Get your discount on your first purchase!
Your Cart

No products in the cart.

Privacy Policy

The Data Controller informs you about its Privacy Policy regarding the processing and protection of personal data of users and customers that may be collected while browsing, purchasing a product or contracting a service through the Website: http://northspices.com

In this regard, the Data Controller guarantees compliance with current regulations on the protection of personal data, reflected in Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD GDD). It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (GDPR).

The use of the Website implies acceptance of this Privacy Policy as well as the conditions included in the Legal Notice.

Data Controller Identity

  • Data Controller:  NORTH SPICES DISTRIBUTION CBD SOCIEDAD LIMITADA.
  • VAT Number (NIF): B67697953
    Registered in the Bizkaia Mercantile Registry, volume 6047, book 0, section 8, folio 32, sheet BI, entry .
  • Address:  CALLE ANBROSIO MEABE KALEA, 7 BAJO. 48200, DURANGO,, Bizkaia – Spain.
  • Email:  info@northspices.com
  • Contact Phone:  623215859
  • Website:  https://northspices.com/

Principles applied to data processing

When processing your personal data, the Data Controller will apply the following principles, which comply with the requirements of the new European General Data Protection Regulation (GDPR):

  • Principle of lawfulness, fairness, and transparency: The Data Controller will always require consent for the processing of personal data, which may be for one or several specific purposes about which the Data Controller will inform the User in advance with absolute transparency.
  • Principle of data minimization: The Data Controller will request only the data strictly necessary for the purpose or purposes for which it is requested.
  • Principle of storage limitation: The Data Controller will keep the personal data collected for the time strictly necessary for the purpose or purposes of the processing. The Data Controller will inform the User of the corresponding retention period according to the purpose.
    In the case of subscriptions, the Data Controller will periodically review the lists and remove those records that have been inactive for a considerable period of time.
  • Principle of integrity and confidentiality: The personal data collected will be processed in such a way that their security, confidentiality and integrity are guaranteed.
    The Data Controller takes the necessary precautions to prevent unauthorized access or misuse of users’ data by third parties.

Obtaining personal data

To browse the Website, you do not need to provide any personal data.

The cases in which you do provide your personal data are the following:

  • When contacting through the contact forms or sending an email.
  • When posting a comment on an article or page.
  • When purchasing a product or contracting a service.
  • When subscribing to a subscription form or newsletter managed by the Data Controller using MailChimp.
  • When subscribing to a subscription form or newsletter managed by the Data Controller using Active Campaign.

Rights

The Data Controller informs you that regarding your personal data, you have the right to:

  • Request access to the stored data.
  • Request its rectification or erasure.
  • Request the restriction of its processing.
  • Object to its processing.
  • Request the portability of their data.

The exercise of these rights is personal and therefore must be exercised directly by the interested party, by addressing the request directly to the Data Controller. This means that any customer, subscriber or collaborator who has provided their data at any time may contact the Data Controller to ask for information about the data stored and how it has been obtained, request its rectification, request the portability of their personal data, oppose the processing, limit its use or request the deletion of such data from the Data Controller’s files.

To exercise your rights, you must send your request along with a photocopy of your National Identity Document or equivalent to the following email address: info@northspices.com

The exercise of these rights does not include any data that the Data Controller is required to retain for administrative, legal or security purposes.

You have the right to effective judicial protection and to lodge a complaint with the supervisory authority, in this case, the Spanish Data Protection Agency (Agencia Española de Protección de Datos), if you consider that the processing of personal data concerning you infringes the Regulation.

Purpose of the processing of personal data

When you connect to the Website to send an email to the Owner, write a comment on an article or page, subscribe to their newsletter, or contract a product or service, you are providing personal information for which the Owner is the data controller. This information may include personal data such as your IP address, first and last name, physical address, email address, phone number, and other information. By providing this information, you give your consent for your information to be collected, used, managed, and stored by — NORTH SPICES DISTRIBUTION CBD SOCIEDAD LIMITADA — only as described on the pages:

The personal data and the purpose of processing by the Owner differ depending on the information capture system:

  • Contact forms: The Data Controller requests personal data which may include: first and last name, email address, phone number and website address in order to respond to Users’ enquiries, provide information and demonstrations of the Data Controller’s products and services, including quotations.
    For example, the Data Controller uses this data to respond to messages, questions, complaints, comments or concerns that Users may have regarding the information included on the Website, the products and services provided through the Website, the processing of personal data, issues relating to the legal texts included on the Website, as well as any other queries the User may have that are not subject to the conditions of the Website or the contracting conditions.
  • Comment forms: The Data Controller requests personal data which may include: first and last name, email address, and website address in order to respond to Users’ comments.
  • Product or service contracting forms: The Data Controller requests personal data which may include: first and last name, identity document (tax identification number, foreigner identification number, passport or residence permit), email address, postal address, phone number and payment details (payment methods or banking details) in order to maintain a business relationship with the User, fulfil order deliveries, provide the contracted services and issue invoices and collect payment for the contracted products or services.
  • Content subscription forms: The Data Controller requests the following personal data: first and last name, email address, phone number and website address to manage the subscription list, send newsletters, promotions and special offers. The personal data provided to the Data Controller will be stored on the servers of The Rocket Science Group LLC d/b/a, based in the USA. (Mailchimp).
  • Content subscription forms: The Data Controller requests the following personal data: first and last name, email address, phone number and website address to manage the subscription list, send newsletters, promotions and special offers. The personal data provided to the Data Controller will be stored on the servers of ActiveCampaign, LLC (“ActiveCampaign”), based in the USA.

