Privacy Policy

Privacy and security are extremely important to RABUKO, and we strive to ensure that our technical and organizational measures respect your data protection rights.

This Privacy Policy describes how we manage, process, and store the personal data provided in connection with our services. "Personal data" refers to any information relating to an identifiable individual or their personal identity.

Since our store is hosted on the Shopify platform, your personal data may also be processed by Shopify in order to provide store-related services and, in certain cases, to offer personalized experiences and advertising based on your interactions both with our store and with other merchants hosted on Shopify. You can find more information in Shopify's Consumer Privacy Policy (https://www.shopify.com/legal/privacy/customers) and in the Shopify Privacy Portal (https://privacy.shopify.com).

Data Controller

Your personal data will be processed by J.A.P. (hereinafter, "RABUKO"), with registered address in Viladecavalls (08232 – Barcelona), Tax ID (CIF) 39178264H. Contact email: contact@rabuko.com

Visit our contact page at https://www.rabuko.com/pages/contact if you have any questions, or write directly to the data protection officer at contact@rabuko.com.

Purpose of Processing

The main purpose of processing your personal data is to offer you a secure, optimal, effective, and personalized experience. To this end, we may use your personal data to:

• Provide our services and facilitate their operation (including verifications that concern you). 

• Resolve issues and improve the use of our website and services. 

• Personalize, evaluate, and improve our services, content, and materials. 

• Analyze the volume and history of use of our services. 

• Inform you about our products, promotional offers, and activities. 

• Prevent, detect, and investigate potentially prohibited or unlawful activities and ensure compliance with our terms of use and policies. 

Other non-identifying data is also collected through cookies, as detailed in our Cookie Policy.

Shopify Network Intelligence. As part of Shopify's network intelligence features, Shopify may use aggregated and pseudonymized data about your interaction in our store to improve its global services, help prevent fraud, and display personalized advertising. You can manage your preferences and rights through the Shopify Privacy Portal (https://privacy.shopify.com) and, depending on your jurisdiction, limit or withdraw your consent for such uses.

Systems that collect personal information (in addition to the purchase process):

• "Contact us" form: name and email address. 

• Customer registration: full name, email address, and shipping address. 

• Newsletter: name and email address (you can unsubscribe at any time via the link included in each email). 

• Return process: full name and shipping address. 

• Email statistics: on a non-systematic basis, we may analyze metrics (opens, clicks, bounces) to evaluate the performance of our communications. 

Our employees and third-party providers are obligated to respect data privacy. We do not sell, rent, or transfer personal data that identifies the user to third parties without their consent. In some jurisdictions (e.g., certain U.S. states), interest-based advertising may be considered a "sale" or "sharing" of data; in these cases, we provide opt-out mechanisms (see "Privacy preferences and options by jurisdiction").

Applicable Principles

• Lawfulness, fairness, and transparency: we require user consent for processing that requires it and inform transparently. 

• Data minimization: we only request the data strictly necessary. 

• Storage period limitation: we do not keep data longer than necessary for the stated purposes. 

• Integrity and confidentiality: we apply measures to ensure the security and confidentiality of data. 

Your Data Protection Rights

Data subjects may request access, rectification, deletion, restriction of processing, portability, and objection. They may also file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) if they believe the processing infringes Regulation (EU) 2016/679 (GDPR).

To exercise your rights, write to contact@rabuko.com. We will process your request within 30 days and may request proof of identity or representation. You can also modify your data by accessing your account ("edit my profile").

Privacy preferences and options by jurisdiction:

• EEA, United Kingdom, and Switzerland: we request your consent for the use of non-essential cookies and for personalized advertising. You can withdraw your consent at any time from the cookie banner or through the Shopify Privacy Portal (https://privacy.shopify.com). 

• United States (certain states): you can opt out of the "sale" or "sharing" of data and limit the use of sensitive personal information through the corresponding link available in our store's footer (for example, "Do Not Sell or Share My Personal Information") or through the Shopify Privacy Portal. 

Data Retention Periods

Personal data will be retained for as long as necessary for the purposes described, for as long as a contractual relationship exists, or for as long as applicable legal obligations exist, and, where applicable, until the data subject requests its deletion.

Data Storage Location and International Transfers

Our main systems are located in the European Union. However, since the store is hosted on Shopify, some data may be transferred outside the European Economic Area (for example, to Canada and the United States), where Shopify has infrastructure and providers. Shopify ensures that these transfers comply with applicable regulations by using, among other safeguards, Standard Contractual Clauses and other appropriate guarantees. More information: https://www.shopify.com/legal/privacy and https://www.shopify.com/legal/privacy/customers.

RABUKO will inform you, to the extent legally permitted, of any request for access to data by administrative or judicial authorities.

Data Security

RABUKO undertakes to use and process personal data respecting its confidentiality and in accordance with the purpose for which it was collected, adopting measures to prevent its alteration, loss, unauthorized processing, or access, in accordance with applicable regulations and, in particular, the GDPR. To this end, we apply appropriate technical, organizational, and physical procedures.