Skip to content

Privacy Policy

This policy explains how Agropharm Projects, S.L. processes the personal data collected through the website agropharm.com, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 on the protection of personal data and the guarantee of digital rights (LOPDGDD) and Spanish Law 34/2002 on information society services and electronic commerce (LSSI-CE).

1. Who is the data controller?

  • Controller: Agropharm Projects, S.L., owner of the Agropharm® trademark
  • Tax ID (NIF): B30927651
  • Address: C/ Los Alfareros, 70, 14540 La Rambla (Córdoba), Spain
  • Registration details: Mercantile Registry of Córdoba, volume 2832, folio 66, sheet CO-43306, 2nd entry
  • Data protection contact: info@agropharm.com

2. What data do we process, for what purpose and on what legal basis?

a) Contact form

  • Data: name, company, email address, telephone and message (name, email address and message are mandatory; without them we cannot deal with your enquiry), the language of the website and, for the security of the form and as proof of your consent, the IP address, the page from which the form is submitted, the browser used (user-agent), the date and time of submission and the Google reCAPTCHA score.
  • Purpose: to deal with your enquiry or request for information or a quotation and, where applicable, to manage any pre-contractual relationship arising from it.
  • Legal basis: your consent (Art. 6.1.a GDPR) and, where the enquiry relates to our services, the taking of steps at your request prior to entering into a contract (Art. 6.1.b GDPR). The technical submission data are processed on the basis of our legitimate interest in protecting the form against spam and abuse and in being able to demonstrate the consent given (Arts. 6.1.f and 7.1 GDPR).

b) Commercial communications (optional tick box on the contact form)

  • Data: name, company and email address, together with proof of consent (whether or not it was given, date and version of this policy).
  • Purpose: to send you commercial information by email about Agropharm®’s products, services, projects and news.
  • Legal basis: your consent (Art. 6.1.a GDPR and Art. 21 LSSI-CE), given by ticking a separate, optional box that is unticked by default. Not ticking it has no effect whatsoever on how we deal with your enquiry. You may withdraw your consent at any time using the unsubscribe link included in every email or by writing to info@agropharm.com.

c) Job application form

  • Data: name, email address, telephone, message and CV (PDF or Word) with the data you include in it, plus the same technical submission data indicated in section a). Please do not include special categories of data in your CV (health, beliefs, ethnic origin, etc.).
  • Purpose: to assess your application and manage your participation in Agropharm®’s recruitment processes.
  • Legal basis: your consent (Art. 6.1.a GDPR) and the taking of steps at your request prior to entering into a contract (Art. 6.1.b GDPR).

d) Newsletter

  • Data: first name, surname, telephone and email address, together with proof of consent (date, IP address, subscription page and version of this policy).
  • Purpose: to send you our newsletter by email with news, articles and commercial communications from Agropharm®.
  • Legal basis: your consent (Art. 6.1.a GDPR and Art. 21 LSSI-CE). Your subscription is confirmed by means of a verification email (double opt-in) and you can unsubscribe at any time using the link included in every email.

e) Form protection (Google reCAPTCHA v3)

  • Data: when you submit a form, Google’s reCAPTCHA service analyses technical data about your visit (IP address, browser and device data, interaction with the page and Google cookies) to estimate whether the submission is made by a person or by an automated program. The service is only loaded when you submit a form.
  • Purpose: security and prevention of spam and abusive use of the forms.
  • Legal basis: our legitimate interest in protecting the website and its forms (Art. 6.1.f GDPR). Google processes this information in accordance with its Privacy Policy and its Terms of Service.

f) Web analytics (Google Analytics 4)

  • Data: online identifiers stored in cookies, pages visited, interactions (for example, clicks on telephone and email links or form submissions), device and browser type, language and approximate location.
  • Purpose: to obtain statistics on the use of the website in order to improve it.
  • Legal basis: your consent, given through the cookie panel (Art. 6.1.a GDPR and Art. 22.2 LSSI-CE). No analytics cookies are installed without your consent. You will find the details in our Cookies Policy.

We do not take automated decisions that produce legal effects concerning you or similarly significantly affect you, nor do we carry out profiling for that purpose (Art. 22 GDPR). The anti-spam filter may automatically block a submission it considers automated; if this happens to you, you can contact us at info@agropharm.com or by telephone on +34 957 869 630.

