Privacy policy

1. Introduction

This Privacy Policy explains how telovendo collects, uses, shares, and protects your personal data when you visit our website, browse our products, place an order, or otherwise interact with us. We are committed to processing your data lawfully, fairly, and transparently, in accordance with the General Data Protection Regulation (GDPR) and applicable Spanish data protection law. Please read this policy carefully to understand your rights and how we handle your information.

2. Who is responsible for your data (the Controller)

The controller responsible for the personal data processed through this website is:
telovendo
C. de la Oca, nº10, Carabanchel
28025 Madrid, Spain
Email: contact@telovendo.site
Phone: +34679833673

If you have any questions about this policy or about how we process your personal data, you can contact us using the details above.

3. What data we collect and why

3.1 When you visit the site

When you browse our website, our server temporarily logs certain technical information, such as your IP address, the date and time of access, the URL requested, the referring page, and your browser and operating system. This information is used to keep the site secure, diagnose technical issues, and ensure the website functions reliably. Legal basis: our legitimate interest in operating and securing our website (GDPR Art. 6(1)(f)).

3.2 When you place an order

To process and fulfill your order, we collect the information necessary to complete the purchase: your name, billing and shipping address, email address, phone number (optional), and payment details. Payments can be made using Visa, Mastercard, American Express, Maestro, Google Pay, or Apple Pay; the payment details you provide are transmitted securely to our payment providers to authorize and process the transaction. Legal basis: performance of the contract between you and us (GDPR Art. 6(1)(b)).

3.3 When you contact us

If you contact us by email, phone, or through a contact form, we store the content of your message together with your contact details so that we can respond to your query, request, or complaint. Legal basis: performance of a contract or steps taken at your request prior to entering into one (GDPR Art. 6(1)(b)), and our legitimate interest in providing effective customer service (GDPR Art. 6(1)(f)).

4. How we use your data

We use the personal data described above only for the purposes for which it was collected, namely to: operate, maintain, and secure our website; process and fulfill your orders, including payment processing; communicate with you about your order or your enquiries; and comply with our legal obligations. We do not use your personal data for purposes incompatible with those described in this policy without informing you and, where required, obtaining your consent.

5. How long we keep your data

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, including to satisfy any applicable legal, tax, or accounting requirements. Once your data is no longer needed for these purposes, we delete or anonymize it.

6. Sharing your data

We do not sell your personal data. We share personal data with third parties only where:

  • you have given us your explicit consent;
  • sharing is necessary to perform a contract with you, for example passing your order and payment details to our payment providers or shipping partners so they can fulfill your order;
  • we are required to do so by law or by a competent authority; or
  • we have a legitimate interest in doing so, in accordance with GDPR Art. 6(1)(f), and that interest is not overridden by your rights and freedoms.

Any third party that processes personal data on our behalf is bound by contractual obligations to keep it confidential and to use it only for the purposes we specify.

7. International data transfers

Our website is hosted on the Shopify platform (Shopify Inc., 150 Elgin Street, Ottawa, ON, K2P 1L4, Canada), which means some of your personal data may be processed outside of the European Economic Area. Where this occurs, we and our providers take appropriate measures to ensure your personal data continues to receive an adequate level of protection, in accordance with GDPR requirements on international transfers.

8. Services we use

This site is hosted on Shopify (Shopify Inc., 150 Elgin Street, Ottawa, ON, K2P 1L4, Canada). Payments are processed by our configured payment providers, which support Visa, Mastercard, American Express, Maestro, Google Pay, and Apple Pay. Each provider processes your data under its own privacy policy and acts as an independent controller or processor for the payment data it handles.

9. Cookies

We use cookies that are strictly necessary for the website to function, such as those required for browsing and completing a purchase. These necessary cookies do not require your consent. Optional cookies, such as those used for analytics or marketing purposes, are only set after you have given your consent through our cookie banner. You can withdraw or change your cookie consent at any time through your browser or cookie preference settings.

10. Data security

We implement appropriate technical and organizational measures designed to protect your personal data against unauthorized access, loss, misuse, or alteration. While we take reasonable steps to safeguard your information, no method of transmission or storage is completely secure, and we encourage you to take care when sharing information online.

11. Children's privacy

Our website and services are intended for adults and are not directed at children. We do not knowingly collect personal data from minors without the appropriate consent required by applicable law. If you believe we have inadvertently collected data from a minor, please contact us so that we can take appropriate action.

12. Your rights

Under the GDPR, you have the right to:

  • request access to your personal data (Art. 15);
  • request correction of inaccurate or incomplete data (Art. 16);
  • request deletion of your data (Art. 17);
  • request restriction of processing (Art. 18);
  • request data portability (Art. 20);
  • withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Art. 7(3)); and
  • lodge a complaint with a supervisory authority (Art. 77), including the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), which is the competent authority for Spain.

To exercise any of these rights, contact us at contact@telovendo.site. We will respond to your request within the timeframes required by applicable law.

13. Right to object

Where we process your personal data on the basis of our legitimate interest, you have the right to object to that processing at any time under GDPR Art. 21. If you object, we will stop processing your data for that purpose unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims. To exercise this right, contact us at contact@telovendo.site.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. Any changes will be posted on this page, and we encourage you to review this policy periodically to stay informed about how we protect your data.

15. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
telovendo
C. de la Oca, nº10, Carabanchel
28025 Madrid, Spain
Email: contact@telovendo.site
Phone: +34679833673