Document updated on 23 April 2024
Greenland Organic (‘Greenland Organic’, ‘our’, ‘we’ and ‘us’) and our partners respect your privacy.
Please read this privacy policy carefully to understand how your personal data is collected, processed and stored when you use this greenland-Organic.com website.
The term ‘personal data’ refers to any information relating to a natural person and enabling that person to be identified, directly or indirectly, on the basis of a single piece of data or a combination of data.
All personal data collected on this website are processed under the responsibility of Greenland Organic, a limited company with a share capital of €3,000 registered in the Malaga Trade and Companies Register under number B13849708 and with its registered office at C/El Puente s/n, 29560 PIZARRA, (MÁLAGA) and in compliance with Law No. 78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties, in its current version, as well as Regulation (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.
Within the meaning of the regulations applicable to personal data, Greenland Organic is therefore a data controller.
This privacy policy describes:
- How Greenland Organic uses your personal data
- How Greenland Organic shares your personal data
- How Greenland Organic protects your personal data
- Where Greenland Organic hosts and transfers your personal data
- How you can exercise your rights in relation to your personal data
- Updates to the privacy policy
- How to contact us
I. How Greenland Organic uses your personal data
Greenland Organic may use your personal data for the following purposes:
Create your customer account on this website
Manage orders for products and/or services
Carry out the actions necessary for the management of contracts, invoices and follow-up of customer relations
Publish and manage reviews of products and/or services ordered on this website
Send you our newsletter, if you have subscribed to it
Respond to your contact request made from our website
Establish a loyalty programme
Offer you advertising and content tailored to your needs
compile a file of users, prospects and customers
Draw up commercial and visitor statistics
Manage any unpaid invoices and disputes
Comply with our legal obligations
Most of the processing operations listed above are necessary for the performance of the contract entered into with Greenland Organic when you use our website to order the products and/or services available for sale on the site.
When you voluntarily provide us with personal data, the collection of your personal data is based on the following legitimate interest: to better respond to your requests for information.
The processing of your personal data in order to send you our newsletter, on the other hand, is based solely on your consent to receive our newsletter, which you may withdraw at any time. If you do not consent to the sending of the newsletter, please note that this will not prevent you from creating your customer account and placing orders on our website.
II. How Greenland Organic shares your personal data
Within Greenland Organic, and with regard to each processing purpose, your personal data are collected, processed and stored by authorised Greenland Organic personnel, solely within the scope of their respective competences, and in particular by the customer service, marketing and IT departments.
We do not share personal data with other companies, organisations and individuals unless one of the following circumstances applies:
(1) Sharing with prior consent: after obtaining your consent, Greenland Organic will share the information you have authorised with the specific third parties or categories of third parties indicated when your consent was obtained.
[matomo_opt_out]
(2) Sharing with our service providers: Greenland Organic may also disclose your information to companies that perform services for us or on our behalf. Examples of these service providers include companies that provide IT services such as our web host or email service provider, delivery services for our products, or marketing activities on our behalf. These service providers may use your information solely for the purpose of providing services to you on behalf of Greenland Organic.
(3) In fulfilment of a legal obligation, sharing in accordance with laws and regulations: Greenland Organic may share your information as required by laws and regulations, in order to resolve legal disputes, or as required by judicial or administrative authorities under the law.
Greenland Organic will ensure the lawfulness of any sharing of personal data by entering into data processing agreements with the companies with which your personal data is shared, obliging them to comply with this privacy policy and to take appropriate security and confidentiality measures when processing personal data.
III. How Greenland Organic protects your personal data
Greenland Organic attaches great importance to the security of your personal data and has adopted industry standard practices to protect your personal data from unauthorised access, disclosure, use, alteration, damage or loss.
We have also taken the necessary precautions to ensure that our hosting provider maintains the security and confidentiality of the data and, in particular, prevents it from being distorted, damaged or communicated to unauthorised persons.
Greenland Organic also adopts the following organisational measures:
(1) We adopt reasonable and practicable measures to ensure that personal data collected is minimal and relevant as necessary, having regard to the purposes for which it is processed.
(2) We keep your personal data for as long as is strictly necessary for the purposes for which it is processed, unless the retention of your data is required or permitted by law. By way of example, we retain data relating to the fulfilment of your orders for the period required by law for the retention of accounting records, i.e. a maximum of 10 years from the financial year in question.
Data that may be used to establish, defend or exercise legal rights may be kept for a maximum of 5 years from the date of collection or the last contact from the prospect (in application of the ordinary law limitation period).
(3) We deploy access control mechanisms to ensure that only authorised personnel can access your personal data.
In the event of a personal data breach, Greenland Organic will comply with the legal and regulatory requirements applicable to the notification of personal data breaches to the competent supervisory authorities and/or the persons concerned.
IV. Where Greenland Organic hosts and transfers your personal data
Your personal data will be hosted within the hosting infrastructure of our hosting provider, located in Germany.
