TATETITOTU S.L.Data Protection Policy
The controller for data processing for the various processes related to managing users, clients and potential client, partners and suppliers is TATETITOTU S.L., based at C/ MONTE LA PILA 5 26140 LARDERO (province of LA RIOJA) SPAIN with CIF B26412700.
For matters related to our data protection policy, the contact telephone no. is +34 941252278, while the email address is: calidad@tuctuc.es
Likewise, please note that our company has assigned a Data Protection Delegate (DPD), as required under the current legislation. Contact our DPD at the following email address: calidad@tuctuc.es; or by phone on: + 34 941 25 22 78 – Quality Department.
The categories of personal data from clients and suppliers processed by TATETITOTU S.L. are:
ü Identifying details
ü Postal or electronic address
ü Business information
ü Economic and transactional data
ü Image details
ü Connectivity data
All the aforementioned data have been obtained directly from you through the presentation of a commercial offer, contract proposal, etc. or through your company when you provided your identification details and other information required to pursue the objective of a contractual relationship between parties. Either you or your company are obliged to provide updated data should any modifications be made.
At TATETITOTU S.L., we process the data that interested parties provide us to manage various activities arising from specific procedures undertaken in the areas of sales, post-sales service, supplier management, service quality, etc. Thus, we use your data to perform some of the following measures:
a) To send the information you requested through the contact form on our website, or any other means of contact with our company;
b) To provide product and service offers of interest to our potential and current clients;
c) To undertake the administrative, fiscal and accounting management for our clients and/or suppliers;
d) To do satisfaction surveys, market research, etc. to be able to provide the most suitable offers and optimised service quality, etc.
Personal data from physical persons linked to potential clients, clients and suppliers gathered by TATETITOTU S.L. through the various contact forms and/or information collation shall be retained while the interested party does not request their elimination. Data provided by our clients and suppliers are retained while a trade relationship is maintained between the parties, in any case respecting the minimum legal conservation periods depending on the field.
No matter what, TATETITOTU S.L. will keep the personal data for a period that is reasonably necessary considering our needs to respond to questions posed or to solve any issues, make improvements, activate new services and meet all legally applicable requirements. This means we may retain your personal data for a reasonable period, even after you have stopped using our products or using this website. Once this period has concluded, your personal data will be eliminated for all systems pertaining to TATETITOTU S.L.
Depending on the data processing type, below is the basis for the legitimisation of each process:
|
PURPOSE OF PROCESSING |
BASIS OF LEGITIMISATION |
|
Management of clients: payments, transfers, direct debiting, accountancy, tax and billing |
(Pre)contract implementation |
|
Client and subscriber management for loyalty through contests, gifts and prizes; sending of newsletters and events |
Agreement from the affected party |
|
Responding to queries from the website |
Agreement from the affected party; (Pre)contract implementation |
|
Database of models for participation in brand campaigns and promotions (web catalogues) |
Agreement from the affected party; (Pre)contract implementation |
|
Management of promotions and competitions. Sending information about future promotional measures and information on Tuc Tuc products |
Agreement from the affected party; (Pre)contract implementation |
|
Management of suppliers, payments/transfers and direct debits; billing for suppliers |
(Pre)contract implementation |
|
Management of consumer complaints |
(Pre)contract implementation |
|
Client product/service returns operations |
(Pre)contract implementation |
|
Client satisfaction survey operations |
Agreement from the affected party; Legal obligation |
|
Client incentive and/or loyalty programme operations; loyalty cards |
Agreement from the affected party; (Pre)contract implementation |
|
Application of Data Protection Legislation |
Legal obligation |
|
Follow-up and assessment of clients based on personal data, e.g. age, etc. |
Agreement from the affected party; (Pre)contract implementation |
|
Segmentation of clients based on personal data through statistical bases (website cookies) |
Agreement from the affected party; (Pre)contract implementation |
|
Management of operations of rejection of advertising and promotions by clients |
Agreement from the affected party; Legal obligation |
|
Attention to and follow-up on requests from clients through non-computerised means |
Agreement from the affected party; (Pre)contract implementation |
|
Facility access: monitoring and control |
Legitimate interest of the controller |
|
Compliance with managing international transfer operations with group companies |
Legal obligation |
|
Accounting, tax, administrative and commercial management of clients through the online store: https://www.tuctuc.com/ |
Agreement from the affected party; (Pre)contract implementation |
|
All company processing operations |
(Pre)contract implementation |
|
Management of supplier embargoes for tax or legal reasons |
Legal obligation |
|
Management of client complaints |
(Pre)contract implementation |
|
Accounting Management: management of client and/or supplier billing |
Maintenance, development and control of the contractual relationship between parties |
|
Tax management: application of deductions, bonuses, etc. |
Maintenance, development and control of the contractual relationship between parties; Meeting legal obligations |
|
Administrative initiatives: management of logistics, storage, deliveries to clients, goods receipt, etc. |
Maintenance, development and control of the contractual relationship between parties |
|
Marketing: Commercial measures for our products or services aimed at our clients or those persons who have requested related information in the past, including satisfaction surveys for our clients. |
Unequivocal consent granted by the interested party (potential clients). Please note that withdrawing said consent may at no time affect the implementation of a contract between the parties. Legitimate interest of the company in the promotion and commercialisation of products or services similar to those obtained or requested by the interested persons in the past. |
In terms of the legitimisation noted, you are obliged to provide the personal data. Should you not do so, your contract cannot be affected, nor can the legal obligations or those arising from the state be met.
TATETITOTU S.L. will never share personal data with any third-party company that intends to use them in direct marketing measures, except where you have expressly authorised us to do so.
