Privacy policy
This policy explains how we process the personal data of those who visit straptoratchets.com or contact us. It has been drafted in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).
Data controller
| Controller | LOBITO IC SL |
|---|---|
| Tax ID (CIF) | B65864613 |
| Address | C/ Amadeu Vives 17, 08440 Cardedeu, Barcelona, España |
| Telephone | 930 26 74 40 |
| info@straptoratchets.com |
We have not appointed a Data Protection Officer, as none of the circumstances set out in Article 37 of the GDPR applies. For any question regarding privacy, you may write to us at the email address given above.
What data we process and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Responding to your enquiries through the contact form or by email | Name, email address and the content of your message | Consent (Art. 6(1)(a) GDPR) and, where applicable, pre-contractual measures (Art. 6(1)(b)) | For as long as your enquiry is being handled and, thereafter, for the limitation period for any potential claims |
| Handling requests for B2B terms from distributors and hardware stores | Name, company, email address, telephone number and the business details you provide | Pre-contractual measures and legitimate interest in the commercial relationship (Art. 6(1)(b) and 6(1)(f)) | For as long as the relationship or the commercial interest is maintained |
| Sending news and launch notifications, if you subscribe | Email address | Consent (Art. 6(1)(a)) | Until you withdraw your consent |
| Operation and security of the website | IP address, browser type and browsing data | Legitimate interest in keeping the service secure and operational (Art. 6(1)(f)) | In accordance with the retention periods of the Shopify platform |
| Compliance with legal, accounting and tax obligations | Identification and invoicing data | Legal obligation (Art. 6(1)(c)) | The periods laid down by commercial and tax legislation |
We do not currently make sales through this site, so we do not process payment or delivery data. When sales are activated, we will update this policy to reflect that processing before it takes place.
Source of the data
All the data we process is provided directly by you. We do not buy databases and we do not obtain personal data from third parties. We do not carry out profiling and we do not take automated decisions with legal effects concerning you.
Who has access to your data
We do not disclose your data to third parties except where legally required. We do work with suppliers acting as data processors, who access the data solely in order to provide their service to us, under a contract signed in accordance with Article 28 of the GDPR:
- Shopify International Ltd. — the e-commerce platform hosting this site.
- Email and domain hosting provider — management of the contact mailbox.
International transfers
Some of these suppliers may process data outside the European Economic Area. In such cases, the transfer is covered by the Standard Contractual Clauses approved by the European Commission or by an adequacy decision, so that your data retains a level of protection equivalent to that of the European Union.
Your rights
You may exercise the following rights at any time:
- Access — to find out what data of yours we process.
- Rectification — to correct inaccurate or incomplete data.
- Erasure — to ask us to delete your data when it is no longer necessary.
- Restriction — to ask us to suspend the processing in certain circumstances.
- Objection — to object to processing based on our legitimate interest.
- Portability — to receive your data in a structured, commonly used format.
- Withdrawal of consent — at any time, without affecting the lawfulness of processing carried out beforehand.
To exercise them, write to us at info@straptoratchets.com stating the right you wish to exercise. We will reply within a maximum of one month. It is free of charge and you do not have to justify your decision.
Complaint to the supervisory authority
If you consider that we have not dealt with your request properly, you may lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan 6, 28001 Madrid · www.aepd.es). If you reside in another European Union Member State, you may contact the supervisory authority of your own country.
Security
We apply appropriate technical and organisational measures to protect your data against loss, unauthorised access or disclosure. No security measure is infallible, so we recommend that you do not send us sensitive information through unsecured channels.
Minors
This site is not aimed at children under 14 and we do not knowingly collect data from minors. If we find that we have received data from a minor without the authorisation of their legal representatives, we will delete it.
Cookies
The use of cookies is set out in detail in our Cookie policy.
Changes to this policy
We may update this policy when our processing activities change or for legal reasons. The version published on this page is always the version in force, together with its update date.
Last updated: August 2026