Privacy Policy

1. General Information

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, or "GDPR"), as well as Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), users of the website www.growlabstore.com are informed about the way their personal data is collected, used, and protected.

This Privacy Policy applies to the processing of data carried out through the website owned by:

Atlas Green Trade S.L.U.
NIF: B75858944
Address: Cl. Pau Claris, 163 3 - 08037 Barcelona (Barcelona)
Contact email: info@growlabstore.com

 

2. Personal Data Collected

We collect and process the following personal data:

  • Identifying data: first and last name, postal address, phone number, email address.
  • Billing and shipping data: billing address, delivery address, tax identification number (if applicable).
  • Browsing data: IP address, browser type, operating system, browsing time, and pages visited (via cookies).
  • Payment data: processed through secure payment gateways; the site owner has no direct access to bank or card details.

 

3. Purpose of Processing

Personal data are processed for the following purposes:

  • To manage and process orders and purchases made through the online store.
  • To handle information or consultation requests sent via email or contact forms.
  • To manage the sending of commercial communications, only with the user’s prior consent.
  • To comply with applicable legal, tax, and accounting obligations.
  • To prevent fraud and ensure the security of the website and transactions.

 

4. Legal Basis for Processing

The processing of personal data is based on the following legal grounds:

  • Performance of a contract: for the purchase of products and order management.
  • Consent of the data subject: for sending commercial communications or using non-essential cookies.
  • Compliance with legal obligations: related to invoicing, taxation, or fraud prevention.
  • Legitimate interest: to improve the user experience and the security of the website.

 

5. Data Retention

Personal data will be stored for the following periods:

  • For as long as necessary to fulfill the purpose for which they were collected.
  • As long as the user does not withdraw consent (in the case of commercial communications).
  • Afterwards, data may be stored in a blocked state to comply with legal obligations or for defense against possible claims.

 

6. Data Recipients

Personal data will not be disclosed to third parties, except in the following cases:

  • Legal obligation (e.g., to tax or judicial authorities).
  • Service providers acting as data processors, such as:
    • Logistics and transport companies (for shipments)
    • Hosting and software providers
    • Payment gateways (Stripe, PayPal, etc.)

In no case will data be transferred to third parties for commercial purposes without the user’s consent.

 

7. International Transfers

In general, no international transfers of data are carried out. However, if one of the service providers is located outside the European Economic Area (EEA), it will be ensured that an adequate level of protection is provided through:

  • European Commission adequacy decision.
  • Standard contractual clauses approved by the Commission.
  • Appropriate certification mechanisms.

 

8. User Rights

The user may exercise the following rights:

  • Right of access: to know what data we process about them.
  • Right of rectification: to correct inaccurate or incomplete data.
  • Right of erasure: to request the removal of their data.
  • Right to object: to object to the processing of their data for legitimate reasons.
  • Right to restriction of processing: to request a limitation on the use of their data.
  • Right to data portability: to receive their data in a structured format and transmit it to another controller.

The exercise of these rights is free of charge and can be carried out by sending an email to: info@growlabstore.com, indicating the right to be exercised and attaching a copy of an identity document.

 

9. Data Security

Atlas Green Trade S.L.U. implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Use of secure connections (SSL)
  • Authentication systems and access control
  • Regular backups
  • Site monitoring and prevention of unauthorized access

 

10. Cookie Policy

The website uses cookies to improve the user’s browsing experience. Full details can be found in our Cookie Policy.

Prior consent is required for the use of non-essential cookies, via a GDPR-compliant banner.

 

11. Changes to the Privacy Policy

We reserve the right to modify this privacy policy to adapt it to legislative or regulatory changes. We recommend reviewing this section periodically.

 

Last update: April 19, 2025