Privacy Policy

1. Who is the controller

The controller of your data is Natural Systems Agrotech S.L., tax ID (CIF) B14757017, with registered address at Calle Tejares, 5, P. I. Los Alfares, 14540 La Rambla (Córdoba, Spain), registered in the Córdoba Commercial Registry, Sheet CO-24159, Volume 1911, Folio 59, 1st entry.

For any question about your personal data you can write to privacy@naturalsystems.es or by post to the address above. For any other matter, to web@naturalsystems.es.

2. What data we process, why and on what basis

This website sells to trade professionals only. We process only the data you give us and the data generated when you use the website, and only for the purposes explained below. Fields marked as mandatory are necessary: without them we cannot handle your application, enquiry or order.

We do not take automated decisions that produce legal effects concerning you.

2.1. Application to register as a trade customer

What data: Registered and trading name, tax ID (NIF/VAT number), billing and delivery addresses, telephone numbers, email address, website, whether you are under the Spanish equivalence surcharge scheme (recargo de equivalencia), any comment you add and the form 036/037 you attach.
What for: To review your application and check that you are a trade professional before opening a customer account. The review is carried out manually by our administration team. Form 036/037 is sent by email to administration for that review and is not stored on the website.
Legal basis: Steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
How long: 12 months from the application. If your registration is approved, the data needed for the business relationship is then processed as customer data (section 2.2).
Who else receives it: Not disclosed to third parties. Our email and web hosting providers process it on our behalf, and Google reCAPTCHA protects the form (section 2.8).

2.2. Customers

What data: Identification and contact details of your company and its contact persons, billing and delivery addresses, the data needed for invoicing and payment, and the history of orders, invoices, shipments, reports and documents.
What for: To manage the business relationship: your website account, your orders, invoicing, shipments and the reports and documents available to you on the website.
Legal basis: Performance of the contract (Art. 6(1)(b) GDPR) and compliance with legal, accounting and tax obligations (Art. 6(1)(c) GDPR).
How long: For as long as the business relationship lasts. Afterwards, for the periods required by law: 6 years for commercial records (Art. 30 of the Spanish Commercial Code) and those required by tax legislation.
Who else receives it: Carriers, banks, advisers and public authorities where required by law. Also the IT providers that work for us (section 4).

2.3. Account security

What data: Your password, which is always stored encrypted; open sessions (IP address, browser and device) and the account login history.
What for: To protect your account and detect unauthorised access. In addition, authorised Natural Systems staff may temporarily access a customer’s account to provide support; each such access is logged.
Legal basis: Performance of the contract (Art. 6(1)(b) GDPR) and our legitimate interest in keeping the website and accounts secure (Art. 6(1)(f) GDPR).
How long: Login history, 24 months. The password, for as long as the account exists; sessions, while they remain open.
Who else receives it: Not disclosed to third parties.

2.4. Contact form

What data: Name, email address, telephone number and your message.
What for: To answer your enquiry.
Legal basis: Our legitimate interest in replying to those who write to us (Art. 6(1)(f) GDPR) and the consent you give by sending the form (Art. 6(1)(a) GDPR).
How long: 12 months.
Who else receives it: Not disclosed to third parties. Google reCAPTCHA protects the form (section 2.8).

2.5. Job applications (“Work with us”)

What data: Name, email address, telephone number, message and CV. The CV is sent by email to Human Resources and is not stored on the website. Please do not include special categories of data (health, beliefs, religion…) in it.
What for: To assess your application for our recruitment processes.
Legal basis: Your consent (Art. 6(1)(a) GDPR) and, if your application moves forward, steps prior to entering into a contract (Art. 6(1)(b) GDPR).
How long: 12 months.
Who else receives it: Not disclosed to third parties. Google reCAPTCHA protects the form (section 2.8).

2.6. Website usage statistics

What data: Pages and products viewed, searches made on the website and technical data about the visit.
What for: To understand how the website is used in order to improve how it works, the catalogue and the search engine.
Legal basis: Our legitimate interest in improving the website (Art. 6(1)(f) GDPR). You can object by writing to us.
How long: Detailed data, 30 months.
Who else receives it: Not disclosed to third parties.

2.7. Third-party analytics (only if you accept analytics cookies)

What data: Browsing and device data collected through cookies.
What for: To measure visits with Google Analytics 4 and Metricool. Google Analytics keeps event data for 2 months and user data for 14 months, and Google Signals is not enabled.
Legal basis: Your consent (Art. 6(1)(a) GDPR and Art. 22(2) of the Spanish LSSI). You can withdraw it at any time from the “Cookie settings” link in the footer.
How long: Those set by each tool, detailed in the Cookie Policy.
Who else receives it: Google Ireland Ltd. and Google LLC (Google Analytics) and Metricool Software S.L. (Metricool).

