- Owner Feines Fines SLU
- Tax ID (NIF) 12345678X
- Registered office Raval de l'Hospital 20 -1 17500 Ripoll
- Email info@feinesfines.com
1. Data controller
The controller of your personal data is the company identified at the top of this page (Feines Fines SLU). For any privacy matter you can write to info@feinesfines.com.
We process data in accordance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPDGDD) and Law 34/2002 (LSSI-CE).
2. In short
This website does not use analytics, advertising or tracking cookies, and it does not build any profile of you. We only keep the data you give us —when you create an account, place an order, subscribe to the newsletter or write to us— and we only use it for that.
3. What data we process, why, and on what legal basis
User account. If you create an account, we process your name, email address and password (stored encrypted: not even we can read it), the type of customer (private or professional) and, if you provide them, your telephone number and delivery addresses. From professional customers we also ask for the company’s billing details: company name, trading name, tax ID (NIF/CIF/VAT), contact person, billing email and registered address. We do this to manage the account and so that you can place and view orders; we send you an email to verify that the address is yours. Legal basis: performance of the service you request (Art. 6.1.b GDPR). The data is kept while the account is active; you can delete it at any time by asking us.
Orders and invoicing. To process an order we handle your account data, delivery and billing addresses, and the contents and amount of the order. We use them to prepare and deliver it, collect payment, invoice it and deal with any issue or warranty claim. Legal basis: performance of the purchase contract (Art. 6.1.b) and compliance with tax and accounting obligations (Art. 6.1.c). The data is kept for as long as the relationship lasts and, afterwards, blocked for the legal periods.
Payment. Payment is processed by Shopify, not by us: your card or payment method details are given directly to Shopify and its payment gateway, and they never reach us or get stored by us.
Newsletter. If you subscribe from the page footer, we process your email address, language, the date of sign-up and confirmation, the category of the list and a record of your consent. We do not store your IP address, only an irreversible fingerprint (hash) that is used to limit abuse. We use double opt-in: we will not start writing to you until you confirm the sign-up with the link you will receive by email. Legal basis: your consent (Art. 6.1.a), which you can withdraw at any time using the unsubscribe link in every email. We keep it until you unsubscribe; we then keep only the address marked as unsubscribed, so that we do not write to you again by mistake, and we delete it if you ask us to.
News for customers. If you have bought from us, we may email you news about pieces similar to those you have bought. We tell you at the time of purchase, there is a box on the order to opt out, and every email carries a one-click unsubscribe link. Legal basis: our legitimate interest in maintaining the relationship with customers (Art. 6.1.f GDPR and Art. 21.2 LSSI-CE). You can object at any time, free of charge.
Professional lists. With people with whom we have a professional or commercial relationship —prescribers, sales agents, distributors, authors and collaborators— we keep our own communication lists, with information about that relationship. They are not open: we only add people who belong to them, and you cannot sign yourself up. Legal basis: the existing relationship and, where applicable, your consent (Art. 6.1.b, 6.1.f and 6.1.a). You can end them whenever you like using the unsubscribe link or by writing to us.
Enquiries. If you write to us by email, we process your name, your address and the content of the message in order to reply. Legal basis: your consent and our legitimate interest in answering enquiries (Art. 6.1.a and 6.1.f). We keep it for the time needed to deal with the enquiry and, afterwards, for the limitation periods of possible liabilities.
Sign-in with Google or Apple. If you choose this option, the provider tells us your name and verified email address in order to create or identify your account, and nothing else. Legal basis: performance of the service (Art. 6.1.b). Google and Apple process your data under their own policies.
Site security. To protect the website and the accounts (for example, to limit repeated sign-in or sign-up attempts) we temporarily process the IP address; we do not store it permanently or use it to build profiles. The servers hosting the website log technical access (IP, date and page requested) for the period set by their provider. Legal basis: our legitimate interest in the security of the website (Art. 6.1.f).
4. Cookies and storage on your device
We do not use analytics, advertising or tracking cookies, nor pixels or third-party tools to measure you; that is why we do not show you a cookie banner. There are only two things on your device. If you sign in, WordPress stores a technical cookie, essential to keep your session open and exempt from consent; it disappears when you sign out or when it expires. And the basket, the discount code and the number of columns you choose in the grids are stored in your browser (local storage), not on our servers; you can delete them at any time from your browser.
If you use sign-in with Google or Apple, or follow a link to another site (social networks, maps), those services may use their own cookies under their own policies.
5. Recipients and transfers
We do not sell or hand over your data. The following have access to it, only to provide us with the service and under the corresponding contract: Hostinger (website hosting and content delivery network), Brevo (sending of emails: confirmations and newsletter), Shopify (shop, orders and payment), the transport and courier companies that deliver orders (delivery name, address and telephone number), our tax and accounting advisers and, if you choose it, Google or Apple for signing in. We may also disclose data to public administrations and authorities when the law requires it.
Some of these providers may process data outside the European Economic Area (for example, in the United States or Canada). In that case, the transfer is based on a European Commission adequacy decision or on standard contractual clauses and other appropriate safeguards, in accordance with Article 46 GDPR.
We do not make automated decisions or build profiles about you.
6. Retention
When data is no longer needed for the purpose for which it was collected, we delete it or, where there are legal retention obligations, we block it for the applicable periods and then destroy it.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time (without affecting processing carried out before), by writing to info@feinesfines.com and saying which right you wish to exercise. We may ask you to prove your identity. We will reply within one month.
You can view and change your account data yourself from My account, and you can unsubscribe from the newsletter with the link in any email. If you consider that we are not processing your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the data protection authority of your country of residence, without prejudice to contacting us first.
8. Security
We apply appropriate technical and organisational measures: encrypted connection (HTTPS), passwords stored encrypted, a limit on sign-in attempts, restricted access to data and providers with guarantees. No system is infallible; if a security breach affecting you were to occur, we will notify it as the law requires.
9. Children
This website is not aimed at children under 14 and we do not knowingly collect their data. If you believe a child has given us data, write to us and we will delete it.
10. Changes to this policy
We may update this policy, for example if we add new features. The current version is always the one published on this page.
Last updated: 9 October 2026.