1. Who is responsible for processing your data?

The controller for data processing for the various processes related to managing users, clients and potential client, partners and suppliers is NATH 2004, S.L., based at C/ Amsterdam, 4, Polígono Industrial Tosses, 43870 Amposta, Tarragona, SPAIN with CIF B50988492.

For matters related to our data protection policy, the contact telephone no. is +34 941252278, while the email address is: tuctucstoreuk@tuctuc.com

 Likewise, please note that our company has assigned a Data Protection Delegate (DPD), as required under the current legislation. Contact our DPD at the following email address: tuctucstoreuk@tuctuc.com; or by phone on: + 34 941 25 22 78 – Customer care.

2. What type of data do we have about you and how have we obtained them?

The categories of personal data from clients and suppliers processed by NATH 2004, S.L. are:

  • Identifying details
  • Postal or electronic address
  • Business information
  • Economic and transactional data
  • Image details
  • Connectivity data

All the aforementioned data have been obtained directly from you through the presentation of a commercial offer, contract proposal, etc. or through your company when you provided your identification details and other information required to pursue the objective of a contractual relationship between parties. Either you or your company are obliged to provide updated data should any modifications be made.

3. Why do we process your data?

At NATH 2004, S.L., we process the data that interested parties provide us to manage various activities arising from specific procedures undertaken in the areas of sales, post-sales service, supplier management, service quality, etc. Thus, we use your data to perform some of the following measures:

  1. To send the information you requested through the contact form on our website, or any other means of contact with our company;
  2. To provide product and service offers of interest to our potential and current clients;
  3. To undertake the administrative, fiscal and accounting management for our clients and/or suppliers;
  4. To do satisfaction surveys, market research, etc. to be able to provide the most suitable offers and optimised service quality, etc.   

4. How long are your data kept?

Personal data from physical persons linked to potential clients, clients and suppliers gathered by NATH 2004, S.L.  through the various contact forms and/or information collation shall be retained while the interested party does not request their elimination. Data provided by our clients and suppliers are retained while a trade relationship is maintained between the parties, in any case respecting the minimum legal conservation periods depending on the field.

No matter what, NATH 2004, S.L. will keep the personal data for a period that is reasonably necessary considering our needs to respond to questions posed or to solve any issues, make improvements, activate new services and meet all legally applicable requirements. This means we may retain your personal data for a reasonable period, even after you have stopped using our products or using this website. Once this period has concluded, your personal data will be eliminated for all systems pertaining to NATH 2004, S.L.

5. What is the basis for the legitimisation of data processing?

Depending on the data processing type, below is the basis for the legitimisation of each process:



Management of clients: payments, transfers, direct debiting, accountancy, tax and billing

(Pre)contract implementation

Client and subscriber management for loyalty through contests, gifts and prizes; sending of newsletters and events

Agreement from the affected party

Responding to queries from the website

Agreement from the affected party; (Pre)contract implementation

Database of models for participation in brand campaigns and promotions (web catalogues)

Agreement from the affected party; (Pre)contract implementation

Management of promotions and competitions.

Sending information about future promotional measures and information on Tuc Tuc products

Agreement from the affected party; (Pre)contract implementation

Management of suppliers, payments/transfers and direct debits; billing for suppliers

(Pre)contract implementation

Management of consumer complaints

(Pre)contract implementation

Client product/service returns operations

(Pre)contract implementation

Client satisfaction survey operations

Agreement from the affected party; Legal obligation

Client incentive and/or loyalty programme operations; loyalty cards

Agreement from the affected party; (Pre)contract implementation

Application of Data Protection Legislation

Legal obligation

Follow-up and assessment of clients based on personal data, e.g. age, etc.

Agreement from the affected party; (Pre)contract implementation

Segmentation of clients based on personal data through statistical bases (website cookies)

Agreement from the affected party; (Pre)contract implementation

Management of operations of rejection of advertising and promotions by clients

Agreement from the affected party; Legal obligation

Attention to and follow-up on requests from clients through non-computerised means

Agreement from the affected party; (Pre)contract implementation

Facility access: monitoring and control

Legitimate interest of the controller

Compliance with managing international transfer operations with group companies

Legal obligation

Accounting, tax, administrative and commercial management of clients through the online store: https://www.tuctuc.com/

Agreement from the affected party; (Pre)contract implementation

All company processing operations

(Pre)contract implementation

Management of supplier embargoes for tax or legal reasons

Legal obligation

Management of client complaints

(Pre)contract implementation

Accounting Management: management of client and/or supplier billing

Maintenance, development and control of the contractual relationship between parties

Tax management: application of deductions, bonuses, etc.

Maintenance, development and control of the contractual relationship between parties; Meeting legal obligations

Administrative initiatives: management of logistics, storage, deliveries to clients, goods receipt, etc.

Maintenance, development and control of the contractual relationship between parties

Marketing: Commercial measures for our products or services aimed at our clients or those persons who have requested related information in the past, including satisfaction surveys for our clients.

Unequivocal consent granted by the interested party (potential clients). Please note that withdrawing said consent may at no time affect the implementation of a contract between the parties. Legitimate interest of the company in the promotion and commercialisation of products or services similar to those obtained or requested by the interested persons in the past.

In terms of the legitimisation noted, you are obliged to provide the personal data. Should you not do so, your contract cannot be affected, nor can the legal obligations or those arising from the state be met.

6. To whom are my data transferred?

NATH 2004, S.L. will never share personal data with any third-party company that intends to use them in direct marketing measures, except where you have expressly authorised us to do so.

