PRIVACY POLICY
1. Who are we?
This website is owned by INDUSTRIAS DECORMARKET, S.A. (hereinafter TATTOOTATU), with NIF: A-08867723 and registered office at Ctra. de Terrassa 147, 08191, Rubí (Barcelona).
2. Information and consent
By accepting this Privacy Policy, the user (hereinafter, the “User” or the “Users”) is informed and gives their free, informed, explicit and unequivocal consent for the personal data they provide through the website located at the URL [https://tattootatu.com/] (hereinafter, the “Store”) to be processed by TATTOOTATU, as well as the data derived from their browsing and any other data they may provide in the future. The User can freely and voluntarily decide whether to provide their personal data to TATTOOTATU.
3. Data request
The data requested in the website forms are generally mandatory (unless otherwise specified in the required field) to fulfil the purposes for which they are being collected.
Therefore, if the data is not provided or is not provided correctly, the requests cannot be processed, without prejudice to the fact that the content of the Website can be viewed freely.
4. For what purpose will TATTOOTATU process the User's data?
The personal data provided through the Website will be processed by TATTOOTATU for the following purposes:
4.1. Data provided to formalise a purchase:
-To manage, process, send and follow up on purchases made.
-Contact the User to complete the order if they have saved their shopping cart or have saved products in their shopping cart without completing the payment process.
-Conduct quality and satisfaction surveys.
-Send commercial communications to the User, by electronic means, about products and services from TATTOOTATU, if the User gives their consent by ticking the corresponding box.
-Create a commercial profile, using third-party sources (Mailchimp, Microsoft) to offer the User products and services according to their interests, if the User authorises it by ticking the designated box.
-Carry out analyses on the use of the Website and check the preferences and behaviours of the User in order to improve usability and communication with Users of the Website.
4.2. Data provided through out-of-stock product forms:
-Inform Users of the availability of products they were interested in that were out of stock.
-Send commercial communications to the User by electronic means, about products and services from TATTOOTATU if the User gives their consent by ticking the corresponding box.
-Create a commercial profile, using third-party sources (Mailchimp, Microsoft) to offer the User products and services according to their interests, if the User authorises it by ticking the designated box.
-Carry out analyses on the use of the Website and check the preferences and behaviours of the User in order to improve usability and communication with Users of the Website.
4.3. Data provided through contact forms:
-Manage, process and respond to requests, applications, incidents or queries from the User.
-Send commercial communications to the User by electronic means, regarding products and services from TATTOOTATU, if the User gives their consent by ticking the corresponding box.
-Create a commercial profile, using third-party sources (Mailchimp, Microsoft) to offer the User products and services according to their interests, if the User authorises it by ticking the designated box.
-Conduct analysis on the use of the Website and check the preferences and behaviours of the User in order to improve communication with Users of the Website.
4.4. Data provided for the sending of Newsletters:
-Manage the subscription and/or unsubscription to the Newsletter.
-Send commercial communications to the User by electronic means, regarding products and services from TATTOOTATU, if the User gives their consent by ticking the corresponding box.
-Create a commercial profile, using third-party sources (Mailchimp, Microsoft) to offer the User products and services according to their interests, if the User authorises it by ticking the designated box.
-Conduct analysis on the use of the Website and check the preferences and behaviours of the User in order to improve communication with Users of the Website.
5.- What User data will TATTOOTATU process?
TATTOOTATU will process the following categories of User data:
5.1. To formalise a purchase:
-Identifying data: name and surname, company (if applicable) and tax identification number (if applicable).
-Contact details: email address, phone number, and postal/billing address.
-Transaction data for goods and services at TATTOOTATU: products and services purchased or in which the User shows interest.
-Economic and financial data: none. Payment is made via PayPal or bank card through the Caixabank payment gateway.
-Browsing data.
5.2. Data provided through out-of-stock product forms:
-Identifying data: first name and surname.
-Contact details: email address, phone number, and company (not mandatory).
-Transaction data for goods and services at TATTOOTATU: products and services in which the User shows interest.
-Other data: data provided by Users themselves in the open fields for notes, suggestions, or requests.
-Browsing data.
5.3. Data provided through contact forms:
-Identifying data: first name and surname.
-Contact details: email address, phone number, and company (not mandatory).
-Other data: data provided by Users themselves in the open fields of the forms available on the Website.
-Browsing data.
5.4. Data provided for the sending of newsletters:
-Contact details: email address.
-Browsing data.
In the event that the User provides third-party data, they declare that they have the consent of those parties and commit to passing on the information contained in the Privacy Policy, exempting TATTOOTATU from any responsibility in this regard. However, TATTOOTATU may carry out periodic checks to verify this fact, adopting the necessary due diligence measures in accordance with data protection regulations.
6. What is the legal basis for the processing of the User's data by TATTOOTATU?
The legal basis for the processing of your personal data will be as follows:
6.1. Data provided to formalise a purchase:
-Execution of the contract, to manage, process, send, follow up on purchases made and contact the User to complete the order if they have saved their shopping cart or have saved products in their shopping cart without completing the payment process.
-Legitimate interest, to conduct quality and satisfaction surveys and to send personalised commercial communications, by electronic and/or conventional means, about TATTOOTATU's products and services.
-Consent, for sending commercial communications by electronic means about TATTOOTATU's products.
