Introduction

This Privacy and Cookies Policy (hereinafter, the “Privacy Policy”) provides detailed information on how we use and protect your personal data when you browse our website (hereinafter, the “Website”), as well as in our pharmacy, as a second layer of information, in compliance with the European Data Protection Regulation, and the rights you have in this regard.

This Privacy Policy applies to the processing of personal data that you provide to us or that we obtain from you when you access and use the Website, whether to browse it, purchase our products or services, request information from us, contact us, submit an application or make use of the functionalities or services available on the Website.

Identifying data

Website: https://verdestenerife.com
Website owner: Verde's Tenerife
Address: Flor de Pascua, 2, 38683 Acantilados de Los Gigantes
Tax ID: B-38572681

Verde's Tenerife respects your right to privacy and complies with current legislation on the protection of personal data, including Organic Law 15/1999, of December 13, on the Protection of Personal Data, its implementing regulations and any other regulation that may modify, complement or replace it in the future, as well as Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“General Data Protection Regulation”), applicable from May 25, 2018, and Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights, as well as any other regulation that may develop or complement it in the future.

We recommend that you carefully review our Privacy Policy to ensure you understand how your personal data will be used when browsing the Website.

2. Who is responsible for processing your data?

The data controller is the legal entity that determines the purposes and means of processing personal data. In other words, the controller decides how and for what purposes personal data is processed.

For the purposes of this Privacy Policy, the controller of personal data is Verde's Tenerife located at the address indicated in point 1.

3. Who is your contact at Verde's Tenerife for the protection of your personal data?

If you have any questions or would like more information about the processing or protection of your personal data, you can contact us through any of the following channels:

Data Controller: Promociones Acantilados de Los Gigantes Verde's And Villar SL
Tel.: 922 860 065
Email: info@verdestenerife.com
Postal Address: Flor de Pascua, 2, 38683 Acantilados de Los Gigantes, Tenerife

4. What is personal data?

Personal data is any information relating to an identified or identifiable natural person.

5.Data processing and purposes as the data controller

Customers and Suppliers: Management of the customer and supplier database for administrative purposes, invoicing, communications, and payments and collections via bank transfers and direct debits. The legal basis for processing this personal data is the obligation to issue invoices for the delivery of goods and services, as established in Law 58/2003 of December 17, the General Tax Law. Therefore, collecting your data is mandatory and essential for providing our services. Your data will be stored in our database for the legally established accounting and tax retention periods. Your data may be accessed by the technicians of the management software implemented in the pharmacy for these purposes.

Customers (Loyalty Card): Commercial management of the customer database to keep you informed of promotions and services that may be of interest to you. The legal basis for processing this personal data is your explicit consent, as well as our legitimate interest in understanding and promoting our products and services to our customers. Your data will be stored in our database until you notify us of your request for cancellation. Our marketing advisors may have access to your data.

6. What personal data do we process?

For the purposes set out in this Privacy Policy, Verde's Tenerife collects and processes the personal data detailed below:

– Identifying data: Name, surnames, identity document (tax identification number or code, foreign identification number, passport or residence permit), social security number.

– Contact details: Postal address, email address, landline and mobile phone numbers.

– Transactional data: Information about purchases, orders, contracts, billing and collection, payment methods, bank details and any data relating to your transactions with us.

– Electronic data: IP address, browser type and language, domain through which
you access the Website, browsing data, activity on the Website.

We do not intentionally collect information about minors unless we have the express consent of their parents or legal guardians. You guarantee that you are over 14 years of age. If you are aware or suspect that Verde's Tenerife has personal data of minors, please contact us through any of the channels indicated above and we will proceed to delete it.

7. Collection and obtaining of personal data

Verde's Tenerife collects and processes the personal data that you voluntarily provide to us through your interaction with our Website, specifically:

• When you request information or quotes about our products and services.
• By registering as a user on our website.
• When purchasing products or services from Verde's Tenerife.

You will only be required to provide the personal data that is necessary for Verde's Tenerife to provide you with the services or make available to you the functionalities of the Website that you have requested.

On the forms available on the Website, fields that are mandatory will be marked with an asterisk (*). If you do not provide all the required information, or if we receive any abnormal or incorrect response, we will not be able to process your request or provide the corresponding service or functionality.

You guarantee and are responsible, in any case, for the truthfulness, accuracy, validity and authenticity of the personal data provided and undertake to keep them duly updated.

