Privacy Policy
WEBSITE PRIVACY POLICY
1. DATA CONTROLLER
The company responsible for processing your data under this Privacy Policy is:
Company Name: NUTRIEXPERTS, SL
Trade Name: NUTRIEXPERTS
Tax ID (NIF): B06770051
Registered Address: C/ Vallespir, 19, 3rd Floor, Office 5, 08173 Sant Cugat del Vallès – Barcelona (Spain)
Email address: info@nutralie.com
Website: www.nutralie.com
Commercial Registry: Registered with the Barcelona Commercial Registry, Volume 39904, Folio, Section 113, Sheet B-356186.
At NUTRIEXPERTS, SL, we recognise the importance of protecting your personal data and are committed to handling it responsibly and in accordance with data protection laws.
This privacy policy is intended to govern all aspects relating to the processing of data belonging to users who browse our website or provide their personal data via the various forms available on the site.
2. PERSONAL DATA
Personal data is information that identifies you or makes you identifiable. Through the website, we collect the personal data that users provide to us via the fields provided for this purpose: first name, surname, email address, telephone number, postal address, town/city, etc., as well as any data you voluntarily provide to us via any of the social media platforms on which you are registered. In this case, privacy will depend on the settings chosen by the user as well as the terms and conditions of the social media platform itself.
The user’s visit to the website does not imply that they are required to provide any personal data. However, should they do so, the data will be processed lawfully and in accordance at all times with the principles and rights set out in the GDPR 2016/679 of 27 April 2016 and the LOPDGDD 3/2018 of 5 December.
3. PURPOSE, DURATION AND LEGAL BASIS OF DATA PROCESSING
We will process the data provided by the user for the following purposes:
To respond to the request or enquiry made by the user via the contact form on the website. We collect and process the user’s personal data in order to process and manage their request, enquiry or any other request made via that form. We will retain this data for as long as necessary to fulfil your request and for the period established by law, with a minimum duration of 3 years.
The legal basis for the processing of the data will be the consent given by the user when they tick the box accepting our privacy policy before submitting the request. The user has the right to withdraw their consent at any time without this affecting the lawfulness of the processing based on the consent given prior to its withdrawal.
To improve your browsing experience on the website. We will retain this data for as long as you do not withdraw your consent to its processing by deleting the cookies, and for the period required by law, which is a minimum of three years.
The legal basis for improving your browsing experience on the website is the consent you give by accepting cookies. You have the right to withdraw your consent at any time without this affecting the lawfulness of the processing based on your consent prior to its withdrawal.
To manage our social media accounts and send you information about our activities and products. We will retain this data for as long as you do not withdraw your consent to its processing and for the period established by law, with a minimum duration of 3 years.
The legitimate basis for managing our social media and sending you information about our activities and news is the consent you give us for this purpose. You have the right to withdraw your consent at any time without this affecting the lawfulness of the processing based on the consent given prior to its withdrawal.
To process and manage the purchase made by the user via the purchase form on the website. We collect and process the user’s personal data in order to process the order and subsequent payment for the products and services offered on the website. We will retain this data for the duration of the contractual relationship between the parties and for the period established by law to comply with tax obligations.
The legal basis for the processing of data is the performance of a sales contract to which the data subject is a party. If the user does not provide their personal data, their purchase cannot be processed and the requested service cannot be provided.
To save the abandoned shopping basket and remind the User that they have left a product in the basket, in the event that they have started a purchase by entering their email address. The data will be retained from the moment the User adds the selected product to the shopping basket until the moment they confirm the purchase, for a period not exceeding five days.
The legal basis for the processing of the data is the Data Controller’s legitimate interest in facilitating, as far as possible, the purchase of the product in which the User has shown an interest by adding it to the basket.
To send communications, bulletins or newsletters regarding NUTRIEXPERTS, SL products. With the user’s consent, we collect and process their personal data in order to send them information about our products and services. We will retain this data for as long as the user does not withdraw their consent to its processing and for the period established by law, with a minimum duration of 3 years.
The legal basis for the processing of data will be the consent given by the user when they tick the box accepting our privacy policy before subscribing to the newsletter via the form provided for this purpose on the website. The user has the right to withdraw their consent at any time without this affecting the lawfulness of the processing based on the consent given prior to its withdrawal.
Registering and managing an account as a “registered user” via the form on the website, which will allow the user to access their private service area and keep them informed of our activities, enabling us to send them commercial communications regarding updates to our services by any electronic means. We will retain this data for as long as the user does not request to be removed from the register and for the period established by law, with a minimum duration of 3 years.
The legal basis for the processing of data is the consent given by the user when registering via the registration form and ticking the box to accept our privacy policy before submitting their application. The user has the right to withdraw their consent at any time without this affecting the lawfulness of the processing carried out on the basis of the consent given prior to its withdrawal.
To manage the competitions and prize draws organised on our website or social media. We collect and process the user’s personal data in order to manage their participation in the various prize draws or competitions organised by NUTRIEXPERTS, SL, as well as to subsequently notify the winners. We will retain this data for the duration of the competition or prize draw and the subsequent period specified in the competition rules, as well as for the period established by law, with a minimum duration of 3 years.
