Your cart
There are no more items in your cart
Privacy Policy
At TARTARUGA, we take the protection of your personal data very seriously. This Privacy Policy explains how we collect, use, and protect the information you provide when using our website www.tartaruga.es, when communicating with us, or when accessing our services through third-party authentication systems.
1. Data Controller
TARTARUGA SPIRIT, SL
Tax ID (CIF): B70353255
Address: Urb. Verxeles, 54, 15886 Teo, A Coruña, Spain
Contact email: contacto@tartaruga.es.
2. Purposes of processing
We process personal data for the following purposes:
Manage online purchases, shipment, and delivery of orders.
Handle customer enquiries, requests, or incidents.
Manage billing, accounting, and compliance with legal obligations.
Send marketing communications and updates, where explicit consent has been given.
Prevent fraud and ensure the security and proper functioning of the platform.
Create and manage user accounts and allow secure access to personal areas.
3. Lawful bases for processing
The lawful bases for processing your personal data are:
Performance of a contract of sale.
Explicit consent provided by the user.
Compliance with legal obligations (billing, taxes, consumer protection).
Legitimate interests of TARTARUGA, such as service improvement and fraud prevention.
4. Data retention
Personal data will be retained:
For the duration of the contractual relationship and, thereafter, for the periods required by applicable law.
For marketing purposes, until consent is withdrawn or erasure is requested.
5. Recipients and data transfers
Data may be shared with logistics, transport, and payment service providers strictly for the purpose of managing orders and payments.
We do not sell or transfer personal data to third parties for commercial purposes.
No international data transfers outside the European Economic Area (EEA) are carried out, except where strictly necessary to provide the service (for example, international payment gateways or third-party authentication providers). In such cases, appropriate safeguards under GDPR are applied, such as Standard Contractual Clauses.
6. Third-party authentication services
TARTARUGA offers users the possibility to register and log in using third-party authentication services. These services provide fast and secure access to our platform.
Login via Meta (Facebook Login)
When you register or log in using Meta (Facebook Login), we receive exclusively the following data from Meta:
Name
Email address
This data is used solely to create and manage your user account and to allow secure access to your personal area on www.tartaruga.es.
We do not use this data for advertising, analytics, profiling, or marketing purposes, nor do we share it with third parties outside Meta, except where legally required. We do not access any additional data from your Meta account, such as contacts or activity.
You may revoke Meta Login access at any time through your Meta account settings. Once access is revoked, we will no longer receive data from Meta.
Login via Google (Google Sign-In)
When you register or log in using Google Sign-In, we receive exclusively the following data from Google:
Name
Email address
This data is used solely to create and manage your user account and to allow secure access to your personal area on www.tartaruga.es.
We do not use this data for advertising, analytics, profiling, or marketing purposes, nor do we share it with third parties outside Google, except where legally required. We do not access any additional data from your Google account, such as contacts or activity.
You may revoke Google Sign-In access at any time through your Google account settings. Once access is revoked, we will no longer receive data from Google.
If you wish to request deletion of the data associated with a user account created through Meta Login or Google Sign-In, you may contact us at contacto@tartaruga.es.
For more information about how Meta and Google process personal data, please refer to their respective privacy policies:
https://www.facebook.com/privacy/policy
https://policies.google.com/privacy
7. Your rights
You have the right to access, rectify, erase, object to processing, restrict processing, and request data portability.
To exercise these rights, please email contacto@tartaruga.es, stating your full name, order number (if applicable), and the right you wish to exercise, and attach a copy of a valid ID document.
8. Marketing communications
We only send marketing communications where explicit consent has been given. You may withdraw your consent at any time using the unsubscribe link included in our communications or by emailing contacto@tartaruga.es.
9. Information security
We implement appropriate technical and organisational measures to ensure the confidentiality, integrity, and availability of personal data.
10. Supervisory authority
If you believe that your personal data has not been processed in accordance with applicable regulations, you may lodge a complaint with the Spanish Data Protection Agency (AEPD):
www.aepd.es.
