Privacy policy
1. IDENTITY OF THE DATA CONTROLLER
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, the “GDPR”), and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights (hereinafter, the “LOPDGDD”), the User is informed that any personal data provided through this website (hereinafter, the “Website”) will be processed by:
Data Controller: FINE NIPONA S.L.
Tax ID (CIF): B56533557
Registered address: C/ Jaume Villanueva, 3 Esc 2, 2B, 07007 Palma, Balearic Islands, Spain
Contact email: hola@finenipona.com
FINE NIPONA S.L. has not appointed a Data Protection Officer (DPO) as it is not required to do so under Article 37 of the GDPR. However, any queries relating to personal data processing may be directed to the email address above.
2. INFORMATION AND CONSENT
By reading this Privacy Policy, the User is informed of how FINE NIPONA S.L. collects, processes and protects the personal data provided through the forms on the Website (such as the checkout process, contact forms or newsletter subscriptions), as well as data derived from browsing activity and the use of cookies and similar technologies.
The User should read this Privacy Policy carefully and determine freely and voluntarily whether they wish to provide their personal data to FINE NIPONA S.L.
3. PERSONAL DATA WE COLLECT
FINE NIPONA S.L. may collect and process the following categories of personal data:
• Identification and contact data: name, surname, postal address, email address, telephone number.
• Billing data: tax identification number (where applicable), billing address.
• Transaction data: order history, amounts, payment method used (complete card details are not stored).
• Browsing data: IP address, browser type, operating system, device, pages visited, time spent, referral URL, interactions with the Website. These data are collected through cookies and similar technologies (see clause 11).
• Communication data: content of emails, queries or complaints sent by the User.
4. OBLIGATION TO PROVIDE DATA
The data requested through the forms on the Website are generally required in order to fulfil the stated purposes (such as processing an order or responding to a query). Mandatory fields will be clearly indicated. Failure to provide the required data will prevent orders from being processed or requests from being addressed, without prejudice to the User’s ability to freely browse the Website.
5. PURPOSES OF PROCESSING AND LEGAL BASES
Personal data collected will be processed by FINE NIPONA S.L. in accordance with the following purposes and legal bases:
| Purpose | Legal basis | Retention |
|---|---|---|
| Processing purchases, orders, invoicing and payments | Performance of a contract (Art. 6(1)(b) GDPR) | Duration of the contractual relationship + 6 years (Spanish Commercial Code) and 5 years (General Tax Act) |
| Arranging deliveries and logistics (sharing data with logistics operators and carriers) | Performance of a contract (Art. 6(1)(b) GDPR) | Duration of the contractual relationship + applicable statutory retention period |
| Responding to queries, complaints and information requests | Consent (Art. 6(1)(a) GDPR) | Until resolution of the query + 3 years (limitation period) |
| Sending marketing communications, newsletters and promotions (Shopify Email) | Explicit consent (Art. 6(1)(a) GDPR + Art. 21 LSSICE) | Until consent is withdrawn |
| Compliance with legal obligations (tax, accounting, administrative) | Legal obligation (Art. 6(1)(c) GDPR) | As required by applicable law (5-6 years) |
| Fraud prevention and platform security | Legitimate interest (Art. 6(1)(f) GDPR) | Duration of the relationship + applicable limitation period |
| Statistical analysis of Website usage and service improvement (Google Analytics, Meta Pixel, TikTok Pixel) | Consent (Art. 6(1)(a) GDPR) given via the cookie banner | As configured by each tool (see clause 11) |
Purpose Legal basis Retention
Processing purchases, orders, invoicing and payments Performance of a contract (Art. 6(1)(b) GDPR) Duration of the contractual relationship + 6 years (Spanish Commercial Code) and 5 years (General Tax Act)
Arranging deliveries and logistics (sharing data with logistics operators and carriers) Performance of a contract (Art. 6(1)(b) GDPR) Duration of the contractual relationship + applicable statutory retention period
Responding to queries, complaints and information requests Consent (Art. 6(1)(a) GDPR) Until resolution of the query + 3 years (limitation period)
Sending marketing communications, newsletters and promotions (Shopify Email) Explicit consent (Art. 6(1)(a) GDPR + Art. 21 LSSICE) Until consent is withdrawn
Compliance with legal obligations (tax, accounting, administrative) Legal obligation (Art. 6(1)(c) GDPR) As required by applicable law (5–6 years)
Fraud prevention and platform security Legitimate interest (Art. 6(1)(f) GDPR) Duration of the relationship + applicable limitation period
Statistical analysis of Website usage and service improvement (Google Analytics, Meta Pixel, TikTok Pixel) Consent (Art. 6(1)(a) GDPR) given via the cookie banner As configured by each tool (see clause 11)
Consent given for any of the above purposes may be withdrawn at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.
