Privacy Policy

In accordance with the provisions of the General Data Protection Regulation (EU) and the Organic Law on Data Protection and Guarantee of Digital Rights in force, by accepting this Privacy Policy, you are informed of the following:

• The entity responsible for the processing is Reset Green Trade S.L., identified with VAT number B25793654 and registered address at c/ variant nº24 pl Segria, 25123 Torrefarrera, Lleida, Spain.
• Contact email: info@growkitexpress.com
• The business activity focuses on the online sale of Grow Shop products.

This Privacy Policy applies exclusively to personal data collected on the Website and is not valid for information obtained by third parties on other websites, even if they are linked from the Website.

By accepting this policy, the responsible entity expresses its commitment to maintain and guarantee secure commercial relationships by protecting personal data and complying with the right to privacy of all users of the website. It is also clarified that no impact assessment or appointment of a data protection officer is required.

These policies are reviewed whenever significant changes occur and at least once a year.

It is necessary to provide a brief explanation for the USER to understand that any information relating to a person provided during their visit to our website is considered personal data. In our case, this data includes the name and email address, and in the case of a purchase requiring an invoice, the full address, name, surname, and identification number (DNI or VAT).




Additionally, during the visit to the website, certain information is automatically stored for technical reasons, such as the IP address assigned by your Internet service provider.


1.2: PRINCIPLES APPLIED TO THE PROCESSING OF PERSONAL DATA


For the processing of your personal data, we adhere to the following principles, in accordance with the General Data Protection Regulation and the Organic Law on Data Protection and Guarantee of Digital Rights:



• Principle of lawfulness, fairness, and transparency: We will obtain your consent for the processing of your personal data, for specific purposes that will be clearly and comprehensibly informed beforehand.
• Principle of data minimization: We will only request the data strictly necessary, in relation to the purposes previously informed to the USER.
• Principle of storage limitation: As detailed below, the data will be kept for the time necessary to fulfill the purposes of the processing. In the case of subscriptions, we will conduct periodic reviews of the lists and delete inactive records after an extended period.
• Principle of integrity and confidentiality: Your data will be processed in a manner that ensures the appropriate security of personal data and maintains its confidentiality. All necessary measures will be implemented to prevent unauthorized access or misuse of data by third parties.

2.1 PURPOSE


The data collected, classified in section 2.4, has the following purposes, which will be detailed below:



• Sale of marijuana and cannabis cultivation products.
• Management of the subscriber and registered user list on the website.
• Sending information and commercial activities.
• Compliance with accounting, legal, fiscal, and administrative obligations.
• Analysis and advertising for economic benefits.
• Supply of content on the blog.



Only the data controller will have access to your data, and they will not be transferred, shared, transferred, or sold to third parties.




The data will not be used for any purpose other than those for which they were collected, and they will not be disclosed to third parties.


2.2 MINORS


• If you are over eighteen years of age, you can register at https://www.growkitexpress.com without the prior consent of your parents or guardians.
• What happens if you are under 18 years of age?
• In this case, the express consent of your parents or guardians will be necessary for the processing of your personal data.
• Warning: If you are under eighteen years of age and have not obtained the consent of your parents, you will not be able to register on the website, and your request will be denied if it becomes known.

2.3 LEGITIMACY


• Thanks to consent and the execution of the contract, we can carry out the processing of your data, which is a mandatory requirement to subscribe to the website.
• As you know, you can withdraw your consent at any time.
• We are authorized to process your data to comply with legal obligations in tax, commercial, and accounting matters, as well as for invoicing and the maintenance of accounting records.
• Additionally, based on our legitimate interest, we may process certain data related to advertising, direct marketing, and/or the use of cookies when it is not possible to obtain consent, as well as to respond to requests for comment publication.

2.4 CATEGORY OF DATA AND PURPOSES



The collected data is not considered particularly protected but classified as identifying data. These identifying data are used for the following purposes:



• Name: Used to identify the user and personalize communication.
• Email address: Used for contact purposes, sending information, and commercial activities.
• Address: Requested in case of the need to issue invoices and to comply with legal and administrative obligations.
• Identification number (DNI or VAT): Requested in case of the need to issue invoices and to comply with legal and administrative obligations.



It is important to note that the collected identifying data are used only for the aforementioned purposes and are not shared with third parties without your consent.


2.4.1 DATA COLLECTED FROM THE WEBSITE



Customer Data:



• Identification data obtained through the contact method used by the customer during the sale of a product or service, as well as data included in the agreed contracts or derived from the contractual relationship: name and surname, tax identification number, postal address, email address, telephone number, signature, and banking data.
• The purpose of processing this data is to comply with the obligations and rights arising from the existing contractual relationship.



Website User Data:



• Identification data required in the contact form (name, surname, email) and voluntarily provided in the established text field.
• Additionally, when browsing the website, the IP address, MAC address, operating system, browser used, and duration of the visit are automatically collected.
• Data voluntarily provided when contacting us through the provided email address on the website, which may include identification data and other attachments (documents, contracts, etc.).
• The image, name, and surname may be published along with a recommendation of our services after obtaining your consent.
• The purposes of processing this data are based on the data subject's interest and the legitimate interest of the controller, with the aim of improving the browsing experience and conducting web analysis.



Suppliers:



• Identification data obtained through the contact method used by the supplier, as well as data included in the agreed contracts or derived from the contractual relationship, usually: name and surname, tax identification number, postal address, email address, telephone number, signature.
• The purpose of collecting this data is to become familiar with the supplier's commercial proposals and carry out preparatory acts for the subsequent contract's conclusion.



