Privacy Policy

  1. Home
  2. Privacy Policy

The purpose of this policy is to inform interested parties about the various data processing activities carried out by this organization through the website that may affect their personal data, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights.

1. IDENTIFICATION AND CONTACT DETAILS OF THE CONTROLLER

VINCELONA, S.L.U., located at C/ GIRONA 16 (08850 GAVA) BARCELONA, with NIF B65720336, contact phone 931770770 and email vincelona@vincelona.com

2. PURPOSES OF PROCESSING YOUR PERSONAL DATA

Users/visitors of the controller's website

We will process the personal data provided for the following purposes:

  • To respond to requests, complaints, and incidents submitted through our contact channels provided on the website.
  • To understand user behavior on the website in order to detect possible cyberattacks on our site.
  • To comply with the legal obligations that are directly applicable to us and regulate our activity.
  • To protect and exercise our rights or respond to claims of any kind.
  • Where applicable, to send commercial communications related to the goods or services that make up our activity and/or news or newsletters related to our sector. If you refuse to grant us authorization, we will be unable to send you information from the entity.
  • Where applicable, to manage your participation in contests and promotions carried out by the entity. If you refuse to grant us authorization, you will not be able to participate.
  • Where applicable, to send satisfaction and/or quality surveys. If you refuse to grant us authorization, we will be unable to evaluate the service provided.
  • To manage your registration on the entity's web platform and generate a username and password. If you refuse to grant us authorization, you will not be able to register on the platform.

Clients

In addition to the purposes indicated in the section «users/visitors of the website», we will process your personal data provided for the following purposes:

  • To manage the business relationship.
  • To manage the provision of the services you have contracted.
  • Tasks related to the shipping and receipt of the purchased product.
  • To carry out administrative, accounting, and tax management.

3. LEGAL BASIS FOR PROCESSING

Users/visitors of the controller's website

  • Based on the consent you have given us to process your data for the indicated purposes. Refusal to provide your personal data will make it impossible to process your data for the mentioned purposes.
  • To comply with the legal obligations that apply to us. In this case, the data subject cannot refuse the processing of personal data.
  • Based on our legitimate interest in protecting our image, business, and track record by preventing attacks on our website. In this case, the data subject cannot refuse the processing of personal data, although they may exercise, where appropriate, the rights recognized in the «rights» section of this policy.

4. WEBSITE PLUGINS AND TOOLS

Google reCAPTCHA

We use the Google reCAPTCHA service, based on legitimate interest, to detect whether the website is being used by bots, in order to protect the portal and prevent abusive and fraudulent practices, such as spam.

You can access our provider's privacy policy by clicking here

Google Maps

We use Google Maps (API) to display interactive maps directly on our website and allow you to use its features. For these purposes, please note that by using the service, Google will collect and store information about your usage. Please be aware that using Google may involve International Data Transfers not based on an adequacy decision by the European Commission or the provision of appropriate safeguards, and therefore, they do not have an adequate level of protection in accordance with the GDPR. For your information, this may entail certain risks for the protection of your personal data. Such risks may include the absence of an equivalent supervisory authority and/or equivalent data processing protection principles and/or equivalent rights for data subjects. For all these reasons, we recommend that you carefully read our provider's privacy policy beforehand by clicking here.

Stripe

As part of our services, we use the Stripe payment gateway to process financial transactions and ensure your payments are made securely and efficiently. We recommend that you review Stripe's privacy policy beforehand to understand how they handle your personal information by clicking here.

Redsys

As part of our services, we use the Redsys payment gateway to process financial transactions and ensure your payments are made securely and efficiently. We recommend that you review Redsys's privacy policy beforehand to understand how they handle your personal information by clicking here.

5. DATA RETENTION PERIODS OR CRITERIA

The personal data provided will be kept for as long as necessary to fulfill the purposes for which they were initially collected.

Once the data is no longer necessary for the relevant processing, it will be properly blocked and, if necessary, made available to the competent Public Administrations and Bodies, Judges and Courts, or the Public Prosecutor's Office, during the statute of limitations for actions that may arise from the relationship with the client and/or the legally established retention periods.

