Privacy and Cookie Policy

This privacy policy is adapted to current Spanish and European regulations on the protection of personal data online. Specifically, it complies with the following rules:

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (LOPD-GDD).

Royal Decree 1720/2007 of 21 December, approving the Regulation implementing Organic Law 15/1999 of 13 December on the Protection of Personal Data (RDLOPD).

Law 34/2002 of 11 July on Information Society and Electronic Commerce Services (LSSI-CE).

The controller of the personal data collected on Holland and Barrett is: FUTORVIT SL, holder of tax ID B93361053 and registered in the Málaga Commercial Registry (Volume 5331, folio 26, sheet MA-125223), whose representative is Ildefonso Aparicio Angulo.

Address: Calle Atenas 52, 29006 Málaga.

Contact phone: 699 298 917.

Contact email: alfon@futorvit.com.

In compliance with the GDPR and LOPD-GDD, we inform you that the personal data collected through the forms on the website will be incorporated into and processed in our files for the purpose of facilitating, expediting and fulfilling the commitments between Holland and Barrett and the User, or to respond to requests or queries.

A record of processing activities is maintained in accordance with the GDPR, specifying the processing activities carried out according to their purposes.

Lawfulness, fairness and transparency: the User's consent will always be required after fully transparent information about the purposes of data collection.

Purpose limitation: personal data will be collected for specified, explicit and legitimate purposes.

Data minimisation: only strictly necessary data will be collected.

Accuracy: personal data must be accurate and kept up to date.

Storage limitation: data will only be kept for the time necessary for the purposes of processing.

Integrity and confidentiality: data will be processed in a way that guarantees their security and confidentiality.

Accountability: the Controller is responsible for ensuring that the above principles are complied with.

Data categories: only identifying data is processed. No special categories of personal data within the meaning of Article 9 of the GDPR are processed.

Legal basis: consent. Holland and Barrett undertakes to obtain the User's express and verifiable consent for the processing of their personal data for one or more specific purposes. The User may withdraw consent at any time.

Purposes: personal data is collected to facilitate, expedite and fulfil commitments between the website and the User, as well as for commercial, statistical and operational purposes, marketing studies and improving the quality, operation and navigation of the website.

Personal data will only be retained for the minimum time necessary for the purposes of processing and, in any case, for a maximum period of 36 months, or until the User requests its deletion.

The User's personal data will not be shared with third parties. The User will be informed about the recipients or categories of recipients at the time their data is collected.

In accordance with Articles 8 of the GDPR and 7 of Organic Law 3/2018, only those over 14 years of age may lawfully give their consent for the processing of their personal data by Holland and Barrett. For minors under 14, the consent of parents or guardians will be required.

Holland and Barrett undertakes to adopt the technical and organisational measures required, at a security level appropriate to the risk, to ensure data security and prevent accidental or unlawful destruction, loss or alteration.

The website is protected with an SSL (Secure Socket Layer) certificate, ensuring that personal data is transmitted securely and confidentially.

Holland and Barrett cannot guarantee the absolute security of the internet, but undertakes to inform the User without undue delay of any security breach likely to result in a high risk to their rights and freedoms.

The User may exercise the following rights against the Controller: access, rectification, erasure (right to be forgotten), restriction of processing, portability, objection, and the right not to be subject to automated decision-making, including profiling.

To exercise these rights, the User may send a written communication to the Controller with the reference "GDPR-www.hollandandbarrett.es", specifying full name, copy of ID, specific request, postal address for notifications, date and signature.

This request may be sent to the postal address Calle Atenas 52, 29006 Málaga, or to the email alfon@futorvit.com.

The website may include hyperlinks to third-party websites that are not operated by Holland and Barrett. The owners of those sites have their own privacy policies and are responsible for their own files and privacy practices.

If the User considers that there is a problem or breach in the processing of their data, they have the right to file a complaint with a supervisory authority. In Spain, the supervisory authority is the Spanish Data Protection Agency (www.aepd.es).

Access to this website may involve the use of cookies. Cookies are small pieces of information stored in the User's browser so the server can remember certain information. They facilitate navigation and do not damage the device.

The information collected may include the date and time of visits, pages viewed, time spent on the site, and the sites visited before and after. No cookie can contact the User by phone or extract personal information from the hard drive.

Cookies that allow identification of a person are considered personal data and the Privacy Policy described above will apply. The User's consent is required for their use.

Own cookies: sent to the User's device and managed exclusively by Holland and Barrett for the better functioning of the website. The information collected is used to improve quality and User experience.

Third-party cookies: used and managed by external entities (such as Google Analytics) to obtain access statistics and analyse navigation information. Data is collected anonymously.

Social media cookies: Holland and Barrett incorporates social media plugins (Facebook, Twitter, Instagram, YouTube, Pinterest, LinkedIn). The owners of these networks have their own privacy and cookie policies.

The User can disable, reject and delete cookies — wholly or partially — installed on their device through their browser settings (Chrome, Firefox, Safari, Explorer, etc.). Procedures may differ from one browser to another.

If the User rejects the use of cookies — wholly or partially — they may continue to use the website, although the use of some of its features may be limited.

The User must have read and agreed to the conditions on the protection of personal data contained in this Privacy and Cookie Policy. Use of the website implies acceptance of this Policy.

Holland and Barrett reserves the right to modify this Policy at its own discretion or motivated by a legislative, jurisprudential or doctrinal change of the Spanish Data Protection Agency. Changes will be expressly notified to the User.

This Privacy and Cookie Policy was last updated on 14 April 2021 to adapt to the GDPR and Organic Law 3/2018.