We would like to inform you that we can provide your personal data to Public Administration bodies or the Relevant Authorities in those cases where a court injunction from said Authorities is received by TATETITOTU S.L. or, when acting on good faith, we feel such action is justifiable to comply with legal proceedings, to respond to any legal complaint or claim, or to protect the rights of TATETITOTU S.L. or its clients or the general public.
In order to meet the various needs arising from the accountancy, tax and administrative management of our clients and suppliers, it may prove necessary forTATETITOTU S.L. to convey your data to the other companies in our group.
TATETITOTU S.L. may provide your personal data to third parties (e.g. Internet service providers who help administer our website or perform the services contracted, auxiliary and IT maintenance companies, logistics companies, tax and accountancy agencies and consultants, etc.). In any case, these third parties must at all times maintain the same level of security asTATETITOTU S.L. in the matter of your personal data and, where necessary, be bound by legal commitments to safeguard your personal data privately and securely, and to only use the information under strict specific instructions from TATETITOTU S.L..
Anybody has the right to receive confirmation whether TATETITOTU S.L. is processing personal data of theirs.
In particular, interested parties may request the right to access their personal data, in addition to receiving them in a common mechanised reading format should the processing be effected by electronic means (right to portability).
Likewise, interested parties may request the right to rectify any imprecise data or, where appropriate, request their elimination when, among other reasons, these data are no longer necessary for the purposes for which they were collated.
Furthermore, under particular circumstances, the interested parties may request a limiting of the processing of their data or, under special circumstances and for reasons related to a personal situation, the interested parties may exercise their right to oppose the processing of their data. TATETITOTU S.L. shall stop processing the data, except under compelling legitimate grounds, or the exercising of or defence against possible claims or those exceptions established in the applicable legislation.
Moreover, you are hereby informed of the right to withdraw any consent given at any time, without this affecting the legality of the processing based on consent granted prior to said withdrawal.
Furthermore, the User may at any time exercise these rights by writing to us, using the contact details given in Section 1 'Data Processing Controller' in the current TATETITOTU S.L., Data and Privacy Policy, attaching a copy of your ID card. In addition, you have the right to present a complaint before the Spanish Data Protection Agency, particularly when satisfaction has not been obtained after exercising your rights.
Spanish Data Protection Agency (Agencia Española de Protección de Datos)
C/ Jorge Juan, 6
28001 – Madrid
Tel. 901100099 / 912663517
In accordance with the current Regulation (EU) 2016/679, TATETITOTU S.L. informs you that the personal data from website Users are processed for the processing purpose given in each data collating form on our website by TATETITOTU S.L. Your agreement to this covers the processing of your data. By pressing 'SEND', the User consents to their data being processed by TUC TUC, S.L.
Furthermore, we would like to inform you that, aside from in the presence of a legal injunction or express agreement on your part, TATETITOTU S.L. will not transfer your data to third parties.
Likewise, the User is hereby informed that they may exercise their right to access, rectify or eliminate data at any time, in addition to having all other rights noted in the present document and regulated by Regulation (EU) 2016/679, notifying TATETITOTU S.L., C/ MONTE LA PILA 5 26140 LARDERO (province of LA RIOJA); or by e-mail: calidad@tuctuc.es .
In addition, in accordance with the provision of Law 34/2002, dated 11 July, on Information Society Services and Electronic Commerce, TATETITOTU S.L. undertakes not to send advertising by electronic mail without previously having obtained express authorisation from the recipient. The User may oppose the sending of advertising by marking the corresponding box.
9.1 Security Measures
TATETITOTU S.L. implements the security levels required by the current European and Spanish legislation on data protection, contemplating the state-of-the-art, application costs and the nature, scope, context and purposes of the processing described, in addition to the variable probability and severity risks for your rights and freedoms as a person.
9.2 Processing of data from minors
Under the scope of RGPD UE 679/2016 and according to current regulations, children aged over 14 may consent to the hiring of information society services, e.g. subscribing to a forum, completing a contact form, etc. However, TATETITOTU S.L. shall be responsible for checking the truthfulness of the age given by said minor.
Processing the data collated from children aged under 14 requires the express agreement of their parents or legal guardians.
9.3 Modifications to our Data Protection and Privacy Policy
Occasionally, TATETITOTU S.L. may modify or correct this Data Protection Policy for Clients, Suppliers and Users section. Make sure to regularly check this section to see the changes that may have been made and how they could affect you.
9.4 Why must I accept this Data Protection and Privacy Policy?
The Data Protection Policy for Clients, Suppliers and Users provides all the information necessary to understand the type of data held by TATETITOTU S.L. on their potential clients, clients and/or suppliers, the intended purposes, the rights that the data protection legislation grants you as the affected party and the way in which to exercise said rights in an easily accessible format. Therefore, by deliberately sending your personal data through our means of contact and/or the beginning of a trade relationship with our company, we consider that you have recognised and accepted the processing of your personal data as described in the present policy. This personal information will be used solely for the purposes for which you have provided it or for what specific national and regional legislation permit us.
In any case, please be aware that by not agreeing to provide some particular data, you may be impeding the advancement of a contractual relationship between the parties with potentially serious consequences at the time certain provisions are undertaken as contemplated within the trade contract signed by the contracting party.
Should you have any questions about this Data Protection Policy for Potential Clients, Clients and Suppliers of TATETITOTU S.L., do contact us by writing to the address provided in the first section 'Data Processing Controller'. We would be delighted to hear from you and to respond to any further queries you may have.
The current Terms and Conditions are governed at all times by the provisions of Spanish and European legislation on the matter of data protection and privacy.