Privacy policy

Controller Identification Details


Controller	TINYCOTTONS S.L.
Tax ID (CIF)	B66041583
Address	Via Augusta 25, 08004, Barcelona, Spain.
Email	info@tinycottons.com
Phone	(+34) 931 227 638
Company Registration Details	Companies Registry of Barcelona / Deed no.: 2013/522 / Volume: 43767 / Page: 34 / Entry: B-437693

1. Right to Information on Personal Data Protection

TINYCOTTONS S.L., as data controller, in compliance with the current Organic Law on the Protection of Personal Data (hereinafter LOPD) and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, hereby informs users and individuals associated with the entity of the policy applied to the processing of all personal data provided to the Data Controller under the terms set out below, whether submitted through web forms, social media, or other means, both electronic and paper-based.

2. Type of Information We Collect

We collect information through web forms, social media, etc., in order to provide better services to all our users. We generally request personal information such as your name, national identification number, postal address, email address, and telephone number for storage in our records.

Data categories: Personal identification data, commercial activity data, transactional and accounting data.

Our forms do not store age data or special category data such as ideology, trade union membership, religion, beliefs, racial or ethnic origin, sexual life, or health information.

3. Purpose

All requested data will be processed in the Controller's records and will be necessary in order to:

Offer the possibility of registering purchased products.
Provide contracted services and handle requests made by our customers.
Offer the opportunity to participate in prize draws and competitions, and to access a wide range of exclusive benefits for our customers.
Carry out customer management, and administrative, accounting and tax functions.
Keep you informed of new products and services that may be of interest to you.
Any other purposes necessary for the development, fulfilment and management of the contractual relationship between the customer and the Data Controller.

Prior to submitting any form, the user is informed and asked to express their consent to the processing of personal data and to accept our data protection and privacy policy, including which personal data is collected and processed and its specific purpose. The user may freely express their consent by selecting "I accept" the data protection policy and the processing of their personal data.

Data collected through the website will not be used for automated decision-making.

4. Security

In the processing of personal data, the Data Controller undertakes to safeguard and protect the public freedoms and fundamental rights of individuals whose data is held in its records, and in particular their honour and personal and family privacy. To this end, the Controller commits to processing data in accordance with the regulations in force at any given time and to maintaining strict confidentiality with regard to users' information.

Personal data subject to processing will not be used for purposes other than those set out herein or, where applicable, in any other document or agreement binding both parties under specific conditions.

Unless expressly consented to by users, no transfers or disclosures of data to third parties not provided for under the LOPD will be carried out.

The Controller shall take measures to ensure that any person acting under its authority who has access to personal data may only process such data on the Controller's instructions, unless required to do so under Union or Member State law.

The Data Controller informs users that, in accordance with the provisions of the LOPD and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, it has implemented the necessary technical and organisational measures to ensure the security of personal data and to prevent its alteration, loss, unauthorised or unlawful processing or access, and against accidental destruction or damage, taking into account the state of technology, the nature of the data stored, and the risks to which it is exposed. The Data Controller likewise guarantees users compliance with the duty of professional secrecy with respect to users' personal data and the duty to keep it secure.

5. Retention Period

Identifying personal data is retained for as long as the contractual relationship with the customer is maintained, the customer remains registered for the service, and has not expressly requested cancellation and deletion of their data. Data collected will be deleted once it is no longer necessary or relevant for the purpose for which it was collected or recorded. Should the data collected be intended for use for a purpose other than that for which it was collected, the prior consent of the data subjects will be required.

6. Legal Basis

The applicable legislation is Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, as well as Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights.

The legal basis for the processing of personal data is the user's consent, the contractual relationship with the customer or supplier, and legitimate interest. The user may withdraw their consent at any time by exercising their rights via the email address info@tinycottons.com.

You are not obliged to provide us with your data; however, it will be necessary in order to process any queries or requests you wish to submit to us through the website.

7. Recipients

Organisations or individuals directly associated with the company; Public authorities with jurisdiction in the relevant area.

Data processors may access data submitted through this website in the course of carrying out their maintenance functions.

8. Rights

Below is a summary of the rights you may exercise as a user of this website:

Right	What does it mean?
Right of access	You have the right to obtain confirmation from TINYCOTTONS S.L. as to whether or not your personal data is being processed and, if so, the right to know what data is being processed.
Right to rectification	This gives you the ability to modify any data that is inaccurate or incomplete. You must indicate in your rectification request which data you wish to have amended.
Right to object	You may object at any time to the processing of your personal data, except in cases provided for by law. Thus, except where it is legally established that you may not exercise this right (for example, where the legal basis for processing your personal data is the performance of a contract or compliance with a legal obligation on our part), you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you. Furthermore, this right may be exercised where data processing is based on our legitimate interest. Should you exercise this right, TINYCOTTONS S.L. will cease processing your personal data, unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
Right to erasure	This right allows you to request the deletion of your personal data. Once you exercise this right, your data will not be deleted immediately; instead, it will be kept in a blocked state to prevent its processing, without prejudice to its availability to public authorities, judges and courts to address any liabilities that may have arisen from the processing during the applicable limitation period. Once that period has elapsed, your data will be duly anonymised or deleted.
Right to data portability	You have the right to copy and transfer the data you have provided to us to another data controller other than TINYCOTTONS S.L. This right may only be exercised where processing is based on the performance of a contract or on your consent and the processing is carried out by automated means.
Right to restriction of processing	This right allows you to request that we suspend the processing of your data when: • You contest the accuracy of the data, while TINYCOTTONS S.L. verifies such accuracy. • You have exercised your right to object to the processing of your data, while it is being verified whether the legitimate grounds of TINYCOTTONS S.L. override yours as the data subject. This right also allows you to request that TINYCOTTONS S.L. retain your personal data when: • The processing of data is unlawful and, as the data subject, you object to the erasure of your data and request restriction of its use instead. • TINYCOTTONS S.L. no longer needs your personal data for the purposes of processing, but you require it for the establishment, exercise or defence of legal claims.
How to exercise these rights	You may exercise your rights by sending your request to the following email address: info@tinycottons.com, or by post, by means of a written and signed request accompanied by a photocopy of your national ID card (DNI), foreigner identification number (NIE), or passport, addressed to: Via Augusta 25, 08006, Barcelona, Spain. We also inform you that, should you consider that TINYCOTTONS S.L. has not duly satisfied the exercise of your rights, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD), located at Calle Jorge Juan no. 6, 28001 Madrid. For further information on how to request the AEPD's protection, please visit their website at http://www.aepd.es or contact them by phone on 901 100 099 or 91 266 35 17.

9. Data Quality

Data communicated through the website or a form must be accurate and up to date. Users are solely responsible for keeping their data current.

10. Contact and Customer Service

If you have any questions regarding privacy during use of the application, or if you have queries about our practices, please contact us by email at info@tinycottons.com or by phone at (+34) 931 227 638.