You do not need to provide your personal data to browse the Website. However, when you visit our Website, Verde's Tenerife collects the following information automatically and through cookies and other tracking technologies, depending on your specific browser settings: IP address, device type and ID, browser type and language, the domain through which you access the Website, browsing data, and activity on the Website. For more information, please see section 12 of this Privacy Policy, “Use of Cookies and Other Tracking Technologies.”

8. What do we use your personal data for? Purposes and legal bases for processing

In general, the personal data you provide to us and that we obtain from you is used to process your requests and transactions, to provide you with high-quality service, and to inform you about opportunities we believe will be of interest to you.
The specific purposes for which we process your personal data are detailed below:

1. To provide you with information you have requested, including quotes for products and services. In this case, the legal basis for processing your data is your consent.
2. To register you as a customer, process your transactions, manage the contractual relationship with you, grant you access to the private customer area (if applicable), send you relevant information about products and services, billing, collections and payments, process transactions and payment methods, and any service communications related to your contract and transactions, administer loyalty programs, discounts and promotions, and conduct satisfaction surveys or surveys related to the products and services marketed and distributed by Verde's Tenerife. In this case, the legal basis for processing your data, if you are a residential customer, is the performance of the sales contract for products or the provision of services with Verde's Tenerife. To guarantee the security of our website and information. In this case, the legal basis for processing your data is the legitimate interest in providing a secure environment and preventing damage to Verde's Tenerife's systems and user information, as well as unauthorized access and misuse thereof.
3. Regarding the purposes for which cookies are used, please see section 12 of this Privacy Policy, “USE OF COOKIES”. In this case, the legal basis for processing your data is your consent.
4. When the basis for processing your data is your consent, you may withdraw it at any time by sending us an email to info@verdestenerife.com, attaching a copy of your ID card or other proof of identity, indicating your address for communication purposes, and providing the necessary details to process your request. You can always contact us through any of the channels indicated at the beginning of this Privacy Policy.

Please note that receiving marketing information is not essential to maintaining our relationship with you. If you prefer not to receive marketing communications, you can inform us at any time through the channels indicated or unsubscribe using the link provided for this purpose in the marketing emails you receive. If the communications are sent by other means, you can request this in writing at the address indicated above.

To what extent will decision-making be automated?
Verde's Tenerife does not use fully automated decision-making processes to establish, develop, or terminate a contractual relationship with you. Should we use such processes in a particular case, we will inform you and communicate your rights in this regard, as required by law.

Will profiling take place?
In order to offer you products and/or services tailored to your interests and improve your user experience, we may create a "business profile" based on the information you provide. However, no automated decisions will be made based on this profile.

9. With whom do we share your personal data?

We only use, transfer, or share personal data with third parties as described in this Privacy Policy. Verde's Tenerife does not sell or rent your personal data to third parties and will only disclose it to individuals or entities if we obtain your prior consent or in compliance with applicable law when such consent is not required for a specific transfer.

We will share or give access to your personal data to third parties when necessary to provide the goods and services you have contracted, or to offer you services or products that may be of interest to you:

• Legal obligations: Verde's Tenerife  may disclose your personal data when the transfer is authorized by law or is necessary to comply with a legal obligation, including transfer to competent authorities, judges and courts.

10. What measures do we take to keep your personal data safe?

Verde's Tenerife adopts appropriate technical and organizational measures, in accordance with current regulations, to protect your personal data against any misuse, destruction, loss, accidental or unlawful modification, disclosure or unauthorized access, including those necessary to deal with any suspected data breaches.

If you become aware of or suspect the use of your password by third parties, or that there may be misuse of your personal data or unauthorized access to it, please let us know as soon as possible through any of the channels indicated in this Privacy Policy.

11. How long do we keep your data?

Verde's Tenerife will retain your personal data for as long as necessary to fulfill the purposes for which it was collected, unless you exercise your right to erasure or to withdraw your consent.

They will then be blocked, unless a longer retention period is required or permitted by law (for example, for the formulation, exercise or defense of claims), in which case they will be duly blocked for the necessary time before being deleted.

To determine an appropriate data retention period, we apply the following criteria:

– The data necessary to provide you with information requested by you, including product and service quotes, will be kept for the time necessary to address and process such requests, in accordance with applicable legal provisions and the limitation periods for actions provided for in the regulations.