3. How long do we keep your data?

  • Contact form enquiries: 12 months from submission; after that period they are automatically deleted, unless the enquiry has led to a pre-contractual or contractual relationship, in which case we will keep them for as long as that relationship lasts.
  • Commercial communications and newsletter: until you withdraw your consent or unsubscribe. The content of your enquiry is likewise deleted after 12 months. After withdrawal or unsubscription, we will keep proof of the consent and of its withdrawal for 12 months in order to be able to demonstrate compliance with the regulations.
  • Job applications: 12 months from submission, including the CV, after which they are automatically deleted.
  • Cookies: for the periods indicated in the Cookies Policy. Google Analytics keeps data associated with user identifiers for a maximum of 14 months (2 months for event-level data).

When the data are no longer necessary, they will be kept duly blocked, available exclusively to judges and courts, the Public Prosecutor’s Office and the competent public authorities, for the limitation period of any liabilities that may arise from the processing (Art. 32 LOPDGDD), and will then be deleted.

4. Who do we share your data with?

We do not disclose your data to third parties, except where required by law (for example, to judges and courts, law enforcement agencies or the competent public authorities). To provide the service we use the following providers, who access the data as data processors, on behalf of Agropharm® and under a contract that guarantees their confidentiality and security (Art. 28 GDPR):

  • KOMIT, which develops and maintains the website and hosts it on its servers, where the forms database and the CVs are stored.
  • Our email provider, through which we receive the form notifications at info@agropharm.com (contact) and rrhh@agropharm.com (jobs).
  • Intuit Inc. (Mailchimp), United States, for managing the newsletter and sending commercial communications.
  • Google Ireland Limited (with the possible involvement of Google LLC, United States), for Google Analytics and Google Tag Manager. In the case of Google reCAPTCHA, Google processes the data under its own terms, as indicated in section 2.e).

5. International data transfers

The form data are stored on servers located in Spain. Some providers (Intuit Inc. – Mailchimp and Google LLC) are located in the United States or may access the data from there. These transfers are covered by the European Commission’s adequacy decision on the EU-US Data Privacy Framework, under which these companies are certified, and, additionally, by the standard contractual clauses approved by the European Commission (Art. 46 GDPR). You can request more information about these safeguards at info@agropharm.com.

6. What are your rights?

You may exercise the following rights at any time:

  • Access: to find out whether we process your data and obtain a copy of them and information about the processing.
  • Rectification: to correct inaccurate data or complete incomplete data.
  • Erasure: to request that we delete your data when, among other reasons, they are no longer necessary for the purposes for which they were collected.
  • Objection: to object to processing based on our legitimate interest, on grounds relating to your particular situation, and in any case to processing for direct marketing purposes.
  • Restriction of processing: to ask us to keep your data without processing them in certain cases (for example, while their accuracy is being verified).
  • Portability: to receive the data you have provided to us in a structured, commonly used and machine-readable format, and to have us transmit them to another controller, where the processing is based on your consent or on a contract and is carried out by automated means.
  • Withdrawal of consent: to withdraw the consent given at any time, without affecting the lawfulness of processing carried out before its withdrawal.

How to exercise them: by writing to info@agropharm.com or by post to Agropharm Projects, S.L., C/ Los Alfareros, 70, 14540 La Rambla (Córdoba), Spain, with the reference “Data protection”, stating the right you wish to exercise. If we have reasonable doubts about your identity, we may ask you for additional information to confirm it. We will reply within one month, which may be extended by two further months in complex cases, in which case we would inform you. To stop receiving commercial communications, simply use the unsubscribe link included in every email.

Complaints: if you consider that we have not processed your data correctly or you have not obtained satisfaction in exercising your rights, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) (C/ Jorge Juan, 6, 28001 Madrid, Spain; www.aepd.es).

7. Data Protection Officer

Agropharm Projects, S.L. is not required to appoint a Data Protection Officer (Art. 37 GDPR and Art. 34 LOPDGDD). For any question relating to the processing of your personal data, you can contact info@agropharm.com or the postal address given in section 1.

8. Minors

This website is aimed at companies and professionals and is not intended for minors. We do not knowingly process data of children under 14 (Art. 7 LOPDGDD); if you are under that age, please do not provide us with your data.

9. Accuracy of data

You guarantee that the data you provide to us are true and up to date. If you provide us with data of third parties (for example, other people in your company), you must have informed them beforehand and obtained their authorisation.

10. Security

We apply technical and organisational measures appropriate to the risk to protect your data: encrypted connection (HTTPS), access restricted to authorised personnel, private storage of CVs (not publicly accessible) and automatic deletion of data when the retention periods expire.

11. Changes to this policy

We may update this policy to adapt it to changes in legislation or in the processing we carry out. We recommend that you review it periodically; significant changes will be communicated to you by appropriate means where applicable.

Newsletter

Stay up to date with Agropharm

News about our projects, regulations and the cannabis industry. No spam: unsubscribe at any time.