1. Data Controller
In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and relevant statutory data protection laws, we inform you that personal data collected through this website will be processed by:
2. Purposes and Legal Basis for Processing
We process information submitted by users for the following legitimate purposes:
- Handling inquiries and private visit requests: Managing inquiries submitted via our contact form or direct email, scheduling on-site agronomic assessments, and delivering personalized landscape consultations.Legal basis: The express consent of the user by submitting the form and checking the mandatory consent box (Art. 6(1)(a) GDPR).
- Pre-contractual and contractual management: Preparing tailored botanical blueprints, cost estimates, and executing landscape engineering projects.Legal basis: Performance of a contract or steps prior to entering into a contract (Art. 6(1)(b) GDPR).
- Compliance with legal obligations: Meeting applicable tax, accounting, or administrative requirements.Legal basis: Compliance with a legal obligation to which the controller is subject (Art. 6(1)(c) GDPR).
3. Data Retention Period
Personal data will be stored only for the duration necessary to fulfill the request, assess your property, or maintain the commercial relationship. Once concluded, data will be safely blocked during the statutory limitation periods required by European and Spanish civil, tax, and commercial regulations.
4. Data Recipients and International Transfers
We do not sell, rent, or transfer personal data to third parties without prior explicit authorization, except when mandated by statutory law or judicial order.
To deliver reliable and secure website hosting and automated form routing, we work with technological infrastructure providers (such as Netlify, Inc.), operating under strict Data Processing Agreements incorporating standard contractual clauses approved by the European Commission (Decision (EU) 2021/914).
5. Your Rights as a Data Subject
Under the GDPR, you have the right to exercise the following protections at any time:
- Right of Access: Request confirmation on whether we process your personal data and obtain a copy.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure (Right to be Forgotten): Request deletion of your personal data when no longer required for initial purposes.
- Right to Object: Object to data processing based on grounds relating to your particular situation.
- Right to Restriction of Processing: Request suspension of data processing in legally specified circumstances.
- Right to Data Portability: Receive your provided data in a structured, machine-readable format.
You may exercise any of these rights by sending a written notice accompanied by a valid identification copy to info@organicmatters.es with the subject "Data Protection - Exercise of Rights".
You also have the right to lodge a complaint with a supervisory authority, including the Spanish Data Protection Agency (AEPD) at www.aepd.es, or your local EU national data protection authority.
6. Security and Confidentiality
Organic Matters employs robust technical and organizational security measures to protect your personal information against unauthorized access, loss, alteration, or disclosure, utilizing industry-standard SSL/TLS cryptographic encryption and strict confidentiality standards.