Privacy policy

1. Data controller

Sen Velutinas S.L. · NIF TODO · Calle Amendoeira, Nº 25, BAJO, 27003 Lugo, Galicia, Spain · contacto@galutina.com. DPO (if applicable): TODO.

2. Data we process

Contact form: name, email, subject, message.
Request for quote (RFQ): organisation, NIF/CIF, contact person, email, phone, estimated units, notes.
Newsletter: email address.
Browsing (anonymous Cloudflare analytics): aggregated data without cookies.
Cart and purchase: the purchase takes place on Shopify, which is the controller of the data processed during checkout. See their policy.

3. Purposes and legal basis

Handle enquiries and send requested information — performance of a contract / consent.
Manage institutional requests for quote — performance of a contract.
Newsletter delivery — consent.
Site improvement through aggregated analytics — legitimate interest.

4. Retention

Data is kept for as long as necessary to fulfil the purpose and, thereafter, for the applicable legal periods. TODO — specify retention periods.

5. Recipients / processors

Resend (transactional email delivery).
Cloudflare (hosting and analytics).
Shopify (cart and checkout management).

6. International transfers

Some providers (Shopify, Cloudflare) may carry out transfers outside the EEA. TODO — detail the safeguards applied (SCC, DPF, etc.).

7. Rights

You have the right to access, rectify, erase, restrict, object to and request portability of your data, as well as to withdraw consent. You can exercise these rights by writing to privacidade@galutina.com. You may also lodge a complaint with the Spanish Data Protection Agency, the AEPD.

8. Security

We apply technical and organisational measures appropriate to the risk of the processing.

Updated: TODO.