including:

  • Web hosting, CMS infrastructure, and server maintenance providers.
  • Payment gateways and financial institutions for order processing.
  • Logistics, shipping, and courier services for physical order fulfillment.
  • Email dispatch, marketing automation, and customer support tools.

Where service providers operate outside the European Economic Area (EEA), international data transfers are protected under valid legal safeguards, including standard contractual clauses (SCCs) approved by the European Commission or equivalent adequacy frameworks.

6. User Rights Under Regulation (EU) 2016/679 (GDPR), you possess the following rights regarding your personal data:

  • Access: Request verification of what personal data we hold and receive a copy of it.
  • Rectification: Request the correction of inaccurate, out-of-date, or incomplete data.
  • Erasure (Right to be Forgotten): Request the deletion of your personal data when it is no longer needed for the purposes for which it was collected.
  • Objection: Object to the processing of your data for direct marketing purposes or processing based on legitimate interest.
  • Restriction of Processing: Request the temporary suspension of data processing under specific legal conditions.
  • Data Portability: Receive your data in a structured, commonly used, and machine-readable format to transmit it to another controller.

To exercise any of these rights, send a written request accompanied by a copy of an official identification document (passport or ID) to info@paulownia.app.

You also have the right to lodge a complaint with a competent supervisory authority, such as the Agencia Española de Protección de Datos (AEPD) at www.aepd.es, if you consider that your data protection rights have been violated.

7. Data Security and Confidentiality Paulownia Natural Growers CB implements technical and organizational security measures necessary to safeguard personal data against unauthorized access, alteration, loss, or destruction. However, users should acknowledge that no security measures on the internet are entirely infallible.

8. Updates to this Policy We reserve the right to modify this Privacy Policy to reflect changes in legal requirements or platform functionality. Any updates will be published directly on this page with an updated revision date. channels.