Gift of a Multivitamin for orders over 40€.

Free shipping to mainland Spain from 24,95€.

Free shipping to mainland Spain for orders over €60

Your cart

Your cart is empty

Continue shopping

Privacy Policy

  1. IDENTIFICATION AND CONTACT DATA OF THE CONTROLLER

CANRA 2022 SL domiciled at Calle Arequipa 1,28043-Madrid, with VAT no. B72904873, established for an indefinite period on 16 December 2022, under number 6151 of its records, registered in the Trade Registry of Madrid, under volume 44489, folio 190, Section 8, page M783892, entry 1 (hereinafter, “CANRA” or the “Company”) is responsible for the processing of your personal data. This privacy policy provides information on the use that the Company will make of your personal data as a user of the website (“the Website”).

The purpose of this Privacy Policy is to provide information about your rights under the General Data Protection Regulation (GDPR). If you have any questions regarding the processing of your personal data, please contact the Company at the following address: info@ndlprohealth.com

We also wish to inform you that CANRA has a Data Protection Officer, who can be contacted at the following address: info@ndlprohealth.com

  1. REQUIRED AND UPDATED INFORMATION

All fields that appear marked with an asterisk (*) in the forms on the Website must be completed, so that the omission of any of them could make it impossible for you to be provided with the requested services or information.

You must provide truthful information, so that the information provided is always up to date and does not contain errors, you must notify the Company as soon as possible of any modifications and rectifications of your personal data that occur through an email to the address: info@ndlprohealth.com

Furthermore, by clicking on the “I accept” button (or equivalent) incorporated in the aforementioned forms, you declare that the information and data you have provided therein are accurate and truthful.

  1. GENERAL INFORMATION: DESCRIPTION OF THE INFORMATION CONTAINED IN THE PRIVACY POLICY

This privacy policy contains a table identifying the following information for each of the different data processing performed by the Company:

  1. The purposes of the processing of your personal data, namely, the reason why the Company processes your personal data.
  2. The legal grounds that allow the processing of your data by the Company for each of the indicated purposes.
  3. The possible communication of your data to third parties, as well as the cause of said communication. For these purposes, we wish to inform you that we do not transfer your personal data to third parties unless there is a legal obligation to do so. However, the Company’s data processors may have access to your personal data, namely, the service providers who may have to access your personal data to perform their role. The service providers that access your personal data are generally dedicated to the information systems and technology sectors. The table below will indicate any other sectors in which other potential service providers of the Company who must access your personal data are dedicated. We wish to inform you that you can request more detailed information regarding the recipients of your data by sending an email to the address info@ndlprohealth.com, indicating the specific processing about whose recipients you would like information. 
  4. The existence of potential international data transfers. If you would like to request a copy of the contractual clauses referred to in the table below, please contact CANRA at the following email to submit your request: info@ndlprohealth.com
  5. The retention period of the data you provide us. Please also be informed that your data will remain blocked for the attention of judicial, administrative or fiscal claim during the periods corresponding to applicable legislation.
  1. DETAILED INFORMATION ABOUT PROCESSING PERFORMED BY CANRA

WHAT IS THE PURPOSE OF PROCESSING YOUR PERSONAL DATA?

Depending on the products, services or functionalities that you wish to avail of at any given time, we will need to process certain data, which are generally as follows, depending on the case:

  • Your identifying data (such as your name, surname, image, language and country from which you interact with us, contact information, etc.);
  • Financial and transactional information (such as your payment or card information, information about your purchases, orders, returns, etc.);
  • Connection, geolocation and browsing data (such as location data, device identification number or advertising ID);
  • commercial information (such as if you are subscribed to our newsletter),
  • data about your tastes and preferences.
  • Information on the dosage of our products: weight, level of experience, i.e. beginner or experienced athlete and, if applicable, sports segment(s).

Please remember that whenever we ask you to complete your personal data to provide you with access to any functionality or service of the Platform, certain fields will be marked as mandatory, since they are data that we need to be able to provide you with the service or give you access to the functionality in question. Please note that if you choose not to provide us with such data, you may not be able to complete your registration as a user or you may not be able to avail of those services or functionalities.

To advise you on the appropriate product and dosage of specific products: We will use your personal information, including weight, level of experience (beginner or experienced athlete) and, if applicable, sport segment(s), to advise you on the product and the proper dosage of specific products. This use of personal information is necessary for the proper use of specific products.

In other cases, we may passively obtain information by using tracking tools, such as browser cookies or other similar technologies from our Platform or from communications we send to you. In certain cases, a third party may have provided us with information about you when using a feature or service of the Platform, such as if they have sent you a gift card or if they send an order to your address.

In such cases, we will only process your data in relation to that functionality or service, in accordance with the provisions of this Privacy Policy.

Depending on how you interact with our Platform, we will process your personal data for the following purposes:

Purpose

Grounds

1. To manage your registration as a user

The processing of your data is necessary for the execution of the terms that regulate the use of the Platform. In other words, in order for you to register as a user on the Platform, we need to process your personal data, since otherwise we would not be able to manage your registration.

We believe that we have a legitimate interest to link your purchases and the data we collect about your activity through the different channels of the Platform to your account.

2. The development, completion and execution of the services or sales contract.

The processing of your data is necessary for the execution of the sales contract or provision of services that links us to you.

