In accordance with current and applicable regulations on the protection of personal data, we inform you that your data will be incorporated into the processing system owned by TUKUY BRAND, with NIF XXXX and registered office located in GAVÀ, 08014 BARCELONA (BARCELONA), and that the respective purposes, retention periods and legitimate bases are listed below. For the treatments that require it, we also inform you of the possible profiling and automated decisions, as well as the possible assignments and international transfers that TUKUY BRAND intends to carry out:
Processing carried out
Website Management
Purpose: processing and management of data necessary for the functionality of the website.
Retention period: for as long as the consent given is maintained.
Legitimate basis: the data subject’s consent
Type of data: merely identifying data
Transfers: not foreseen
International transfers: not foreseen
Profiling: not foreseen
Web form
Purpose: to answer your queries and/or requests
Retention period: as long as the consent given is maintained.
Legitimate basis: the consent of the interested party
Type of data: purely identifying data
Transfers: none
International transfers: not foreseen
Profiling: not foreseen
Regulatory compliance management
Purpose: management and processing of obligations and duties arising from compliance with the regulations to which the entity is subject.
Retention period: copies of documents are kept until the statute of limitations for claiming possible liability.
Legitimate basis: compliance with a law
Type of data: purely identifying data.
Transfers: your data will be communicated, if necessary, to the bodies and/or public administration competent in the matter in order to comply with the obligations established in the applicable regulations. In addition, we inform you that the legitimate basis for the transfer is to comply with the obligations established in the applicable regulations.
International transfers: not foreseen
Profiling: not foreseen.
Commercial actions
Purpose: collection, registration and processing of data for the purpose of advertising and commercial prospecting of our products and/or services.
Retention period: as long as the consent given is maintained.
Legitimate basis: the data subject’s consent
Type of data: merely identifying data.
Transfers: none
International transfers: not foreseen
Profiling: not foreseen.
User registration
Purpose: collection, registration and processing of the data necessary to register as a user.
Retention period: as long as the consent given is maintained.
Legitimate basis: the data subject’s consent
Type of data: merely identifying data.
Transfers: not foreseen
International transfers: not foreseen
Profiling: not foreseen.
Management of the contracting of services
Purpose: collection, registration and processing of data in order to manage your purchase, as well as for the correct development, fulfillment and execution of the contract between both parties.
Retention period: the period necessary to manage the purchase of the products or services purchased, including possible returns, complaints or claims associated with the purchase of the product or service in particular.
Legitimate basis: the execution of a contract
Type of data: merely identifying data.
Transfers: your data will be communicated, if necessary, to the Tax Agency, to banks and savings banks and to the bodies and/or public administration competent in the matter in order to comply with the tax and fiscal obligations established in the applicable regulations. In addition, we inform you that the legitimate basis for the transfer is to comply with the obligations established in the applicable regulations.
International transfers: not foreseen
Profiling: not foreseen.
Economic and administrative management
Purpose: administrative management, invoicing, accounting and legal obligations.
Retention period: 5 years, in compliance with tax law, and 10 years for tax documentation, in compliance with Organic Law 7/2012.
Legitimate basis: compliance with a law
Type of data: merely identifying data.
Transfers: your data will be communicated, if necessary, to the Tax Agency, to banks and savings banks and to agencies and / or public administration competent in the matter in order to comply with tax and fiscal obligations established in the applicable regulations. In addition, we inform you that the legitimate basis for the transfer is to comply with the obligations established in the applicable regulations.
International transfers: not foreseen
Profiling: not foreseen
Rights of data subjects
TUKUY BRAND informs users that they can exercise their rights of access, rectification, limitation, deletion, portability and opposition to the processing of their personal data, as well as withdrawal of consent given, against the data controller.
Right of access: this is the user’s right to obtain information on their specific personal data and on the processing that has been or will be carried out, as well as the information available on the origin of this data and the communications that have been made or are expected to be made.
Right of rectification: this is the right of the data subject to have data that proves to be inaccurate or incomplete modified. This right can only be satisfied in relation to information that is under the control of the app; for example, comments posted on the same page and images or web content in which the user’s personal data appear can be deleted.
Right to limitation of processing: this is the right to limit the purposes of the processing originally foreseen by the data controller.
Right of deletion: the right to delete the user’s personal data, except as established by the RGPD itself or other applicable regulations that determine the obligation to retain them, within the appropriate period and in the appropriate manner.
Right of portability: the right to receive the personal data provided by the user, in a structured, commonly used and machine-readable format, and to transmit it to another data controller.
Right of opposition: this is the user’s right to demand that TUKUY BRAND does not process his or her personal data or that it puts an end to the processing it carries out.
In order to exercise any of the previously described rights, it is necessary to comply with the following requirements:
It is necessary to submit a letter to the e-mail address: CONTACT@TUKUYBRAND.COM.
The letter sent by the owner of the data requesting the exercise of the rights must meet the following legal requirements:
Name and surname of the data subject and a copy of the DNI/NIE or any other identifying document. In the exceptional cases in which representation is admitted, the person representing the data subject must also be identified by the same means, as well as provide the document proving the representation. The photocopy of the DNI can be substituted, as long as the identity is accredited, by any other means valid in law.
Request in which the request is specified (fiscal year in which the information to be accessed is requested). If it does not refer to a specific file, the interested party will be provided with all the information available with their personal data. If the data subject requests information about a specific file, only the information about that file will be provided. If you request information relating to a third party, it will not be provided under any circumstances. If you request it by telephone, you will be instructed to do so in writing and will be informed of how to do so and the address to which the request should be sent. Information will never be provided to you over the telephone.
Address for notification purposes.
Date and signature of the applicant.
Documents supporting the request being made.
The interested party must use any means that allows accreditation of the sending and receipt of the request.
Finally, we inform you that you have the right to file a complaint with the Spanish Data Protection Agency in the event that you are aware of or consider that a fact may involve a breach of the applicable regulations on data protection.
TUKUY BRAND undertakes to adopt the necessary technical and organizational measures, in accordance with the level of risk that accompanies the processing carried out and indicated in the section on terms and conditions of use, so as to ensure the integrity, confidentiality and availability.