Privacy policy

PRIVACY POLICY

The purpose of this policy is to inform data subjects about the various data processing activities carried out by this organization through the website that may affect their personal data, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, and Organic Law 3/2018, of December 5, on Personal Data Protection and Guarantee of Digital Rights.

1. IDENTIFICATION AND CONTACT DETAILS OF THE CONTROLLER

WORLDWIDE DROPS GROUP SLU, with registered address at C/ CAN SINGLA Nº 19 POL. INDUSTRIAL CAN SINGLA (08640 OLESA DE MONTSERRAT) BARCELONA, Tax ID B66199639, phone number 937 786 624, and email info@tonicabal.com.

2. PURPOSES OF THE PROCESSING OF YOUR PERSONAL DATA

USERS / VISITORS OF THE WEBSITE

We process your personal data for the following purposes:

  • Respond to requests, complaints, and inquiries submitted through the contact channels available on the website.

  • Understand user browsing behavior on the site to detect possible cyberattacks.

  • Comply with legal obligations directly applicable to our activity.

  • Protect and exercise our rights or respond to claims of any nature.

  • If applicable, send commercial communications related to our goods or services, or sector-related news or newsletters (requires prior consent).

  • If applicable, manage your participation in contests and promotions carried out by the organization (requires prior consent).

  • If applicable, send satisfaction and/or quality surveys (requires prior consent).

  • Manage your registration on the web platform and generate a username and password (requires prior consent).

CLIENTS

In addition to the purposes indicated for website users/visitors, we process your personal data to:

  • Manage the commercial relationship.

  • Manage the provision of the contracted services.

  • Carry out procedures related to the shipment and delivery of the purchased product.

  • Perform administrative, accounting, and tax-related tasks.

3. LEGAL BASIS FOR THE PROCESSING

USERS / VISITORS OF THE WEBSITE

  • Consent provided to process your data for the specified purposes.

  • Compliance with legal obligations applicable to the organization.

  • Legitimate interest in protecting our website, image, and business trajectory from cyberattacks.

CLIENTS

  • Execution of a contract in which the data subject is a party, or the application of pre-contractual measures.

  • Consent provided for purposes not directly related to contract execution.

  • Compliance with legal obligations incurred.

  • Legitimate interest in protecting our website, image, and business trajectory from cyberattacks.

4. WEBSITE TOOLS AND FEATURES

Chatbot

The website includes a chatbot for customer support. Prior consent is required to initiate the conversation.

Google Maps

We use Google Maps (API) to display interactive maps. Google may collect and store information about your use of the service. Use of Google may involve international data transfers without adequate safeguards under GDPR.

Stripe

We use the Stripe payment gateway to securely process financial transactions. You should review Stripe’s privacy policy for details on how they process personal data.

Redsys

We use the Redsys payment gateway to securely process payments. It is also recommended that you review its privacy policy.

5. RETENTION PERIODS OR CRITERIA

Personal data will be retained for as long as necessary to fulfill the purposes for which it was collected.

Once no longer needed, data will remain duly blocked and may be made available to competent Public Administrations, Courts, or the Public Prosecutor’s Office during the applicable statutory limitation periods.

Data blocking periods:

  • Civil Code: between 1 and 5 years (Articles 1964.2 and 1968.2).

  • Commercial Code: 6 years for commercial records (issued and received invoices, receipts, bank documents, etc.).

  • General Tax Law: 4 years (Articles 66–70).

6. AUTOMATED DECISION-MAKING AND PROFILING

The website does not perform automated decision-making or profiling.

7. RECIPIENTS

During the processing of your personal data, the organization may share your data with:

  • Courts and Tribunals.

  • Law Enforcement Agencies.

  • Other competent public authorities when legally required.

  • Data Processors providing services to the organization.

  • Banks and financial entities.

  • Courier companies responsible for product shipment.

8. INTERNATIONAL DATA TRANSFERS

The organization does not carry out any international transfer of data.
If such transfers become necessary in the future, the level of protection of the destination country will be evaluated, and required safeguards will be adopted.

9. SOCIAL MEDIA

WORLDWIDE DROPS GROUP SLU maintains profiles on various social networks to share information about activities and updates.

User data published on social networks belongs to the respective platform. We recommend reviewing their terms of use and privacy policies.

Privacy policies:

10. RIGHTS

Data subjects may request information or exercise their rights at any time, free of charge:

  • Access

  • Rectification

  • Erasure

  • Restriction of processing

  • Objection

  • Data portability (when technically possible)

  • Withdrawal of consent

  • Not to be subject to automated decision-making, including profiling

Proof of identity (such as ID or equivalent document) may be required.

If you believe your rights have been violated and have not received a satisfactory response, you may file a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es

To stop receiving commercial communications:
Email info@tonicabal.com with the subject “UNSUBSCRIBE”.

11. ACCURACY OF THE DATA

The data subject guarantees that the provided data is true, accurate, complete, and up to date, and commits to notifying any changes through the appropriate channels.

If the user provides third-party data, they declare having the necessary consent and commit to informing them of this policy.

12. MODIFICATIONS AND UPDATES

This Privacy Policy may be modified due to legal changes, instructions from the Spanish Data Protection Agency, or updates to our website.
We recommend reviewing it periodically.

For questions, you may contact WORLDWIDE DROPS GROUP SLU via the channels indicated.

Last updated: January 7, 2025