Privacy
Privacy policy
How SUCCULON handles personal data for orders, customer accounts, enquiries, communications and website use.
Clear summary
| Controller | SUCCULON, operator of succulon.com. Privacy requests: contact page. |
|---|---|
| Data we process | Contact, account, order, delivery, billing, communication, preference and technical/cookie data. |
| Why | To manage orders and shipping, answer enquiries, maintain accounts, comply with law, prevent fraud and send communications where allowed. |
| Legal basis | Contract or pre-contract steps, legal obligation, legitimate interest and consent where required. |
| Rights | Access, rectification, erasure, objection, restriction, portability, consent withdrawal and complaint to the AEPD. |
Who is responsible
The data controller is SUCCULON, responsible for succulon.com and the online shop. For privacy questions or rights requests, use the contact page.
Data we may process
- Identity and contact data: name, surname, email, phone, country, shipping or billing address.
- Customer account data: username, encrypted password, order history, preferences and declared botanical interests.
- Purchase and delivery data: products, amounts, order status, payment references, address and information needed for transport, customs or plant-health documents where applicable.
- Communications: messages sent through forms, email or customer support.
- Marketing with consent: new arrivals, limited availability and care guides.
- Technical data: IP address, language, device, security logs, necessary cookies and, if accepted, analytics or measurement cookies.
Purposes and legal bases
| Orders and shipping | To manage purchases, prepare orders, communicate changes and deliver plants. Basis: contract or pre-contract steps. |
|---|---|
| Customer account | To create and maintain the account, make future purchases easier and show order history. Basis: contract and legitimate interest. |
| Enquiries and support | To answer questions about availability, care, shipping or incidents. Basis: pre-contract steps, contract or legitimate interest. |
| Legal obligations | Invoices, accounting, tax, consumer law, claims and documents required for transport or plant species. Basis: legal obligation. |
| Security and fraud prevention | To protect the site and detect abuse, spam, unauthorised access attempts or fraudulent orders. Basis: legitimate interest and, where applicable, legal obligation. |
| Commercial communications | To send new arrivals or limited availability only where there is consent or a prior relationship allowed by law. Basis: consent or legitimate interest, always with an opt-out. |
| Cookies and analytics | To keep sessions, cart and language working; to measure site use if non-essential cookies are accepted. Basis: legitimate interest for technical cookies and consent for non-essential cookies. |
Retention
- Account data: while the account is active or until erasure is requested, except data we must keep by law.
- Orders, invoices and supporting documents: for the periods required by tax, accounting, commercial, consumer or claim-defence rules. In Spain, business documentation may be retained for up to six years.
- Enquiries: for the time needed to answer and then for a reasonable period to evidence the support provided.
- Newsletter: until consent is withdrawn or unsubscribe is requested.
- Cookies: according to their duration and the settings described in the cookie policy.
Recipients
We do not sell personal data. We may share it only where necessary with:
- hosting, website maintenance, WordPress/WooCommerce, security and technical support providers;
- payment providers, banks or anti-fraud services if online payment is enabled;
- shipping companies, logistics, customs or plant-health authorities where the shipment or species requires it;
- accounting, tax or legal advisers;
- email, form, communication or analytics providers, under applicable safeguards;
- public administrations, courts or authorities where legally required.
International transfers
We prioritise providers located in the European Economic Area. If a technical provider processes data outside the EEA, we rely on GDPR safeguards such as adequacy decisions, standard contractual clauses or another valid mechanism.
Your rights
You may request access, rectification, erasure, objection, restriction of processing and portability. You may also withdraw consent without affecting processing carried out before withdrawal.
To exercise rights, contact SUCCULON through the contact page. We may request additional information when needed to verify identity.
If you believe your rights were not handled correctly, you may complain to the Spanish Data Protection Agency.
Cookies
We use necessary cookies for the shop to work: session, cart, language, security and preferences. Analytics, advertising or similar cookies require prior consent when they are not strictly necessary.
You can review or change preferences in the cookie policy.
Children and automated decisions
SUCCULON is not directed at children under 14. We do not make automated decisions that produce legal effects or similarly significant effects. We may use technical checks for security, spam and fraud prevention.
Reference law
- Regulation (EU) 2016/679, GDPR.
- Spanish Organic Law 3/2018, LOPDGDD.
- Spanish Law 34/2002, LSSI-CE, especially for cookies and electronic communications.
- AEPD layered-information guidance.
Real plants, clear records
Choose the specimen you will receive.
Each plant is presented with real photos, preparation notes and EU shipping details before checkout.
