Privacy Policy

Who is the Data Controller?

The Data Controller responsible for your personal data is ELYSIUM CBD OILS, S.L. (hereinafter, “ELYSIUM”), with Tax ID B-42721241 and registered offices at Avenida Diagonal 405 Bis, 7º A, 08008 – Barcelona. 

This Privacy Policy regulates access to and use of the Website (hereinafter, the “Website“) which ELYSIUM makes available to Internet users (hereinafter, the “Users“) who are interested in the contents (hereinafter, the “Contents“) and services (hereinafter, the “Services“) offered by ELYSIUM on its Website.

Contact email: 

Telephone number: +34 931 31 70 36



Please read the following recommendations carefully and follow them:

  • Ensure your equipment has duly updated antivirus software installed to protect it from malicious software and spyware applications that could pose risks to internet browsing and to the information stored in your equipment.
  • Read and review this Privacy Policy and all the legal texts published by ELYSIUM on its Website.

Information on the data that ELYSIUM collects through the Website

To ensure the correct operation of the Website, ELYSIUM may gain access to the following information provided by the User, as the case may be:

  1. Identification data: name and surname of the User.
  2. Contact data: email, postal address and telephone number. 
  3. Bank data: credit card numbers.

Why is ELYSIUM legitimised to process your data?

ELYSIUM’s legal grounds for processing the data of the Users through this Website are the consent of the Users to the processing of their personal data and the execution of a contract to which the data subject is a party, or the application of pre-contractual measures at the request of the data subject.

In this respect, ELYSIUM processes the personal data of the Users for the purpose of permitting the commercial relationship requested by the User and to send the User commercial communications and/or Newsletters.

By accepting this Privacy Policy and checking the respective boxes, the User gives their consent to such processing.

ELYSIUM takes the protection of your privacy and personal data very seriously, and for that reason, your personal data are kept safely and processed with the utmost care, in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council dated 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “General Data Protection Regulation” or “GDPR”). 

This Privacy Policy regulates access to and use of the service made available by ELYSIUM to all interested Users in the services and contents published on the Website.

In relation to this aspect, the Users may withdraw their consent at any time by sending a message to the following email address: without it affecting the legality of the processing on the basis of the consent given before withdrawing it.

For what purposes are your personal data processed?

The personal data collected by ELYSIUM may be used for the following purposes, based on the consent given in the respective registration form: 

  1. To provide the services offered on the Website. 
  2. To receive communications or information about the activity of ELYSIUM by post, by telephone, via email, via SMS/MMS or via other equivalent electronic communication channels. 

Truthfulness of the data provided by the Users

The User guarantees the truthfulness of the personal data provided and undertakes to inform ELYSIUM of any change in such data.  In all cases, the User shall answer for the truthfulness of the data provided, and ELYSIUM reserves the right to exclude from the services any User who has provided false data, without prejudice to taking all other actions that correspond to it by law.

Users are advised to protect their data with maximum diligence, using adequate security tools. ELYSIUM declines all liability for the theft, illegal modification or loss of data.

Any change in or updating of the data must be notified to ELYSIUM using the communication channels set out in this Privacy Policy.

Data holding period 

The protection of the User’s privacy and personal data is a priority for ELYSIUM.  To that end, ELYSIUM makes every effort to prevent the inappropriate use of the User’s data by ensuring that only authorised staff have access to the User’s data.

The User’s personal data shall be kept for as long as their account with ELYSIUM remains active for the purposes of the processing for which they were obtained, provided that the User has not revoked their consent by requesting the closing of their account or the erasure of certain personal data from the Website. 

After this time, if necessary, ELYSIUM shall block the information for the legally-established periods.

ELYSIUM undertakes to comply with its duty to observe the secrecy and confidentiality of the personal data, pursuant to the current legal provisions.

Rights of Users

Users have the right to:

  1. Access their personal data; 
  1. Request the rectification of all inaccurate data; 
  1. Request the erasure of their data; 
  1. Make a request to limit the processing of their data; 
  1. Object to the processing of their data; 
  1. Request the portability of their data;
  1. Likewise, User have the right not to be subject to a decision based solely on automated processing of data.

The User may exercise all the above rights at the following email address, giving the reason for their request and attaching a copy of their Identity Card.

The User may also send their request by post to: Avenida Diagonal 405 Bis, 7º A, 08008 – Barcelona.  

The request sent to ELYSIUM must contain the following information:

  • Name and surname of the User; photocopy of their Identity Card, Passport or any other valid identity document. 
  • The petition in which the request is specified.

Without prejudice to any other appeal or legal action, the User shall have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual abode, workplace or the place of the alleged infringement, if they consider that the processing of their personal data is not in keeping with the law, and in the case of not being able to exercise their rights. The supervisory authority with which the complaint was lodged shall inform the complainant about the appeal and the outcome of the complaint.

Data security

The protection of the User’s privacy and personal data is a priority for ELYSIUM. To that end, ELYSIUM has taken all the measures in its power to prevent the inappropriate use of your data by ensuring that only authorised staff have access to the User’s data.

ELYSIUM maintains adequate security measures to protect the personal data in accordance with the law and has implemented all the technical means available to it to prevent the loss, improper use, alteration, unauthorised access and theft of the data provided by the User through the Website, without prejudice to informing you that security measures on the Internet are not infallible.

ELYSIUM undertakes to comply with the duty to observe the secrecy and confidentiality of the personal data in accordance with current law.

To use the services offered by ELYSIUM, it is necessary to register as a User. In this regard, the User must choose a password and is responsible for keeping it secret and for all activities carried out during the session started with their login and password. The User undertakes to inform ELYSIUM as soon as possible of any unauthorised use of their login and/or password, or of any other security breach. 

ELYSIUM declines all liability for damages caused by failure by the User to comply with this obligation.

Transferring and/or assigning data to third parties 

We hereby inform you that your personal data will not be assigned to any third party companies from the cosmetics sector, from the CBD-based products sector or any other third party, in accordance with the consent granted in the respective registration form. 


If you have any questions about our Privacy Policy, please contact us by sending an email to: 

Similarly, if you consider that your rights have not been duly protected, you may file a complaint with the Spanish Data Protection Agency, whose contact information is set out below: telephone numbers 901 100 099 and 912 663 517; postal address C/Jorge Juan 6, 28001 Madrid; website and Request

Acceptance and Consent

The User declares that they have been informed about the conditions for the protection of their personal data and they accept and consent to the processing of such data by ELYSIUM, in the manner and for the purposes indicated in this Privacy Policy.



Are you over 18 years old?