In certain cases, we process your data based on your own consent.

We believe that we have a legitimate interest to carry out the necessary checks to detect and prevent possible fraud or fraudulent use when you use the Platform, such as when making a purchase or return.

3. Customer Service

We believe that we have a legitimate interest to deal with requests or queries sent through the different contact channels in place. We understand that the processing of these data is also beneficial for you in regards to how they allow us to properly deal with and resolve any queries sent.

For example, processing is necessary to execute the sales contract whenever you contact us to manage an incident related to your order or the product/service acquired on the Platform.

Whenever your query is related to the exercise of your rights about which we inform you below or claims related to our products or services, compliance with our legal obligations is what authorises us to process your data.

4. Marketing

The legal grounds to process your data for marketing purposes is your consent.

5. Quality and usability analysis.

 

We believe that we have a legitimate interest to analyse the usability of the Platform and the degree of satisfaction of the user since we understand that processing these data is also beneficial for you due to the fact that this aims to improve the user experience and offer a better service.

HOW LONG WILL WE RETAIN YOUR DATA?

The period of conservation of your data will depend on the purposes for which we process it, as explained below:

Purpose

Retention period

1. To manage your registration as a user Platform

We will process your data for as long as you remain a registered user (that is, until you decide to unsubscribe).

2. The development, completion and execution of the services or sales contract.

We will process your data for the time necessary to manage the purchase of the products or services you have purchased, including possible returns, complaints or claims associated with the purchase of the particular product or service.

On some occasions, we will only process the data until the time you decide, as is the case with payment data that you have asked us to store for possible future purchases (if this functionality is available).

3. Customer Service

We will process your data for as long as necessary to respond to your request or request.

4. Marketing

We will process your data until you unsubscribe or cancel your subscription to the newsletter.

We will also show you customised adverts until you change your device, the browser or the settings of your cookies, which will revoke this permission.

5. Quality and usability analysis.

We will process your data on an occasional basis during the time that we are performing a specific quality survey or action or until we anonymise your browsing data.

Regardless of whether we process your data for the time strictly necessary to fulfil the corresponding purpose, we will subsequently keep it duly stored and protected for the time in which responsibilities arising from the processing may arise, in compliance with the regulations in force at all times. We will delete your personal data once the possible actions are prescribed in each case.

DO WE SHARE YOUR DATA WITH THIRD PARTIES?

To fulfil the purposes indicated in this Privacy Policy, it is necessary for us to provide access to your personal data to third parties that provide us with support in the services we offer you, namely:

  • payment means or financial organisations,
  • technology and analytics service providers,
  • suppliers and collaborators of logistics, transportation and delivery services or their associated establishments,
  • suppliers and collaborators of services related to marketing and advertising, such as advertising agencies, advertising partners or social networks that, in certain cases, may act as joint controllers.

For the efficiency of the service, some of the aforementioned providers are located in territories outside the European Economic Area that do not provide a level of data protection comparable to that of the European Union. In such cases, we wish to inform you that we transfer your data with proper guarantees while always maintaining the security of your data, thanks to our use of the most appropriate tools for international data transfer, such as Standard Contractual Clauses or any other relevant complementary measure. You can consult the content of the Standard Contractual Clauses at the following link: https://ec.europa.eu/info/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_es

  1. EXERCISING YOUR RIGHTS

Please be advised that you may exercise the following rights:

  1. right of access to your personal data find out which are being processed and the processing operations performed with them;
  2. right to rectify any inaccurate personal data;
  3. right to delete your personal data, whenever possible;
  4. right to request the restricted processing of your personal data whenever there is any doubt about the accuracy, legality or need for processing of the data, in which case we may retain them for the exercise or defence of claims;
  5. right to portability of your personal data, whenever the legal grounds that enables us to process it as indicated in the attached table above is a contractual relationship or your consent;
  6. right of opposition to the processing of your personal data, whenever the legal basis that enables us to process it as indicated in the attached table above is a legitimate interest. For this purpose, we will stop processing your data unless we have an imperative legitimate interest or to formulate, exercise or defend claims.
  7. right to revoke your consent at any time.

You can exercise your rights at any time and free of charge by writing to info@ndlprohealth.com stating the right you wish to exercise and your identification details.

If you believe that we have not processed your personal data adequately, you can contact us at info@ndlprohealth.com. However, we wish to inform you that you have the right to file a claim with the Spanish Data Protection Agency if you consider that a violation of data protection legislation has been committed with respect to the processing of your personal data.

  1. COOKIES

CANRA will only use data storage and retrieval devices (“Cookies”) whenever the user has given prior consent to do so in accordance with what is indicated in the pop-up window of the user's browser when accessing the Website for the first time and in the other terms and conditions indicated in the CANRA Cookies Policy that every user should be aware of.

  1. SECURITY MEASURES

CANRA adopts the security levels required by the GDPR appropriate to the nature of the data that is processed at all times. Notwithstanding the above, technical security in a medium such as the Internet is not impregnable and malicious actions may take place by third parties, despite all the means CANRA has provided to prevent such actions.

  1. MINORS

Minors may not use the services provided on the Website without the prior authorisation of their parents, guardians or legal representatives, who will be solely responsible for all acts carried out through the Website by the minors in their care, including the completion of forms containing the personal data of said minors and any marking of the boxes that accompany them.