The legal basis for the processing of data will be the consent given by the user by completing the entry form provided for this purpose on the website or social media, and by ticking the box to accept our privacy policy and the terms and conditions of the competition or prize draw. The user has the right to withdraw their consent at any time without this affecting the lawfulness of the processing based on the consent given prior to its withdrawal.
Conduct security tests to distinguish between human users and bots in order to prevent fraud. This processing is carried out using a Google CAPTCHA. This data will be retained for as long as necessary for the purpose, or until the user changes their IP address or browser, or deletes the associated cookies.
The lawful basis for this processing is the legitimate interest of the Data Controller, which consists of ensuring the security of the systems, preventing fraudulent access and protecting the services against misuse.
4. DATA DISCLOSURE AND INTERNATIONAL TRANSFERS
Your data will not be disclosed or transferred to third parties, unless there is a legal obligation to do so or to service providers linked to the Data Controller who act as data processors.
Our servers are located in the European Union, and as a general rule, we engage service providers also located within the European Economic Area or in countries that have been declared to have an adequate level of protection.
If we need to use external service providers that require the transfer of personal data outside the European Union or to countries that have not been declared to have an adequate level of protection, we will ensure the security and lawfulness of the processing of your data through adequacy decisions, standard contractual clauses, binding corporate rules, derogations or any other instrument approved by the supervisory authority that offers adequate safeguards for the international transfer of data.
As Google LLC is a company based in the United States, the processing of data may involve international transfers outside the European Economic Area. These transfers are carried out in accordance with the provisions of Regulation (EU) 2016/679 (GDPR), through the adoption of appropriate safeguards such as the EU-US Privacy Shield Framework.
5. UPDATING DATA
It is important that, in order for us to keep personal data up to date, the user informs us whenever there has been any change to such data; otherwise, we cannot be held responsible for its accuracy. The user guarantees that the personal data provided is accurate, ensuring that all information provided corresponds to the actual situation, is up to date and is correct, and undertakes to notify us of any changes.
6. THIRD-PARTY DATA
If the user provides NUTRIEXPERTS, SL with data relating to third parties for any purpose, they guarantee that they have obtained this data lawfully, that they have previously informed the data subjects and obtained their consent to disclose it, and that the information provided is accurate and truthful.
7. MANDATORY NATURE OF THE INFORMATION REQUESTED
All our forms feature an asterisk (*) next to mandatory fields. If the user does not complete these fields, or does not tick the box to accept the privacy policy, the information will not be submitted.
8. USE OF PASSWORDS
To access the Private Area, the USER must “Log In” and enter the email address and password generated in the registration form in accordance with the complexity rules established on the website at any given time. Users are responsible for the proper safekeeping and confidentiality of any usernames and/or passwords they have chosen during registration, and undertake not to transfer their use to third parties or allow access to unauthorised persons. Furthermore, it is the user’s obligation to immediately notify the Data Controller of any event that may lead to the misuse of usernames and/or passwords, such as theft, loss, or unauthorised access to them, so that they may be cancelled immediately.
9. RIGHTS OF DATA SUBJECTS
You have the right to access your data and to obtain confirmation as to whether it is being processed, as well as a copy of the personal data being processed. You have the right to update your data and to request the rectification of any inaccurate data, or to request its erasure when the data is no longer necessary for the purposes for which it was collected. You may request the restriction of the processing of your data and object to the processing of your data by withdrawing your consent, as well as exercise your right to data portability. Similarly, you have the right not to be subject to decisions based solely on the automated processing of your personal data. You may exercise your rights by contacting us at gdpr@nutriexperts.eu. If you consider that your rights have not been properly addressed, you have the right to lodge a complaint with the supervisory authority at www.aepd.es.
10. PROCESSING OF DATA RELATING TO MINORS
Anyone who provides data via the forms on this website and consents to its processing declares that they are over 14 years of age; access to and use of the website by anyone under this age is prohibited. If, at any time, the Data Controller detects that a person under the age of 14 has provided personal data, we will proceed to delete such data. Furthermore, parents or guardians may, in any case, contact NUTRIEXPERTS, SL to block the access account of any minors in their care who may have registered by misrepresenting their identity.
11. SOCIAL MEDIA
The purpose of tools such as Facebook, Twitter, Instagram, etc., or other social media platforms, is to raise awareness of and publicise the activities carried out by our organisation. These tools store personal data on the servers of the respective services and are governed by their own privacy policies. We recommend that you review and read the terms of use and privacy policy of the social media platform when you register, bearing in mind the various configuration options regarding the level of privacy of your user profile on the platform. Furthermore, the Data Controller reserves the right to remove from its social media accounts any information published by third parties that violates the law, incites such violations, or contains messages that undermine the dignity of individuals or institutions. It also reserves the right to block or report the profile of the author of such messages.
12. USE OF COOKIES
A cookie is a small file that is downloaded and stored on the user’s computer when they access a website. Cookies enable the website, amongst other things, to store and retrieve information about the user’s or their device’s browsing habits and, depending on the information they contain and how the user uses their device, they may be used to recognise the user. You have the option to prevent the creation of cookies by selecting the relevant option in your browser settings. You can find further information by reading our Cookie Policy.
Last updated: 20/05/2026