Certain third parties to whom we communicate your personal data are located in countries outside the European Union, in particular France.
When products available for sale on the website are delivered by resources located in countries outside the European Union, we may transfer your personal data to these countries. It may also happen that service providers access your data on our behalf in order to provide us with a specific service and are located in countries outside the European Union.
Where such transfers exist, we ensure that these transfers of personal data are regulated in accordance with the applicable regulations in order to ensure an adequate level of data protection, either by an adequacy decision of the European Commission, or by means of legal instruments such as data transfer contracts incorporating the European Commission’s Standard Contractual Clauses.
If you have any queries regarding our recipients and transfers of data outside the European Union, please contact us at the addresses set out in the ‘How to contact us’ section below.
V. How you can manage your rights relating to your personal data
You have the right to access, rectify, delete, limit and object to the processing of your personal data, as well as the right to define directives concerning the fate of your data after your death and the right to the portability of your personal data.
You also have the right to appeal to the Commission Nationale Informatique et Libertés in France and to a competent supervisory authority in any other Member State depending on your usual place of residence, your place of work or the place where the violation of your rights occurred, if you consider that the processing of your data does not comply with the applicable laws. This recourse may be exercised without prejudice to any other recourse before an administrative or judicial court, which also constitutes a right available to you.
You may contact us at any time at the addresses indicated in the ‘How to contact us’ section below in order to exercise your rights with regard to personal data under the conditions laid down by the applicable regulations. You must indicate which right you wish to exercise and all the details necessary for us to respond to your request.
These rights are exercised in accordance with the applicable regulations.
The right of access means that you can ask us at any time to tell you whether we are processing personal data about you and, if so, to tell you what personal data is involved and the nature of the processing carried out.
The right of rectification means that you can ask us to rectify your personal data if it is inaccurate. You may also request that your personal data, if incomplete, be completed insofar as this is relevant to the purpose of the processing in question.
The right to erasure means that you may ask for your personal data to be erased, in particular when :
Their retention is no longer necessary for the purposes for which they were collected;
Your personal data is processed on the basis of your consent, you wish to withdraw that consent, and there is no other legal basis to justify the processing;
You have objected to the processing of your personal data and therefore wish it to be deleted;
Your personal data has been processed unlawfully;
Your personal data must be deleted in order to comply with a legal obligation under either European Union law or French law.
The right to restriction means that you can ask us to restrict the processing of your personal data:
When you dispute the accuracy of your personal data for a period of time that allows us to verify its accuracy;
When, following processing that has been established as non-compliant, you prefer the restriction of processing to the complete erasure of your personal data;
When we no longer need your personal data for the purposes of processing, but it is still necessary for the establishment, exercise or defence of legal claims;
Where you have objected to the processing of your personal data and you wish us to restrict the processing for such time as will enable us to verify whether the legitimate reason you are invoking is justified.
Restriction of processing means that the processing of your personal data will be limited to the storage of your corresponding personal data. We will not carry out any other operation on the personal data in question.
The right to object means that you may object to the processing of your personal data, where such processing is based on the pursuit of Greenland Organic’s legitimate interests. The right to object is exercised subject to justification of a legitimate reason relating to your particular situation. We will then cease the processing in question unless there are compelling legitimate grounds for continuing it in accordance with the applicable regulations.
The right to define directives concerning the fate of your data after your death allows you to make known your instructions concerning the conservation, deletion and communication of your personal data after your death.
The right to portability means that you can ask us, under the conditions laid down by the applicable regulations, to receive your personal data in a structured, commonly used and machine-readable format and to transmit it to you, or to ask us to transmit it directly to a third party of your choice where this is legally and technically possible.
Where we process your personal data on the basis of your consent, you also have the option of withdrawing your consent at any time by contacting the addresses indicated in the ‘How to contact us’ section or by clicking on the unsubscribe link in each of our communications.
However, the withdrawal of your consent does not call into question the validity of the processing carried out prior to this withdrawal.
VI. Updates to this privacy policy
Greenland Organic reserves the right at any time to modify or update, in whole or in part, this privacy policy, due to changes in the regulations applicable to the protection of personal data or the data processing carried out.
Any substantial changes to the Privacy Policy will be notified to you by e-mail when you have provided us with a valid e-mail address and will be published on the website. We recommend that you regularly read this Policy so that you are fully aware of our commitments in terms of security and protection of your personal data.
VII. How to contact us
If you have any questions, comments or suggestions, please contact us by visiting the contact us page or by submitting them to [email protected].
Or by post to Greenland Organic, C/El Puente s/n, 29560 PIZARRA, (MÁLAGA).
If you are not satisfied with Greenland Organic’s response to a request to exercise your rights in accordance with Article V above, or if you wish to report a breach of the applicable data protection regulations, you have the right to lodge a complaint with the CNIL by post (CNIL – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07) or on its website (www.cnil.fr), or with the data protection authority of the country in which you usually reside or work.