Privacy policy
1. Information for users
Data controller
PROMINTRA S.L.
c/ Pont de les Quinze Arcades 7, local 7 - 08750 Molins de Rei (Barcelona) - Spain.
Phone: (+34) 93.680.30.30
marc@tonedistrict.eu
Purposes of processing
PROMINTRA S.L. will process the information you provide in each section of the website for the following purposes:
Contact
Your data will be processed to answer enquiries and send the information requested.
We use our website hosting provider and Resend, our email service provider, to receive and deliver contact form enquiries.
Newsletter subscription
If this service is made available, your data will be processed to send newsletters and news that may be of interest to you.
Work with us
If this service is made available, we will process the data you provide to assess your suitability for the different vacancies and consider including you in the relevant recruitment processes.
Marketing communications
PROMINTRA S.L. will request your separate, explicit consent to send advertising communications relating to products marketed by the companies.
Order management
Personal data will be processed to manage orders placed through the online shop, prepare and ship products, manage payments, invoicing, returns and warranties, and provide customer support relating to purchases. To process an order and prepare the invoice, we require the buyer’s tax identification number or equivalent identity document number before payment. PROMINTRA S.L. prepares invoices using its own invoicing software.
Initial delivery destination
Where available, we use the approximate country supplied by our hosting infrastructure from your connection's IP address to suggest an initial delivery destination and display the corresponding prices. This feature does not use GPS or store your IP address in our shop database. You can change the destination at any time; a saved selection takes priority. The delivery address you provide before payment determines the applicable delivery and tax treatment.
Customer account
If this service is made available, your data will be processed to manage your registration, provide access to your private area, allow you to view your orders, and manage your preferences on the website.
Data retention
PROMINTRA S.L. will retain the data for as long as a legitimate interest remains and you have not objected to its processing.
Legal basis for processing
PROMINTRA S.L. will process your data on the basis of your explicit consent.
Sharing personal data
The data you provide may be disclosed to law enforcement agencies and/or other public authorities with relevant powers.
Transport companies
Identification and contact details needed for delivery may be shared with the Mail Boxes Etc. office in Molins de Rei, which arranges our insured shipments, and with the carrier responsible for delivery, normally UPS or FedEx.
Payment provider
If electronic payment systems are enabled, certain data may be shared with payment service providers such as Stripe Technology Europe Ltd. solely to manage and process payments.
Your rights
You have the right to find out whether PROMINTRA S.L. is processing personal data about you and, if so, to exercise your right of access to that personal data and to the following information:
- The purposes of processing.
- The categories of personal data concerned.
- The recipients or categories of recipients to whom the personal data has been or will be disclosed, particularly recipients in third countries or international organisations.
- Where possible, the intended retention period for the personal data or, if this is not possible, the criteria used to determine that period.
- The right to ask the data controller to correct or erase your personal data, restrict its processing, or object to its processing.
- The right to lodge a complaint with a supervisory authority.
You also have the right to ask for inaccurate data to be corrected or, where applicable, for your data to be erased when, among other reasons, it is no longer needed for the purposes for which it was collected or you decide to withdraw the consent on which processing has been based.
You may also request a restriction on the processing of your personal data. In that case, PROMINTRA S.L. will retain it only to exercise or defend legal claims.
PROMINTRA S.L. will stop processing your data if you object to its processing, unless there are compelling legitimate grounds to continue or the data is needed to exercise or defend potential legal claims.
Finally, under your right to data portability, you may receive the personal data you have provided to PROMINTRA S.L. in a structured, commonly used and machine-readable format, and ask for it to be transmitted to another data controller.
How to exercise your rights
You may exercise the rights described above by requesting the relevant form from the data controller at the address given at the beginning of this policy.
You may also request information at any time from the Spanish Data Protection Agency about how to exercise your rights.
If your request to exercise your rights has not been properly addressed or fulfilled, you may lodge a complaint with the Spanish Data Protection Agency, located at Calle de Jorge Juan, 6, 28001, Madrid, telephone 912663517.
2. Mandatory and optional information
By selecting the relevant checkboxes and entering data in the fields marked as mandatory on each form, you expressly, freely and unequivocally accept that this data is necessary for the service provider to handle your request. Providing data in the remaining fields is optional. You guarantee that the personal data you provide to the data controller is accurate and are responsible for notifying it of any changes.
The data controller confirms and guarantees that the data marked as mandatory on the website is necessary to provide you with the best possible service. If you do not provide this data, it cannot guarantee that the information and services provided will fully meet your needs.
3. Security measures
In accordance with current personal data protection rules, the data controller complies with all provisions of the GDPR and LOPD when processing the personal data for which it is responsible. In particular, it follows the principles set out in Article 5 of the GDPR and Article 4 of the LOPD: personal data is processed lawfully, fairly and transparently in relation to the data subject, and is adequate, relevant and limited to what is necessary for the purposes for which it is processed.
The data controller guarantees that it has implemented appropriate technical and organisational policies to apply the security measures required by the GDPR and LOPD to protect users' rights and freedoms, and has provided users with suitable information to enable them to exercise their rights.