Privacy Policy

1. Data Controller

In the following, “the Data Controller”. This policy explains how we handle your personal data of our clients, users, and contacts, in accordance with Regulation (EU) 2016/679 (GDPR), the Organic Law 3/2018 (LOPDGDD) and the Law 34/2002 (LSSI-CE).

2. What personal data we handle

Depending on how you interact with the Data Controller, we can handle:

• Identifying and contact data: name, surname, NIF/CIF, address, email, phone.
• Professional data: company, position.

We do not request data from special categories (health, ideology, religion, etc.)

3. Why we use your data and what legal basis

We do not make automated decisions or profile you with legal effects.

4. How long we keep your data

• Queries and contacts: the time necessary to respond to your request and, at most, 5 years.

Once these periods have expired, the data is blocked or deleted securely.

5. To whom we communicate your data

We do not sell or transfer your data to third parties except for legal obligations. They can access them:

• Public administrations (Tax Agency, Social Security, judges and courts) when there is a legal obligation.
• Providers who act as processors of the treatment, with a contract according to Article 28 GDPR:
  • Web hosting and email: Cloudflare and Gmail

6. International transfers

• Transfers to third parties: Some providers (Gmail, headquartered in the USA) may involve transfers outside the EEE, protected by the Commission Europea / EU-US Privacy Shield clauses.

7. Your rights

You can exercise the following rights at any time:

• Access: to know what personal data we handle.
• Correction: to correct inaccurate or incomplete data.
• Erasure: to request that we delete your data.
• Opposition: to object to treatment based on legitimate interest or for marketing purposes.
• Limitation: to request that we suspend treatment in certain cases.
• Portability: to receive your data in a structured and commonly used format.
• Withdrawal of consent at any time, without affecting the validity of the treatment before consent.

How to exercise them: send an email to [email protected] or a letter to the responsible address, indicating the right you wish to exercise and attaching a copy of your ID document. We will respond within a maximum of one month from the date of receipt of the request.

8. Right to lodge a complaint with the supervisory authority

If you consider that the treatment of your data is not in compliance with the law, you can lodge a complaint with the Spanish Agency for Data Protection (AEPD): www.aepd.es · C/ Jorge Juan, 6, 28001 Madrid.

9. Security

The Data Controller applies appropriate technical and organizational measures to protect your data from unauthorized access, loss, alteration or destruction.

10. Children’s Privacy

Our services are directed exclusively to individuals aged 14 and older. Therefore, we do not knowingly collect personal data from anyone under this age. If you are under 14, please do not attempt to register for or use our services. If we become aware that we have collected data from a child under 14 without proper authorization, we will take immediate steps to delete that information.

11. Cookies

This site does not use cookies.

12. Accuracy of data

By providing us with your data, you guarantee that it is accurate and you commit to informing us of any modifications.

13. Modifications to this policy

The Data Controller can update this policy to adapt it to legislative changes or in their activities. We will always publish the current version on https://www.urbaagro.com/politica-privacidad/, indicating the date of the last update.