We would like to inform you that we can provide your personal data to Public Administration bodies or the Relevant Authorities in those cases where a court injunction from said Authorities is received by NATH 2004, S.L. or, when acting on good faith, we feel such action is justifiable to comply with legal proceedings, to respond to any legal complaint or claim, or to protect the rights of NATH 2004, S.L. or its clients or the general public.

In order to meet the various needs arising from the accountancy, tax and administrative management of our clients and suppliers, it may prove necessary for NATH 2004, S.L. to convey your data to the other companies in our group.

NATH 2004, S.L.  may provide your personal data to third parties (e.g. Internet service providers who help administer our website or perform the services contracted, auxiliary and IT maintenance companies, logistics companies, tax and accountancy agencies and consultants, etc.). In any case, these third parties must at all times maintain the same level of security as NATH 2004, S.L. in the matter of your personal data and, where necessary, be bound by legal commitments to safeguard your personal data privately and securely, and to only use the information under strict specific instructions from NATH 2004, S.L.

7. What are your rights as the affected/interested party?

Anybody has the right to receive confirmation whether NATH 2004, S.L. is processing personal data of theirs.

In particular, interested parties may request the right to access their personal data, in addition to receiving them in a common mechanised reading format should the processing be effected by electronic means (right to portability).

Likewise, interested parties may request the right to rectify any imprecise data or, where appropriate, request their elimination when, among other reasons, these data are no longer necessary for the purposes for which they were collated.

Furthermore, under particular circumstances, the interested parties may request a limiting of the processing of their data or, under special circumstances and for reasons related to a personal situation, the interested parties may exercise their right to oppose the processing of their data. NATH 2004, S.L. shall stop processing the data, except under compelling legitimate grounds, or the exercising of or defence against possible claims or those exceptions established in the applicable legislation.

Moreover, you are hereby informed of the right to withdraw any consent given at any time, without this affecting the legality of the processing based on consent granted prior to said withdrawal.

Furthermore, the User may at any time exercise these rights by writing to us, using the contact details given in Section 1 'Data Processing Controller' in the current NATH 2004, S.L., Data and Privacy Policy, attaching a copy of your ID card. In addition, you have the right to present a complaint before the Spanish Data Protection Agency, particularly when satisfaction has not been obtained after exercising your rights.

Spanish Data Protection Agency (Agencia Española de Protección de Datos)

C/ Jorge Juan, 6

28001 – Madrid

Tel. 901100099 / 912663517

8. Data protection for website users

In accordance with the current Regulation (EU) 2016/679, NATH 2004 S.L. informs you that the personal data from website Users are processed for the processing purpose given in each data collating form on our website by NATH 2004, S.L. Your agreement to this covers the processing of your data. By pressing 'SEND', the User consents to their data being processed by NATH 2004, S.L.

Furthermore, we would like to inform you that, aside from in the presence of a legal injunction or express agreement on your part, NATH 2004, S.L. will not transfer your data to third parties.

Likewise, the User is hereby informed that they may exercise their right to access, rectify or eliminate data at any time, in addition to having all other rights noted in the present document and regulated by Regulation (EU) 2016/679, notifying NATH 2004, S.L., C/ AMSTERDAM 4, POLÍGONO INDUSTRIAL TOSSES, 43870, Amposta, TARRAGONA); or by e-mail:  tuctucstoreuk@tuctuc.com.

In addition, in accordance with the provision of Law 34/2002, dated 11 July, on Information Society Services and Electronic Commerce, NATH 2004, S.L. undertakes not to send advertising by electronic mail without previously having obtained express authorisation from the recipient. The User may oppose the sending of advertising by marking the corresponding box.

9. Other information of interest about our privacy policy

9.1Security Measures

NATH 2004, S.L. implements the security levels required by the current European and Spanish legislation on data protection, contemplating the state-of-the-art, application costs and the nature, scope, context and purposes of the processing described, in addition to the variable probability and severity risks for your rights and freedoms as a person.

9.2Processing of data from minors

Under the scope of RGPD UE 679/2016 and according to current regulations, children aged over 14 may consent to the hiring of information society services, e.g. subscribing to a forum, completing a contact form, etc. However, NATH 2004, S.L. shall be responsible for checking the truthfulness of the age given by said minor.

Processing the data collated from children aged under 14 requires the express agreement of their parents or legal guardians.

9.3Modifications to our Data Protection and Privacy Policy

Occasionally, NATH 2004, S.L. may modify or correct this Data Protection Policy for Clients, Suppliers and Users section. Make sure to regularly check this section to see the changes that may have been made and how they could affect you.

9.4Why must I accept this Data Protection and Privacy Policy?

The Data Protection Policy for Clients, Suppliers and Users provides all the information necessary to understand the type of data held by NATH 2004, S.L.  on their potential clients, clients and/or suppliers, the intended purposes, the rights that the data protection legislation grants you as the affected party and the way in which to exercise said rights in an easily accessible format. Therefore, by deliberately sending your personal data through our means of contact and/or the beginning of a trade relationship with our company, we consider that you have recognised and accepted the processing of your personal data as described in the present policy. This personal information will be used solely for the purposes for which you have provided it or for what specific national and regional legislation permit us.

In any case, please be aware that by not agreeing to provide some particular data, you may be impeding the advancement of a contractual relationship between the parties with potentially serious consequences at the time certain provisions are undertaken as contemplated within the trade contract signed by the contracting party.

Should you have any questions about this Data Protection Policy for Potential Clients, Clients and Suppliers of NATH 2004, S.L., do contact us by writing to the address provided in the first section 'Data Processing Controller'. We would be delighted to hear from you and to respond to any further queries you may have.

10. Applicable Legislation

The current Terms and Conditions are governed at all times by the provisions of Spanish and European legislation on the matter of data protection and privacy.