"00 Seeds" is deeply committed to compliance with Spanish and European regulations on personal data protection, and guarantees full compliance with the obligations set forth, as well as the implementation of the security measures set forth in the General Data Protection Regulation (GDPR) (EU) 2016/679, of 27 April, and in Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights (LOPD and GDD, hereinafter LOPD).

In accordance with these regulations, we inform you that the use of our website may require you to provide certain personal data through registration or contact forms, or by sending emails, and that these will be processed by ".00 SeedsResponsible for the processing, whose details are:

• Company name: Flower Seeds Trading, S.L.
• VAT NUMBER: B73845919
• Registered OfficeAddress : C/ Nicolas Ortega Pagan, 5 bajo, 30003, Murcia
• Telephone: 968 629 309
• eMail: info@00seeds.com

Collection and Processing of Personal Data

Personal data is any information relating to a person: name, email, address, telephone number, NIF/NIE... In addition, when a User visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by their Internet access provider.

"00 Seeds", as Data Controller, has the duty to inform the Users of its website about the collection of personal data that may be carried out, either by sending an e-mail or by filling in the forms included in the website.

Only the data necessary to carry out the contracted service, or to be able to respond appropriately to the request for information made by the User will be obtained. The data collected are identifying data and correspond to a reasonable minimum in order to be able to carry out the activity carried out. In particular, no specially protected data is collected at any time. Under no circumstances will the data be used for any purpose other than that for which it was collected.

Contact forms/email

Purpose: To answer your request for information made through our contact form(s).

LegitimationThe legal basis for this processing is the consent of the User, which may be revoked at any time.

Transfer of dataPersonal data will be processed through servers operated by OVHwhich shall be considered as the Data Processor.

Registration/registration forms customer/contracting

Purposes:

• Manage your User registration on our website.
• Manage purchases made.
• Provide information on the processing and status of purchases.
• Historical record of purchases made on our website.
• Comments and content management.
• Sending communications via email and/or telephone, in order to inform the User of possible incidents, errors, problems and/or status of orders.

LegitimationThe legal basis for this processing is the performance of a contract.

Transfer of data00 Seeds" will not transfer or communicate your data to any third party, except in the cases legally foreseen or when it is strictly necessary for the provision of a service. Specifically, the data may be transferred to:

• Technology or IT service providers.
• Payment service providers.
• Courier and parcel companies.
• Third parties or intermediaries, as service providers, operating in our own name (agency, consultancy, etc.).

The transfer of data will take place with the strictest confidentiality, using the necessary measures, such as the signing of confidentiality contracts, or adherence to their privacy policies established on their respective websites. The User may refuse the transfer of his/her data to the Data Processors, by means of a written request, by any of the aforementioned means.

Furthermore, in those cases in which it is necessary, Customer data may be transferred to certain bodies, in compliance with a legal obligation: Spanish Tax Agency, banks, Labour Inspectorate, etc.

Feedback form

Purpose: make a comment or review for publication on the website.

LegitimationThe legal basis for this processing is the consent of the User, which may be revoked at any time.

Transfer of dataPersonal data will be processed through the servers of this website, managed by OVHwhich shall be considered as the Data Processor.

Minors

Only persons over 14 years of age may provide personal data on this website. As required by the LOPD and GDD, in the case of children under 14 years of age, the consent of their parents or guardians is a mandatory condition for us to process their personal data.

On the other hand, only persons over 18 years of age may contract our services. In the case of minors under 18 years of age, the consent of their parents or legal guardians is a mandatory condition for us to be able to provide the services offered, unless the minor is emancipated.

User Registration

When the User registers through the relevant form, the information we collect includes:

• Name and surname
• Email and/or telephone
• Shipping addresses
• IP
• Username/password

In addition, the User must accept the Terms and Conditions of Contract, set out in another section of the website.

The User must also provide a password, which must meet certain security requirements. They do not expire. To recover the password, the User must go to the specific recovery form and enter their email address to continue with the process and be able to modify it, by clicking on the link that will be sent to the email address entered. The User is responsible for keeping his/her password confidential, as well as for all the uses made of it. You must notify "00 Seeds" of any unauthorised use of your account or password as soon as possible.

The User, once registered, has access to a private panel, where he/she can view certain contents, register purchases made, etc. They can also manage their account options, such as their password or user data.

The User may receive the following notifications:

• When registering on the platform (account validation email).
• When making purchases, such as proof of purchase, incidents, shipments made, etc.
• For comments made, and responses to them.
• By password recovery (specified in the previous field).
• When unsubscribing or deleting the account.

Security measures

Users of the "00 Seeds" website are informed that the technical and organisational security measures available to us have been adopted to prevent the loss, misuse, alteration, unauthorised access and theft of data, and to guarantee the confidentiality, integrity and quality of the information contained therein, in accordance with the provisions of current legislation on data protection. The personal data collected in the forms are processed only by the staff of "00 Seeds" or the designated data processors.

The "00 Seeds" Website also has SSL encryption, which allows the User to securely send their personal data through the contact or registration forms on the website.

