Privacy policy

1. Introduction

This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website or place an order with us. We are committed to safeguarding your privacy and to processing your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Spanish data protection law. Please read this policy carefully so that you understand your rights and how your information is handled.

2. Who is responsible for your data (the Controller)

The controller responsible for the personal data processed through this website is:
tandem
C. Lepanto, 21
03503 Benidorm, Spain
Email: contact@taandem.shop
Phone: +34669842926

If you have any questions about this policy or about how we handle your personal data, please contact us using the details above.

3. What personal data we collect

We only collect personal data that is necessary for the purposes described below. Depending on how you interact with our website, this may include the following categories of information.

3.1 Information collected when you browse the site

When you visit our website, our server temporarily logs certain technical information, such as your IP address, the date and time of access, the URL requested, the referring page, and details about your browser and operating system. This information is used to ensure the security, stability and proper functioning of our website. Legal basis: GDPR Art. 6(1)(f) (legitimate interest).

3.2 Information collected when you place an order

When you place an order, we collect the information required to process and fulfil it, including your name, billing and shipping address, email address, phone number (optional) and payment details. Legal basis: GDPR Art. 6(1)(b) (performance of a contract).

3.3 Information collected when you contact us

If you contact us, whether by email, phone or through a contact form, we store the content of your message together with your contact details so that we can respond appropriately. Legal basis: GDPR Art. 6(1)(b) and (f).

4. How we use your data

We use the personal data described above only for the purposes for which it was collected, namely: to process and deliver your orders, to respond to your enquiries, to maintain the security and technical operation of our website, and to comply with our legal obligations. We do not use your personal data for any purpose incompatible with these.

5. How long we keep your data

We retain personal data only for as long as necessary to fulfil the purposes set out in this policy, or for as long as required by applicable law (for example, tax and accounting obligations). Once the relevant retention period has ended, your data is securely deleted or anonymised.

6. Sharing your data with third parties

We share personal data with third parties only where:

  • you have given your explicit consent;
  • sharing is necessary to fulfil a contract with you (for example, with delivery or payment providers involved in processing your order);
  • we are subject to a legal obligation requiring disclosure; or
  • we have a legitimate interest in doing so under GDPR Art. 6(1)(f), and your interests or fundamental rights do not override that interest.

We do not sell your personal data to third parties.

7. Cookies

Our website uses cookies that are strictly necessary for its operation, such as those required to keep your shopping cart working and to keep the site secure. Optional cookies, such as those used for analytics or marketing purposes, are only placed on your device once you have given your consent through our cookie banner. You may withdraw your consent to optional cookies at any time.

8. Services and providers we use

This website is hosted on the Shopify platform, provided by Shopify Inc., 150 Elgin Street, Ottawa, ON, K2P 1L4, Canada. As our hosting provider, Shopify processes personal data on our behalf in order to operate the website and may, as a result, involve the transfer of data outside the European Economic Area. Payments made on this website are processed by our configured payment providers, each of which processes your data under its own privacy policy, which we encourage you to review.

9. Security of your data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration. Access to personal data is restricted to those who need it to carry out the purposes described in this policy.

10. Children's privacy

Our website is not directed at children. If you believe that a child has provided us with personal data without appropriate consent, please contact us using the details in Section 2 so that we can address the matter and remove the data where appropriate.

11. Your rights

Under the GDPR, you have the following rights in relation to your personal data:

  • Right of access — to request confirmation of whether we process your data and to obtain a copy of it (Art. 15);
  • Right to rectification — to request correction of inaccurate or incomplete data (Art. 16);
  • Right to erasure — to request deletion of your data where certain conditions apply (Art. 17);
  • Right to restriction of processing — to request that we limit how we use your data (Art. 18);
  • Right to data portability — to receive your data in a structured, commonly used format, or to have it transferred to another controller (Art. 20);
  • Right to withdraw consent — where processing is based on consent, at any time and without affecting the lawfulness of prior processing (Art. 7(3));
  • Right to lodge a complaint — with a supervisory authority, such as the Agencia Española de Protección de Datos (AEPD) in Spain, or the supervisory authority of your own country of residence (Art. 77).

12. Right to object

Where we process your personal data on the basis of a legitimate interest, you have the right to object to that processing at any time under GDPR Art. 21. If you object, we will stop processing your data for that purpose unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.

13. Exercising your rights

To exercise any of the rights described in this policy, please contact us at contact@taandem.shop. We will respond to your request within the timeframes required by applicable data protection law.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. Any changes will be published on this page, and we encourage you to review this policy periodically.