2.8. Protecting forms against abuse

What data: Your IP address and technical data about your browser, which Google receives.
What for: To tell people apart from automated programs and prevent abusive submissions. We use Google reCAPTCHA v3 only on the contact, customer registration and job application pages.
Legal basis: Our legitimate interest in protecting the forms (Art. 6(1)(f) GDPR).
How long: Google processes it under its own privacy policy (policies.google.com/privacy).
Who else receives it: Google Ireland Ltd. and Google LLC.

2.9. Marketplace registration

What data: Your customer identification details.
What for: If you ask to join the marketplace from a product page, we pass those details to Mediterranean Genesis, S.L. (The Planet Seeds), the company in our group that runs it, so that it can register you.
Legal basis: Your own request (Art. 6(1)(b) GDPR).
How long: Those of your customer relationship (section 2.2).
Who else receives it: Mediterranean Genesis, S.L. (The Planet Seeds).

2.10. Orders shipped directly to your customers

If you place an order for us to ship directly to one of your customers, you enter that final recipient’s details on the website. For that data, you are the controller and Natural Systems acts as processor: we only use it to prepare and deliver that order, under the data processing clause of our General Terms and Conditions of Purchase.

3. Marketing communications

We only send you news, offers or our newsletter if you have expressly authorised us to do so:

by ticking the relevant box, which is never pre-ticked, when registering as a customer or in the contact form;
by subscribing to the newsletter and then confirming the subscription with the link we send you by email;
or by switching it on in “My account › Privacy”.

Legal basis: your consent (Art. 6(1)(a) GDPR). If you are already a customer, we may also send you information about products similar to those you have bought from us (Art. 21(2) of the Spanish LSSI), and every message gives you the option to stop receiving them.

Unsubscribing: at any time and free of charge, using the link in each email, from “My account” or by writing to privacy@naturalsystems.es. We keep a record of your unsubscription so that we do not write to you again.

4. Who else receives your data

We do not sell your data. It is only received, to the extent needed in each case, by these categories of recipients:

Email and office software providers (Google Workspace).
Hosting and IT maintenance providers.
Form security providers (Google reCAPTCHA).
Analytics providers (Google and Metricool), only if you have accepted analytics cookies.
Carriers, to deliver orders.
Banks, for collections and payments.
External advisers (tax, accounting and legal).
Mediterranean Genesis, S.L. (The Planet Seeds), a company in our group, only if you ask to join the marketplace (section 2.9).
Public authorities, courts and tribunals, where required by law.

Providers that process data on our behalf do so under a data processing agreement and following our instructions.

5. International transfers

The only transfer outside the European Economic Area is to Google LLC (United States), for the Google Workspace and reCAPTCHA services and, if you have accepted it, Google Analytics.

It is covered by the EU-US Data Privacy Framework, recognised by the European Commission’s adequacy decision of 10 July 2023, and by the standard contractual clauses approved by the European Commission.

6. How long we keep data

Each processing activity in section 2 states its period. When it ends, we delete the data or, if the law requires us to keep it to deal with possible liabilities, we keep it blocked, without using it for anything else, only for that time (Art. 32 of the Spanish LOPDGDD).

7. Your rights

You can exercise these rights at any time, free of charge:

Access: find out what data about you we process.
Rectification: correct inaccurate data.
Erasure: ask us to delete it.
Objection: object to processing based on our legitimate interest, and always to marketing communications.
Restriction: ask us to stop using it while a complaint is being resolved.
Portability: receive it in a structured, commonly used format.
Withdraw your consent at any time, without affecting processing carried out before.

To exercise them, write to privacy@naturalsystems.es stating which right you wish to exercise. You can also manage marketing communications yourself from “My account”, and cookies from the “Cookie settings” link in the footer. We will reply within one month. If we have reasonable doubts about your identity, we may ask you to prove it.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Security

We apply technical and organisational measures to protect your data, including:

Encrypted communications between your browser and the website.
Passwords always stored encrypted.
Access to data limited to authorised staff.
Logging of account access, including support access.

9. Data about other people that you give us

You guarantee that the data you give us is true and up to date. If you give us data about other people (for example, your employees or the recipients of a direct shipment), you undertake to have informed them and to have a legal basis for passing it on to us.

10. Scope and changes to this policy

This policy applies to the Natural Systems Agrotech website on all its domains: naturalsystems.es, naturalsystems.eu, naturalsystems.fr and naturalsystems.com.de. The use of cookies is explained in the Cookie Policy.

If we change this policy, we will publish the new version here with its update date.

Last updated: 26 September 2026.

Go back to Home Page

Contents