6. DATA RECIPIENTS AND DISCLOSURE TO THIRD PARTIES
In order to carry out its business operations, FINE NIPONA S.L. shares User data with third parties acting as data processors, with whom the corresponding data processing agreements have been entered into pursuant to Article 28 of the GDPR.
Categories of recipients:
• E-commerce platform: Shopify Inc. (151 O’Connor Street, Ottawa, Ontario, Canada). Shopify processes User data as a data processor for the operation of the online store, including customer account management, order processing, Website hosting and email marketing services (Shopify Email). See clause 7 regarding international data transfers.
• Logistics operator: CEVA LOGISTICS ESPAÑA, S.L. (Pol. Ind. Veredilla, Avda. Ontalva 6-A, 45200 Illescas, Toledo, Spain). Receives the User’s name, address and telephone number for order preparation and dispatch.
• Transport and courier companies: The carriers responsible for final delivery of the product to the User’s address (name, address and contact telephone number).
• Payment gateway: Shopify Payments (operated by Stripe). Processes the User’s payment data in accordance with PCI DSS standards. FINE NIPONA S.L. does not store complete card details.
• Analytics and advertising providers: Google LLC (Google Analytics), Meta Platforms Inc. (Meta Pixel) and TikTok Inc. (TikTok Pixel). These providers receive User browsing data only where the User has given consent via the cookie banner. See clause 7 regarding international data transfers.
• Tax and accounting advisers: For the fulfilment of FINE NIPONA S.L.’s tax obligations.
FINE NIPONA S.L. does not sell, rent or otherwise disclose personal data to third parties for their own marketing purposes.
7. INTERNATIONAL DATA TRANSFERS
Due to the use of technology providers based outside the European Economic Area (EEA), international transfers of personal data may occur to the following countries:
| Provider | Country | Data transferred | Safeguards |
| Shopify Inc. | Canada / USA | Account, order and browsing data |
Adequacy decision for Canada + European Commission Standard Contractual Clauses (SCCs) for the USA |
| Google LLC | USA | Browsing data (with consent) | EU-U.S. Data Privacy Framework |
| Meta Platforms Inc. | USA | Browsing data (with consent) | EU-U.S. Data Privacy Framework |
| TikTok Inc. | USA / Singapore | Browsing data (with consent) |
European Commission Standard Contractual Clauses (SCCs) |
The User may obtain further information about the applicable safeguards by contacting hola@finenipona.com. FINE NIPONA S.L. periodically verifies that the technology providers carrying out international data transfers maintain valid safeguard mechanisms in compliance with European data protection legislation.
8. DATA RETENTION
Personal data will be retained for the period strictly necessary to fulfil the purposes for which they were collected and, thereafter, for the applicable statutory retention periods:
• Data relating to the sale of products: for the duration of the contractual relationship and, once concluded, for a minimum of 6 years pursuant to Article 30 of the Spanish Commercial Code, and 5 years for tax purposes under General Tax Act 58/2003.
• Data processed for the purpose of sending marketing communications: until the User withdraws consent or objects to such processing.
• Browsing data and cookies: in accordance with the configuration and retention policy of each tool (see clause 11).
• Data relating to queries and complaints: until the matter is fully resolved and, thereafter, for the applicable limitation period (3 years as a general rule).
Once the applicable retention periods have expired, data will be deleted or, where appropriate, anonymised. Where personal data are no longer required for the purposes for which they were collected, they will be blocked and retained solely for the statutory periods necessary to address any potential liabilities arising from the processing, after which they will be securely deleted.
9. USER RIGHTS
The User may exercise the following rights at any time and free of charge by sending a written request accompanied by proof of identity to C/ Jaume Villanueva, 3 Esc 2, 2B, 07007 Palma, Balearic Islands, Spain, or by email to hola@finenipona.com:
• Access: to obtain confirmation as to whether personal data are being processed and, where so, to access such data.
• Rectification: to request the correction of inaccurate data or the completion of incomplete data.
• Erasure (right to be forgotten): to request the deletion of personal data where they are no longer necessary for the purposes for which they were collected, among other grounds.
• Objection: to object to the processing of personal data on grounds relating to the User’s particular situation, or to processing for direct marketing purposes.
• Restriction of processing: to request the suspension of processing in the circumstances set out in Article 18 of the GDPR.