– Data related to the acquisition of products and services from Verde's Tenerife within the framework of a contractual relationship will be kept for the duration of the service contract, in accordance with applicable legal provisions and the limitation periods for actions provided for in the regulations.

– When you have consented to receive commercial communications, they will be kept until you revoke your consent and inform us of your wish to no longer receive them, in accordance with applicable legal provisions and the limitation periods for actions provided for in the regulations.

– When cookies are installed on your device, the data will be stored in accordance with applicable legal requirements and recommendations issued by the competent authorities.

12. What are your rights regarding the processing of your personal data?

In accordance with applicable regulations, you have a number of rights regarding the collection and processing of your personal data. Exercising these rights will be free of charge, except in cases where requests are manifestly unfounded or excessive, particularly due to their repetitive nature.

These rights are as follows:

– Right to information: You have the right to be informed in a concise, transparent, intelligible and easily accessible manner, using clear and simple language, about the use and processing of your personal data.

– Right of access: You have the right to request confirmation from us at any time as to whether we are processing your personal data, to access that data and information about its processing, and to obtain a copy of said data. The copy of your personal data that we provide will be free of charge, although requests for additional copies may be subject to a reasonable fee based on administrative costs. We may ask you to verify your identity or request further information necessary to process your request.

– Right to rectification: You have the right to request the rectification of inaccurate, outdated, or incomplete personal data concerning you. You may also request that incomplete personal data be completed, including by means of a supplementary statement.

– Right to erasure (right to be forgotten): You have the right to request the erasure of your personal data when, among other reasons and provided that a proportionality assessment is carried out, the data is no longer necessary for the purposes for which it was collected, and it does not concern current events or matters of public record, and the right to information prevails. However, this right is not absolute, and Verde's Tenerife may continue to keep your data duly blocked in the cases provided for by applicable regulations.

– Right to limit processing: You have the right to request that we limit the processing of your personal data, which means that we may continue to store them, but not continue processing them if any of the following conditions are met:

– that you challenge the accuracy of the data, for a period that allows the responsible party to verify its accuracy;

– the processing is unlawful and you oppose the deletion of the data and request instead the limitation of its use;

– Verde's Tenerife does not need the data for the purposes of the processing, but you need them for the formulation, exercise or defense of claims; you have objected to the processing, while it is being verified whether the legitimate grounds of Verde's Tenerife prevail over yours.

– Right to data portability: You have the right to have your data transmitted to another data controller in a structured, commonly used, and machine-readable format. This right applies when the processing of your personal data is based on consent or the performance of a contract and such processing is carried out by automated means.

– Right to object: This right allows you to object to the processing of your personal data, including profiling. We will only be unable to comply with your right when we process your data if we demonstrate compelling legitimate grounds for the processing or for the establishment, exercise, or defense of legal claims.

– Right to withdraw consent: In cases where we have obtained your consent for the processing of your personal data in relation to certain activities (for example, in order to send you commercial information), you may withdraw it at any time.

– Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with the Spanish Data Protection Agency, whose contact details can be found at http://www.agpd.es

You can exercise your rights by sending us a communication to info@verdestenrife.com, attaching a document proving your identity and providing the necessary details to process your request.

13. Data hosting and third parties with access to data

This website is hosted on a server located in the European Union. Its sole purpose is to host our website; therefore, the managing company will not have access to your personal data.

Similarly, our emails, as well as backups and information hosting server, are managed by companies located within the territory of the European Union, and their hosting servers are located in Europe.

Use of social media
We will use our social media to promote properties, our services, and to link to news, articles, or other information relevant to our clients and followers.

Modification of these terms and duration.
The owner of this website may modify these terms at any time, and such modifications will be duly published as they appear here, either at their own discretion or due to changes in legislation or guidelines from the Spanish Data Protection Agency. These terms will remain in effect until they are modified by other duly published terms.

Legislation and jurisdiction
The legislation applicable to the content of the website will be Spanish and the jurisdiction, that corresponding to the Courts and Tribunals competent in Santa Cruz de Tenerife.

14. Modifications

Verde's Tenerife may modify this Privacy Policy to adapt it to changes that may occur on the Website or in relation to the processing of your personal data. In such cases, Verde's Tenerife will contact you through its usual communication channels with sufficient advance notice to inform you of the relevant changes and will send you the updated privacy policy.