Veracity of the data

The User declares that all the data provided by him/her are true and correct and undertakes to keep them up to date. The User shall be responsible for the veracity of his/her data and shall be solely liable for any disputes or litigation that may arise as a result of the falsity of such data. It is important that, so that we can keep the personal data up to date, the User informs "00 Seeds" whenever there has been any change in them.

Transfer of data

"00 Seeds" will not transfer or communicate your data to any third party, except in the cases provided for by law or when the provision of a service implies the need for a contractual relationship with a Data Processor. Thus, the User accepts that some of the personal data collected may be provided to these Data Processors (payment platforms, agencies, intermediaries, etc.), when this is necessary for the effective performance of a contracted service or purchased product. The User also accepts that, in the case of the provision of services, these may be totally or partially subcontracted to other persons or companies, who will be considered as Data Processors, with whom the corresponding confidentiality contract has been agreed, or who have adhered to their privacy policies, established on their respective websites. The User may refuse the transfer of his/her data to the Data Processors, by means of a written request, by any of the aforementioned means.

Furthermore, in those cases in which it is necessary, Customer data may be transferred to certain bodies, in compliance with a legal obligation: Spanish Tax Agency, banks, Labour Inspectorate, etc.

Exercise of User Rights

The LOPD and GDD and the RGPD grant interested parties the possibility of exercising a series of rights related to the processing of their personal data. To do so, the User must contact us, providing documentation proving their identity (ID card or passport), by email to info@00seeds.com, or by written communication to the address that appears in our Legal Notice. Said communication must include the following information: name and surname of the User, the purpose of the request, address and supporting data.

The exercise of rights must be carried out by the User him/herself. However, they may be exercised by a person authorised as the User's legal representative, providing the documentation accrediting such representation.

The User may request the exercise of the following rights:

• Right to request the access to personal data, which is the right to obtain information on whether their own personal data are being processed, the purpose of the processing which, where applicable, is being carried out, as well as the information available on the origin of such data and the communications made or envisaged of the same.
• Right to request your rectificationif the personal data is incorrect or inaccurate, or deletion of data that proves to be inadequate or excessive.
• Right to request the limitation of their processing, in which case only the data strictly necessary for the exercise or defence of claims will be kept by "00 Seeds".
• Right to object to the processing: this refers to the data subject's right not to have his or her personal data processed or to cease processing in those cases in which his or her consent is not necessary for the processing, in the case of commercial prospecting files or for the purpose of taking decisions regarding the data subject and based solely on the automated processing of his or her data, unless for legitimate reasons or for the exercise or defence of possible claims, the data must continue to be processed.
• Right to portability Data portability: in case you want your data to be processed by another company, "00 Seeds" will provide you with the portability of your data in an exportable format.

Where consent has been given for a specific purpose, the User has the right to withdraw the consent at any timewithout affecting the lawfulness of processing based on consent prior to its withdrawal.

We undertake to execute all these rights within the maximum legal deadline (1 month).

If a User considers that there is a problem with the way in which "00 Seeds" is handling his/her data, he/she can address his/her complaints to the Security Manager or to the corresponding data protection authority, being the Spanish Data Protection Agency the one indicated in the case of Spain.

Data retention

The personal data of Users who use the contact form or send us an email requesting information will be processed for the time strictly necessary to respond to the request for information, or until the consent given is revoked.

The Customer's personal data will be processed until the end of the contractual relationship. The period of conservation of personal data shall be the minimum necessary, and may be kept until the end of the contractual relationship:

• 4 years: Law on Offences and Penalties in the Social Order (obligations regarding affiliation, registrations, cancellations, contributions, payment of wages...); Arts. 66 ff. of the General Tax Law (accounting books...)
• 5 years: Art. 1964 Civil Code (personal actions without special time limit)
• 6 years: Art. 30 Commercial Code (accounting books, invoices...)
• 10 years: Art. 25 Prevention of Money Laundering and Terrorist Financing Act.
• No deadline: disaggregated and anonymised data.

In the case of processing candidate data (C.V.), "00 Seeds" may keep their curriculum vitae stored for a maximum of two years in order to incorporate it into future calls for applications, unless the candidate states otherwise.

Personnel Selection

Applicants who send electronic communications to "00 Seeds", with the aim of accessing the personnel selection processes of the manager, authorise us to analyse the documents sent (for example, the C.V.), all content that is directly accessible through Internet search engines (for example, Google), the profiles maintained in professional social networks (for example, LinkedIn), the data obtained in the access tests and the information revealed in the job interview, with the aim of assessing their candidacy and being able, where appropriate, to offer them a job. In the event that the candidate is not selected, "00 Seeds" may keep their C.V. stored for a maximum of two years, in order to incorporate it into future calls for applications, unless the candidate states otherwise. The legal basis that legitimates this treatment will be the consent of the interested party, which may be revoked at any time.

Confidentiality

The information provided by the User shall, in any case, be considered confidential, and may not be used for purposes other than those described herein. "00 Seeds" undertakes not to disclose or reveal information about the User's claims, the reasons for the advice requested or the duration of its relationship with the User.

Validity

This privacy and data protection policy has been drawn up by ExpertosLOPD®, a law firm specialising in data protection for online shopsThe data subject is responsible for reading the updated document in order to know his or her rights and obligations at any given time.