• Data portability: to receive the personal data provided in a structured, commonly used and machine-readable format, and to transmit them to another controller.
• Withdrawal of consent: to withdraw consent at any time for any purpose that requires it, without affecting the lawfulness of processing based on consent prior to its withdrawal.
FINE NIPONA S.L. will respond to requests to exercise rights within one month of receipt, which may be extended by a further two months in the case of particularly complex requests, subject to prior notification to the User.
The User also has the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) via its electronic office at www.aepd.es if they consider that applicable data protection legislation has been infringed.
10. DATA RELATING TO MINORS
The Website and the products sold by FINE NIPONA S.L. are not directed at persons under 18 years of age. FINE NIPONA S.L. does not knowingly collect or process personal data of persons under 14 years of age without the consent of their parents or legal guardians, in accordance with Article 7 of the LOPDGDD.
If FINE NIPONA S.L. becomes aware that it has collected data from a minor without the consent of their legal representative, it will proceed to delete such data without delay.
11. COOKIES AND TRACKING TECHNOLOGIES
The Website uses cookies and similar technologies to ensure its proper functioning, analyse traffic and personalise the User’s experience.
Types of cookies used:
• Technical or strictly necessary cookies: essential for the operation of the Website (shopping cart session, login, cookie preferences). No consent required.
• Analytical cookies (Google Analytics): used to analyse user behaviour on the Website in aggregate (pages visited, time spent, traffic sources). Provider: Google LLC (USA). Prior consent required.
• Marketing and remarketing cookies (Meta Pixel): used to measure the effectiveness of advertising campaigns on Facebook and Instagram and to display personalised adverts. Provider: Meta Platforms Inc. (USA). Prior consent required.
• Marketing and remarketing cookies (TikTok Pixel): used to measure conversions and optimise advertising campaigns on TikTok. Provider: TikTok Inc. (USA/Singapore). Prior consent required.
• Shopify cookies: first-party cookies from the Shopify platform necessary for the operation of the online store (shopping cart, session, preferences).
The User may manage their cookie preferences at any time through the cookie banner displayed upon first accessing the Website, or through their browser settings. Disabling certain cookies may affect the functionality of the Website.
For detailed information on each cookie, including its duration and specific purpose, the User may consult the Cookie Policy published on the Website.
12. SOCIAL MEDIA
FINE NIPONA S.L. maintains an active presence on the following social media platforms: Instagram, Facebook and TikTok.
The processing of data that the User provides when interacting with the official profiles of FINE NIPONA S.L. on these platforms will be subject to the terms of use and privacy policies of each social network, which act as joint controllers or independent controllers as the case may be.
FINE NIPONA S.L. is not responsible for any processing carried out independently by these platforms. The User is advised to review the privacy policy of each platform before engaging with the profiles of FINE NIPONA S.L.
13. AUTOMATED DECISION-MAKING AND PROFILING
FINE NIPONA S.L. does not make decisions based solely on automated processing, including profiling, which produce legal effects concerning the User or similarly significantly affect them, within the meaning of Article 22 of the GDPR.
The analytics and advertising tools used (Google Analytics, Meta Pixel, TikTok Pixel) may generate audience segments for advertising purposes. However, such segmentation does not produce legal effects or automated individual decisions concerning the User.
14. SECURITY MEASURES
FINE NIPONA S.L. treats the User’s data with the utmost confidentiality at all times, observing the duty of secrecy required under applicable legislation.
To this end, appropriate technical and organisational measures have been adopted to safeguard the security of personal data and prevent their alteration, loss, unauthorised processing or access, taking into account the state of the art, the nature of the data stored and the risks to which they are exposed, including:
• SSL/TLS encryption across the entire Website and throughout the checkout process
• Secure hosting through the Shopify infrastructure, which maintains internationally recognised security certifications and PCI DSS Level 1 compliance
• Access to personal data restricted solely to authorised personnel
• Periodic review of the security measures in place
Personal data may be stored and processed on technological infrastructure managed by specialised providers that comply with international security and data protection standards. In particular, the Website is hosted on the technological infrastructure of Shopify Inc., a provider that holds internationally recognised security certifications and applies appropriate safeguards in accordance with Regulation (EU) 2016/679.
15. AMENDMENTS TO THIS PRIVACY POLICY
FINE NIPONA S.L. reserves the right to amend this Privacy Policy at any time in order to reflect changes in legislation, case law, industry practice or business operations.
Any amendments will be published on the Website with an indication of the date of last update. The User is advised to review this policy periodically. Material changes affecting processing based on consent will be communicated to the User so that, where applicable, fresh consent may be obtained.