1. Introduction

This document outlines the General Data Protection Regulation (GDPR) compliance
efforts of Essentia Natura, a website accessible at https://www.essentianatura.com. The GDPR is a regulation in UK law on data protection and privacy, and this document aims to inform users about the collection, processing, and protection of their personal data.

2. Data Controller

The data controller for the processing of personal data on the website is:

Essentia Natura

124 City Road,

London,

EC1V 2NX

United Kingdom

sales@essentianatura.com

3. Types of Data Collected

Essentia Natura may collect and process the following types of personal data:

Contact Information (e.g., name, email address)

Payment Information (if applicable)

Website Usage Data (e.g., IP addresses, browser information)

Other Information provided voluntarily by the user

4. Purpose of Data Processing

Personal data is collected and processed for the following purposes:

Order Processing and Fulfillment

Customer Support

Marketing and Promotions (with user consent)

Website Analytics

5. Legal Basis for Processing

Essentia Natura processes personal data based on one or more legal grounds as defined in the GDPR, including the necessity of processing for the performance of a contract, compliance with a legal obligation, protection of vital interests, consent, the performance of a task carried out in the public interest or the
exercise of official authority, and legitimate interests pursued by the data
controller.

6. Data Subject Rights

Users have the following rights regarding their personal data:

Right to Access

Right to Rectification

Right to Erasure

Right to Restriction of Processing

Right to Data Portability

Right to Object

Rights related to Automated Decision Making and Profiling

To exercise these rights, users can contact Essentia Natura through the provided contact
information.

7. Data Security Measures

Essentia Natura employs appropriate technical and organisational measures to ensure the security of personal data. These measures include encryption, access controls,
and regular security assessments.

8. Data Breach Notification

In the event of a data breach that may result in a risk to the rights and freedoms of
individuals, Essentia Natura will notify the relevant supervisory authority and
affected data subjects in accordance with GDPR requirements.

9. Changes to the Privacy Policy

Essentia Natura reserves the right to update this GDPR compliance document. Users will be notified of any changes, and the latest version will be available on the website.

10. Contact Information

For questions, concerns, or requests related to GDPR compliance, please contact:

sales@essentianatura.com