Social Media:



• Identifying data that you provide as a user of the social network.
• Data voluntarily provided when contacting us through comments or direct messages on the social network.
• Subscription to newsletters and/or content:
• Identification data required in the subscription form (name, surname, email).
• Additionally, when receiving communications, the IP address, MAC address, operating system, browser used, and similar variables are collected.
• The purpose of collecting this data is to offer news, discounts, and promotions, based on the freely given, informed, specific, and unambiguous consent granted.



Comment Form:



• The website includes a form that allows commenting on articles and expressing opinions while respecting freedom of expression. The personal data entered in the comment form will be used solely to moderate and publish them. This data will be stored on Grow Kit Express servers.
• The purpose of collecting this data is to moderate and publish comments on the blog, using the user's name without publishing their email address or website.



Commercial segmentation:



• Segmentation involves creating user profiles in order to send personalized information based on the interests shown during browsing. If you have given consent to receive commercial communications, this segmentation will allow such communications to be tailored to the interests you have demonstrated.
• Under no circumstances will profile building lead to the adoption of automated individual decisions with significant legal effects for the data subject.
• The purpose of this practice is to use remarketing strategies. To capture subscribers and customers, we use tools such as Facebook Ads, TikTok Ads, Google Ads, or similar. When generating an advertisement, it is possible to segment the audience based on location, demographics, interests, etc. The data obtained through these platforms are subject to this privacy policy from the moment the user provides their data to join our community newsletter.
• We will not share, sell, or rent your personal information to third parties. We may share certain information with authorized third-party service providers necessary to provide you with some services.



Tracking Systems Used on This Site:



• The website uses tracking systems such as Google Analytics. These tools allow us to analyze user preferences, demographic characteristics, traffic patterns, and other aggregated information to better understand our audience and meet their needs. Tracking our users' preferences also helps us display more relevant advertisements.

2.5 DATA RETENTION PERIOD


• We will retain your data for the period established by law or until you request its deletion.

2.6 ACCURACY AND TRUTHFULNESS OF DATA


• The User is solely responsible for the accuracy and truthfulness of the provided data, releasing us from any liability in this regard.
• As a user, you must ensure the accuracy and authenticity of the personal data provided, providing complete and correct information in the data collection forms.

2.7 SECURITY MEASURES


• The data controller informs you that the necessary technical and organizational security measures have been implemented to guarantee the security of your personal data, prevent its alteration, loss, treatment, or unauthorized access. These measures are adapted to the state of the technology, the nature of the stored data, and the risks to which they are exposed, whether they come from human, physical, or natural sources. All this is done in accordance with the provisions of the General Data Protection Regulation and the Organic Law on Data Protection and Guarantee of Digital Rights.
• In addition, additional measures have been established to strengthen the confidentiality and integrity of information within the organization, continuously monitoring, controlling, and evaluating processes to ensure respect for data privacy.
• Furthermore, as you can see, the website has an SSL certificate, which guarantees the security of your data once again.

• Currently, we comply with the European Data Protection Regulation and the Organic Law on Data Protection and Guarantee of Digital Rights, complying with these regulations and other applicable ones.
• In addition, the data controller complies with Law 34/2002, of July 11, on Information Society Services and Electronic Commerce, and will request your consent at all times for the processing of your email address for commercial purposes.
• The USER also consents to the processing of their data in order to inform them, by any means, including email, about products and services offered by Reset Green Trade S.L.
• If you do not authorize the processing of your data for the aforementioned purpose, the USER may exercise their right to object to the processing of their data as established in the "Exercise of Rights" section.

• Individuals who have provided their data through the Website can exercise their rights of access, rectification, erasure, restriction, and objection regarding the data incorporated in our files free of charge. They also have the right to lodge a complaint with the competent authority, the Spanish Data Protection Agency, located at Calle Jorge Juan, 6, 28001, Madrid, or through its electronic headquarters: https://www.aepd.es/es.
• The fastest and easiest way to exercise your rights is by accessing your user account and modifying your data or deleting your user account. Any information that must be retained due to legal or contractual obligations will be blocked and used solely for such purposes instead of being deleted.
• The data subject, you in this case, can exercise your rights by written communication addressed to Reset Green Trade S.L., with the reference "Data Protection," specifying your data, proving your identity, and stating the reasons for your request to the following address: Reset Green Trade S.L.: c/ variant nº24 pl Segria, 25123 Torrefarrera, Lleida, Spain
• You can also exercise your rights via email by writing to the following address: info@growkitexpress.com

The data will not be communicated to third parties, except for legal obligations or with your informed, free, specific, and unambiguous consent. For informational purposes only, the following are the data processors who are external to the data controller:



• The Rocket Science Group LLC (identified as "Mailchimp"): Email subscription services and newsletter distribution. For more information, please refer to their privacy policy at https://mailchimp.com/legal/privacy/.
• Stripe: Payment gateway. You can find more information at www.stripe.com.
• Vercel Inc: Web hosting services. You can find more information at www.vercel.com



Who are the recipients of the information?



• State Tax Administration Agency and tax advisors, in compliance with legal, fiscal, and administrative obligations.
• Financial entities with which we work for payment management.
• Technology companies for the operation of the website, as will be explained below.

• In accordance with Law 34/2002, of June 11, on Information Society Services and Electronic Commerce, you can object to the use of your information for advertising purposes, market research, or satisfaction surveys at any time, as well as revoke your consent at any time (without retroactive effect).
• To do so, you must send an email to the address info@growkitexpress.com. If you have received advertising by email, you can also object by clicking on the link included in said email and following the provided instructions.