There are other purposes for which the Controller processes personal data:

  • To ensure compliance with the conditions set out in the Legal Notice page and with applicable law. This may include the development of tools and algorithms that help the Website guarantee the confidentiality of the personal data it collects.
  • To support and improve the services offered by this Website.
  • To manage social media. The Controller has a presence on social media. If you become a follower of the Controller’s social media, the processing of personal data will be governed by this section, as well as by those conditions of use, privacy policies and access regulations that belong to the applicable social network in each case and that you have previously accepted.
    You can consult the privacy policies of the main social media at these links:The Controller will process your personal data in order to properly manage its presence on the social network, inform you of its activities, products or services, as well as for any other purpose permitted by social media regulations. Under no circumstances will the Controller use the profiles of followers on social media to send advertising individually.

Security of personal data

To protect your personal data, the Data Controller takes all reasonable precautions and follows industry best practices to prevent its loss, misuse, unauthorized access, disclosure, alteration, or destruction.

Your data may be included in a mailing list file, for which the Data Controller is responsible for its management and processing. The security of your data is guaranteed, as the Data Controller takes all necessary security measures and assures you that your personal data will only be used for the purposes stated.

Content from other websites

The pages on this website may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves exactly the same way as if you had visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking code, and monitor your interaction using that code.

Cookie Policy

For this website to function correctly it needs to use cookies, which is information stored in your web browser.

Legitimacy for data processing

The legal basis for processing your data is:

  • The consent of the interested party.
  • Execution of the contract or the application of pre-contractual measures with the data subject, in order to provide them with a product or service purchased from the Controller.
  • To comply with legal obligations.

Categories of personal data

The categories of personal data processed by the Controller are:

  • Identification data.
  • No special categories of data are processed.

Retention of personal data

The personal data provided to the Data Controller will be retained until the data subject requests its deletion.

Recipients of personal data

  • Mailchimp The Rocket Science Group LLC d/b/a, based in the USA.
    More information at: https://mailchimp.com
    The Rocket Science Group LLC d/b/a processes the data for the purpose of providing its email marketing services to the Data Controller.
  • ActiveCampaign ActiveCampaign, LLC (“ActiveCampaign”), based in the USA.
    More information at: https://activecampaign.com
    ActiveCampaign, LLC processes the data for the purpose of providing its email marketing services to the Data Controller.
  • Google Analytics is a web analytics service provided by Google, Inc., a Delaware company whose head office is at 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, United States (“Google”).
    Google Analytics uses “cookies”, which are text files placed on your computer, to help the Data Controller analyze how Users use the Website. The information generated by the cookie about your use of the Website (including your IP address) will be directly transmitted to and stored by Google on servers in the United States.
    More information at: https://analytics.google.com
  • Google AdSense is a set of advertising services provided by Google, Inc., a Delaware company whose head office is at 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, United States (“Google”).
    AdSense uses cookies to improve advertising, target it based on content that is relevant to users, and improve campaign performance reports.
    More information at: https://www.google.com/adsense

You can check how Google manages privacy regarding the use of cookies and other information on Google’s Privacy Policy page: https://policies.google.com/privacy?hl=es

You can also see a list of the types of cookies used by Google and its partners and all information related to their use of advertising cookies at:

Web Browsing

When browsing the Website, non-identifying data may be collected, which may include the IP address, geolocation, a record of how the services and sites are used, browsing habits, and other data that cannot be used to identify you.

The Website uses the following third-party analytics services:

  • Google Analytics.
  • Google AdSense.

The Data Controller uses the information obtained to gather statistical data, analyse trends, manage the site, study browsing patterns and to collect demographic information.

The Data Controller is not responsible for the processing of personal data carried out by the websites that may be accessed through the different links contained on the Website.

Accuracy and truthfulness of personal data

You agree that the data provided to the Data Controller is correct, complete, accurate, and up to date, and that you will keep it duly updated.

As a User of the Website, you are solely responsible for the truthfulness and accuracy of the data submitted to the Website, releasing the Data Controller from any liability in this regard.

Acceptance and consent

As a User of the Website, you declare that you have been informed of the conditions regarding the protection of personal data, and you accept and consent to their processing by the Data Controller in the manner and for the purposes indicated in this Privacy Policy.

To contact the Data Controller, subscribe to a newsletter, or post comments on this Website, you must accept this Privacy Policy.

Changes to the Privacy Policy

The Owner reserves the right to modify this Privacy Policy to adapt it to new legislative or case-law developments, as well as to industry practices.

These policies will remain in force until they are replaced by others duly published.

Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.