Data blocking period:

  • The Civil Code.   Between 1 and 5 years depending on the case, in accordance with articles 1964.2 and 1968.2 of the aforementioned legal code.
  • The Commercial Code. For 6 years, in accordance with article 30 of the aforementioned legal code. This applies to commercial information related to (issued and received invoices, receipts, corrective invoices, bank documents, etc.).
  • The General Tax Law. For 4 years in accordance with articles 66 to 70 of the aforementioned legal code. This applies to information related to tax obligations.

6. AUTOMATED DECISIONS AND PROFILING

The website does not make automated decisions or create profiles.

7. RECIPIENTS

During the period your personal data is processed, the organization may disclose your data to the following recipients:

  • Judges and Courts.
  • Law Enforcement Agencies.
  • Other competent authorities or public bodies, when the controller is legally required to provide personal data.
  • Banks and Financial Institutions.
  • Courier companies for the delivery of the purchased product.

8. INTERNATIONAL DATA TRANSFERS

We inform you that our website uses Cloudflare hosting services, a provider certified under the EU-US Privacy Framework.

Cloudflare operates its service through its global network of data centers, mainly in the United States and the European Economic Area. However, in order to provide the service, information may be stored in other parts of the world. To ensure the security and privacy of personal data in this context, Cloudflare implements appropriate safeguards in accordance with the General Data Protection Regulation (GDPR), such as the Standard Contractual Clauses adopted by the European Commission.

Additionally, it should be noted that the provider has security measures in place to ensure that personal data is handled with the highest level of protection and in compliance with applicable regulations, guaranteeing TLS encryption of all data in transit, as well as maintaining strict physical security standards.

You can obtain more information about our provider's privacy policy by clicking here.

9. SOCIAL MEDIA

In order to involve you in our activity and keep you informed of our news, we inform you that VINCELONA, S.L.U. has created a profile on Social Media.

All users have the opportunity to join our social networks or groups. However, please note that unless we request your data directly (for example, through marketing actions, contests, promotions, or any other valid means), your data will belong to the relevant Social Network, so we recommend that you carefully read their terms of use and privacy policies, and ensure you configure your preferences regarding data processing.

Below, we provide the link to the privacy policy of the different Social Networks where we have a presence, so you can access the privacy policies at any time and configure your profile to ensure your privacy:

10. RIGHTS

Data subjects may request more information about the processing of their personal data as well as exercise at any time and free of charge the rights of access, rectification, and erasure, as well as request the restriction of processing, object to it, request data portability (where technically possible), or withdraw the consent given and, where applicable, not be subject to a decision based solely on automated processing, including profiling.

To do so, you may use the forms provided by the organization, or send a written request to the postal address or email address referenced at the top. For your information, you may be asked for your ID or any similar document to verify your identity, provided this cannot be done by less intrusive means.

If you feel your rights regarding the protection of your personal data have been violated, especially if you have not obtained satisfaction in exercising your rights, you may file a complaint with the competent Data Protection Authority (Spanish Data Protection Agency), through its website www.aepd.es

In compliance with article 21 of Law 34/2002 on information society services and electronic commerce, if you do not wish to receive further information about our services, you can unsubscribe by sending an email to vincelona@vincelona.com, with subject: “UNSUBSCRIBE”

11. ACCURACY OF DATA

The data subject guarantees that the data provided is true, accurate, complete, and up to date; committing to inform of any changes to the data provided, through the channels enabled for this purpose and indicated in point one of this policy. They will be responsible for any damage or harm, direct or indirect, that may result from failure to comply with this obligation.

If the user provides data of third parties, they declare that they have the consent of the data subjects and undertake to inform them of the information contained in this clause, releasing the organization from any liability arising from failure to comply with this obligation.

12. MODIFICATIONS AND UPDATES

This privacy policy may be modified/updated in accordance with legal requirements or to adapt the policy to instructions issued by the Spanish Data Protection Agency, or as a result of changes to our website. For this reason, we advise users to periodically review our Privacy Policy.

If you have any questions about this policy, you can contact VINCELONA, S.L.U. through the forms provided by the organization, or send a written request to the postal address or email address referenced at the top.

Last reviewed June 19, 2025