Register

Contact us

English

Spanish

Privacy Policy

Below, we inform you about the privacy policy that will be applied in cases where the data subject, through navigation and/or use of the Website at https://www.orygen.earth/ (hereinafter, the "Website"), provides us with their personal data. We want to inform you about our updated Privacy Policy and the purpose of the personal data you provide us, including the data we collect by you browsing our Website.

01. Identification of the Controller

Owner: ORYGEN EARTH PROJECT, S.L. (hereinafter, the "Controller")

  • Registered Office: Calle José Ortega y Gasset, 25, 28006, Madrid

  • Registration Details: Mercantile Registry of Madrid, T 44252, F 56, S8, HM 780157, I/A 1

  • CIF: B-72707805

  • E-mail: support@orygen.earth

02. Information and Consent

In accordance with the provisions of the EU General Data Protection Regulation 679/2016 (hereinafter, "GDPR") and Organic Law 3/2018, of December 5, on Data Protection and Guarantee of Digital Rights (hereinafter, "LOPDGDD") by accepting this Privacy Policy, the web data subject (hereinafter, the "Data Subject") GIVES HIS informed, express, free, and unequivocal CONSENT to process the personal data collected through the Website, either through forms enabled for this purpose or through information collected by cookies. Likewise, the Data Subject consents that this data be processed by the Controller to provide its services by applying the organizational and security measures required by the GDPR. All personal data requested from the Data Subject on the Website are mandatory, and it is not possible to provide the service without the corresponding data processing by the Controller. However, navigation on the Website is free.

The Data Subject guarantees that the personal data provided to the Controller are true and accurate, so the Controller will not be responsible for any incident arising from the inaccuracy or falsehood of the information provided by the Data Subjects, beyond the possibility that the Data Subject has to exercise their right to rectification. In the event that the Data Subject provides us with data from third parties, as the data controller or processor, they will be responsible for complying with all applicable data protection regulations. In addition, the Data Subject guarantees that they have obtained all legally necessary consents, authorizations, and/or approvals before including third-party personal data on the Website.

03. Origin, Purpose, and Legal Basis

The personal data of the Data Subject, or of third parties, that are transferred by the Data Subject, will be treated confidentially and will be incorporated into the corresponding processing activity of the Controller. The processing activities carried out by the Controller are the following:

ACTIVITY: CONTACT, QUERIES, COMPLAINT MANAGEMENT, PROVISION OF SERVICES

  • ORIGIN: From the Data Subject themselves through sending emails to the indicated address, the form, or by using any telephone number or email address provided through the Website.

  • LEGAL BASIS: General Data Protection Regulation, in particular. Art. 6.1.b); the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

  • PURPOSES OF PROCESSING: To address and respond to queries and/or complaints requested by the Data Subject, as well as to provide the contracted services.

  • COLLECTIVE: Natural and/or legal persons

  • DATA CATEGORY: Name, surnames, company name, email address, age, telephone number, as well as the rest of the data that the Data Subject themselves indicates in the body of the message or in the Website forms.

  • RECIPIENTS: No data transfer to third parties is foreseen, except for legal obligation or prior unequivocal and informed consent of the Data Subject.

  • INTERNATIONAL TRANSFER: No international transfer of data is foreseen.

  • RETENTION PERIODS: The data will be kept for the period strictly necessary to fulfill the purpose for which they were collected. In any case, the maximum retention period will be 1 year.

ACTIVITY: CONTRACTING AND DELIVERY OF PERSONALIZED REPORTS

  • ORIGIN: From the data subject themselves through the online purchase form.

  • LEGAL BASIS: General Data Protection Regulation, in particular: Art. 6.1.b): the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

  • PURPOSES OF PROCESSING: To manage the collection and preparation of the requested report, as well as the sending of necessary confirmations and communications for the provision of the service.

  • RETENTION PERIODS: For the time necessary for the provision of the service and the fulfillment of legal obligations (tax, accounting, etc.).

ACTIVITY: SENDING NEWSLETTER AND COMMERCIAL COMMUNICATIONS

  • ORIGIN: From the data subject themselves through the subscription form or by ticking the corresponding box on other forms on the Website.

  • LEGAL BASIS: General Data Protection Regulation, in particular: Art. 6.1.a): the processing is based on the consent of the data subject.

  • PURPOSES OF PROCESSING: To manage the sending of informative and/or commercial communications related to Orygen's products, services, or news.

  • COLLECTIVE: Natural persons who have given their consent.

  • DATA CATEGORY: Name, email address.

  • RECIPIENTS: No data transfer to third parties is foreseen, except for legal obligation. However, to manage the sending of the newsletter, we use the Mailchimp platform, operated by The Rocket Science Group LLC, based in the United States.

  • INTERNATIONAL TRANSFER: The sending of the newsletter is managed through Mailchimp, which implies an international data transfer to the USA. Mailchimp is a member of the Data Privacy Framework between the EU and the USA, which guarantees an adequate level of protection in accordance with Article 45 of the GDPR.

  • RETENTION PERIODS: Until the data subject requests to unsubscribe or withdraws their consent.

04. Data of the Data Subject

The Data Subject guarantees that they are over eighteen (18) years of age and that the data provided is true, accurate, complete, and up-to-date, being responsible for any direct or indirect damage or loss that may be caused as a result of non-compliance with this obligation, beyond the possibility that the Data Subject has to exercise their right to rectification. In the event that the data provided belongs to a third party, the Data Subject guarantees that they have informed said third party of the aspects contained in this document and obtained their authorization to provide their data to the controller for the aforementioned purposes.


The Controller cannot guarantee the absolute invulnerability of the systems, therefore, it assumes no responsibility for damages and losses derived from alterations that third parties may cause in computer systems, electronic documents, or files.

05. Cookies Policy

In accordance with the provisions of the GDPR and Law 34/2002, on Services of the Information Society, all personal data obtained through cookies during the use of the Website will be processed in accordance with the provisions of the Cookies Policy

06. Exercise of Rights

In accordance with the provisions of the GDPR, we inform you that you can exercise your rights of access, rectification, erasure, opposition, data portability, and restriction of processing directly before the Controller. To exercise these rights, the Data Subject can send a message to that effect, indicating their name, surnames, email, ID or passport number, to the following email address: hello@orygen.earth. The Data Subject may also exercise their rights by filing a complaint with the Spanish Data Protection Agency.

07. Acceptance of the Privacy Policy

The Data Subject ACKNOWLEDGES AND ACCEPTS HAVING READ AND UNDERSTOOD this Privacy Policy, the content of which constitutes the entire agreement between the Data Subject and the Controller with respect to the use and processing of their personal information. The Data Subject expressly agrees to be bound by the terms of this Privacy Policy, in its entirety and scope, without exception to any of its provisions. The express acceptance of this document will be essential when the User navigates and/or uses the Website.