Privacy Policy
SWEETBA , with registered office at Cl. Foque, 3 B – 35500 Arrecife (Las Palmas), and C.I.F. B23983067, is the data controller responsible for the processing of the User’s personal data and informs that such data will be processed in accordance with current regulations on personal data protection, specifically Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018, of December 5 (LOPDGDD).
1. INFORMATION TO THE USER
Data Controller
Sweetba
Cl. Foque, 3 B – 35500 Arrecife (Las Palmas)
info@sweetba.es
https://sweetba.es
Purpose of the Processing
The User’s personal data will be processed for the following purposes:
Managing information requests, inquiries, or messages sent through the contact form or by email.
Handling user registration to access services or make purchases on the website.
Processing orders, payments, deliveries, and returns of products offered on the site.
Sending commercial communications and promotions, when expressly authorized by the user.
Collecting and moderating comments and reviews on the website’s products or services.
Improving user experience and service quality through statistical analysis.
Legal Basis for Processing
The processing of your data is based on the following legal grounds:
User consent, when filling out forms or subscribing to marketing communications.
Performance of a contract, in the case of purchases or service requests.
Compliance with legal obligations, regarding tax, accounting, or administrative matters.
Legitimate interest of the controller to ensure website security, improve user experience, or prevent fraud.
Data Retention Criteria
Data will be retained:
For as long as a contractual relationship or mutual interest exists.
Until the user requests deletion or withdraws consent.
For the periods required by tax or accounting law, when applicable.
Once the purposes or legal time limits have been fulfilled, the data will be securely deleted or anonymized.
Data Communication
To correctly provide the services, Sweetba may share your data with:
Transport and logistics companies for order delivery.
Secure payment platforms (such as PayPal, Stripe, or Redsys).
Technical and hosting providers offering IT support.
Accounting or tax advisors, when legally required.
All third parties have contractually regulated access to the data, ensuring confidentiality and security.
No data will be transferred to third parties unless legally required.
2. USER RIGHTS
The User may exercise the following rights at any time, free of charge:
Right of access to their personal data.
Right of rectification of inaccurate or incomplete data.
Right of erasure (right to be forgotten).
Right to restriction of processing.
Right to object to data processing.
Right to data portability.
Right to withdraw consent at any time.
To exercise these rights, the User must send a request along with a copy of their identification document to:
info@sweetba.es or by post to: Sweetba, Cl. Foque, 3 B – 35500 Arrecife (Las Palmas).
If you believe your rights have not been respected, you may file a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es
3. SPECIFIC FORMS
Contact Form
- Purpose: To respond to inquiries, requests, or information submissions.
- Legal Basis: Consent of the data subject.
- Retention: Until the request is resolved or consent is withdrawn.
- Recipients: No data will be shared with third parties.
Registration / Purchase Form
- Purpose: To manage the commercial relationship, process orders, and payments.
- Legal Basis: Performance of a contract.
- Retention: While the contractual relationship exists, and subsequently for the legally required period.
- Recipients: Transport companies, payment platforms, and technical providers.
Subscription Form (Newsletter)
- Purpose: To send news, promotions, and marketing communications.
- Legal Basis: Express consent of the user.
- Retention: Until the user unsubscribes.
- Recipients: No data will be shared with third parties unless legally required.
4. COMMERCIAL COMMUNICATIONS
Sweetba will only send electronic communications (email, SMS, or messaging) to users who have given prior consent.
Each message will include an option to unsubscribe, in compliance with Article 22 of Law 34/2002 (LSSI-CE).
5. ACCURACY OF DATA
The user guarantees that the data provided are truthful, accurate, and up to date, and agrees to communicate any changes.
If the user provides data from third parties, they declare that they have obtained prior consent from those individuals.
6. DATA SECURITY
Sweetba has implemented the necessary technical and organizational measures to ensure the confidentiality, integrity, and availability of personal data, preventing its loss, alteration, or unauthorized access.
7. CHANGES TO THIS POLICY
Sweetba reserves the right to modify this Privacy Policy at any time to adapt it to legal or technical changes.
The current version will always be available at https://sweetba.es/privacy-policy.