-Consent, to create a commercial profile, using third-party sources to offer the User products and services according to their interests.
6.2. Data provided through forms for out-of-stock products:
-Consent, to inform Users of the availability of products they expressed interest in that were out of stock.
-Consent, for sending commercial communications by electronic means about TATTOOTATU's products.
-Consent, to create a commercial profile, using third-party sources to offer the User products and services according to their interests.
6.3. Data provided through contact forms:
-Consent, to manage, process and respond to the User's requests, inquiries, incidents or questions.
-Consent, for sending commercial communications by electronic means about TATTOOTATU's products.
-Consent, to create a commercial profile, using third-party sources to offer the User products and services according to their interests.
6.4. Data provided for the sending of Newsletter:
-Consent, to manage the subscription and/or unsubscription to the Newsletter, made through the channel provided on the Website.
-Consent, for sending commercial communications by electronic means about TATTOOTATU's products.
-Consent, to create a commercial profile, using third-party sources to offer the User products and services according to their interests.
The consents obtained for the mentioned purposes are independent, so the User may revoke only one of them without affecting the others.
To revoke such consent, the User may contact TATTOOTATU through[email protected].
7. Who will the User's data be shared with?
The User's data may be communicated to:
-Public Administrations in cases provided for by law.
8. International data transfers
The User is informed that TATTOOTATU has contracted the services of WordPress, Google, Microsoft, and Mailchimp, whose servers are located in the USA, which implies an international data transfer. However, international data transfers are regulated as the mentioned entities are adhered to the Privacy Shield Protocol.
9. Data retention
User data will be retained for the following periods:
9.1. Data provided to formalise a purchase:
-The data provided to manage, process, send, and follow up on purchases made will be retained during the contractual relationship and, once it has ended, for a period of ten (10) years.
-The data used to contact the User to complete the order if they have saved their shopping cart or have saved products in their shopping cart without completing the payment process will be retained for 30 days.
-Data related to satisfaction and quality surveys will be retained for five (5) years.
9.2. Data provided through out-of-stock product forms:
-They will be processed until communication is sent to the User, informing them that the product is in stock and, in case it does not become available, for six (6) months.
9.3. Data provided through contact forms:
-They will be retained for the necessary period to process and respond to their request and, once completed, for a period of ten (10) years.
9.4. Data provided for the sending of newsletters:
-They will be retained as long as the User does not revoke the consent given for this purpose.
9.5. Data used for sending commercial communications:
-They will be processed until the User objects or revokes their consent.
10. Commercial and promotional communications
One of the purposes for which TATTOOTATU processes the personal data provided by Users is to send them commercial communications with information related to products, services, promotions, offers, events, or news relevant to the Users.
If the User wishes to stop receiving commercial or promotional communications from TATTOOTATU, they can unsubscribe from the service by sending an email to the following email address:[email protected].
11. User Responsibility
The User:
-Guarantees that they are over eighteen (18) years old and that the data they provide to TATTOOTATU is true, accurate, complete, and up to date. For this purpose, the User is responsible for the truthfulness of all the data they communicate and will keep the information provided suitably updated, so that it reflects their actual situation.
-Guarantees that they have informed any third parties whose data they provide, if applicable, of the aspects contained in this document. They also guarantee that they have obtained their consent to provide their data to TATTOOTATU for the stated purposes.
-Will be responsible for any false or inaccurate information they provide through the Website and for any direct or indirect damages that this may cause to TATTOOTATU or third parties.
12. Exercise of rights
The User can send a written request to TATTOOTATU, at the address indicated in the header of this Policy, or by email to the address[email protected], attaching a photocopy of their identity document, at any time and free of charge, to:
-Revoke the consents granted.
-Obtain confirmation as to whether TATTOOTATU is processing personal data concerning the User or not.
-Access their personal data.
-Rectify inaccurate or incomplete data.
-Request the deletion of their data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
-Obtain from TATTOOTATU the limitation of data processing when any of the conditions provided for in data protection regulations are met.
-Request the portability of the data provided by the User in those cases provided for in the regulations.
-Contact the DPO of TATTOOTATU at the following address:[email protected].
-Lodge a complaint regarding the protection of their personal data with the Spanish Data Protection Agency at the address C/ Jorge Juan, 6, 28001 – Madrid, when the interested party considers that TATTOOTATU has violated the rights recognized to them by the applicable data protection regulations.
13. Security measures
TATTOOTATU will treat the User's data at all times in an absolutely confidential manner and will maintain the necessary duty of secrecy regarding the same, in accordance with the applicable regulations, adopting the necessary technical and organisational measures to ensure the security of their data and to prevent its alteration, loss, processing or unauthorised access, taking into account the state of technology, the nature of the stored data, and the risks to which they are exposed.
14. Changes
TATTOOTATU reserves the right to review its Privacy Policy whenever it deems appropriate, in which case it will be communicated to the Users. For this reason, we ask you to regularly check this privacy statement to read the most recent version of TATTOOTATU's Privacy Policy.
15. Acceptance and Consent
The User declares that they have been informed of the conditions regarding the protection of personal data, accepting and consenting to the automated processing of the same by TATTOOTATU, in the manner and for the purposes indicated in this Privacy Policy.
You can use our services without providing any personal or identifiable information. Through your browser's security settings, you can prevent tracking of certain logging features. However, if you do so, please remember that the services may be less functional for you.