Privacy policy

Privacy Policy

Last updated: 9 November 2026

Tanja Stuchels operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the “Services”). Tanja Stuchels is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms and Conditions and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use and disclosure of your information as described in this Privacy Policy.

Controller

Tanja Stuchels
C. Valle de Nuria, 42
03420 Castalla (Alicante), Spain
Email: tanja.stuchels@me.com

Personal information we collect or process

When we use the term “personal information”, we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, depending on how you interact with the Services, where you live and as permitted or required by applicable law:

  • Contact details, including your name, address, billing address, shipping address, phone number and email address.
  • Financial information, including payment method, payment confirmation, transaction details and other payment details. Full credit card details are processed exclusively by the payment providers.
  • Account information, including your preferences and settings if you use a customer account.
  • Transaction information, including the items you view, add to your cart, purchase, return or cancel, and your past transactions.
  • Communications with us, including the information you include in communications with us, for example when sending an enquiry by email.
  • Device information, including information about your device, browser or network connection, your IP address and other unique identifiers.
  • Usage information, including information about how and when you interact with or navigate the Services.

Sources of personal information

We may collect personal information from the following sources:

  • directly from you, including when you create an account, place an order, sign up for the newsletter, communicate with us or otherwise provide us with your personal information;
  • automatically through the Services, including from your device when you visit our website and through the use of cookies and similar technologies;
  • from our service providers when they collect or process your personal information on our behalf (e.g. payment providers, shipping carriers).

How we use your personal information

  • Providing the Services. We use your personal information to perform our contract with you, process your payments, fulfil and ship your orders, handle returns and withdrawals, send you notifications about your order and manage your customer account.
  • Newsletter. If you have given your consent, we send you our newsletter by email (see the section “Newsletter and free case”).
  • Security and fraud prevention. We use your personal information to provide a secure payment and shopping experience and to detect and prevent possible fraudulent, illegal or malicious activity. If you register an account, you are responsible for keeping your login details safe.
  • Communicating with you. We use your personal information to respond to your enquiries and provide customer service.
  • Legal reasons. We use your personal information to comply with legal obligations, such as tax and commercial record-keeping requirements, and to respond to lawful requests from authorities.

Legal bases for processing

  • Orders, shipping, payment, customer service: performance of the contract with you or pre-contractual measures (Art. 6(1)(b) GDPR).
  • Retention of invoicing and accounting data: legal obligation (Art. 6(1)(c) GDPR).
  • Newsletter, statistics and marketing cookies: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.
  • Strictly necessary cookies, security, fraud prevention, server logs: our legitimate interest in a secure and functioning store (Art. 6(1)(f) GDPR).

Recipients of your information

We only share your personal information to the extent necessary for the purposes described:

  • Shopify (Shopify International Limited, Ireland): operating the store, hosting, payment processing via Shopify Payments (credit card, Apple Pay, Google Pay, Klarna, Bizum, MobilePay) and sending our emails.
  • PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg): if you pay with PayPal.
  • Klarna (Klarna Bank AB, Sweden): if you pay with Klarna. Klarna may carry out a credit check.
  • Prodigi (United Kingdom), with production in the Netherlands: name and shipping address for printing and shipping your order.
  • Shipping carriers: name and shipping address for delivery.
  • Authorities and courts, where we are legally obliged to do so or where it is necessary to establish, exercise or defend our rights.
  • Third parties you consent to, for example when you use social media features.

We do not sell your personal information and do not use it for personalised advertising on other websites.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you. To learn more about how Shopify uses your personal information and any rights you may have, you can visit Shopify’s Consumer Privacy Policy at https://privacy.shopify.com/en.

Newsletter and free case

When you sign up for our newsletter, we first send you an email asking you to confirm your subscription (double opt-in). Only then will you receive the free case and our newsletter. To document your consent, we store the time of your sign-up and confirmation. We analyse whether our emails are opened and links are clicked in order to improve the newsletter. You can unsubscribe at any time using the link at the end of every email. We will then remove your address from the mailing list. If you unsubscribe, we will still send you emails about your orders, if you have placed any.

Cookies

We use strictly necessary cookies so that the store works (e.g. cart, checkout, language setting). Statistics and marketing cookies are only set if you consent in the cookie banner. You can change your choice at any time via the “Cookie settings” link in the footer. We do not use third-party analytics or advertising tools such as Google Analytics or the Meta Pixel.

Third-party websites and links

The Services may contain links to websites or other online platforms operated by third parties, for example Instagram or Pinterest. If you follow links to such websites, their privacy policies apply. We are not responsible for the privacy or security of these websites. Information you share on social media platforms may be visible to other users of those platforms.

Children’s data

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details below to request that it be deleted.

Security and retention of your information

We take appropriate technical and organisational measures to protect your information. Please be aware, however, that no security measures are perfect and information you send us may not be completely secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive information to us.

Retention periods:

  • We keep order and invoicing data for as long as required by Spanish commercial and tax law (up to six years).
  • We store newsletter data until you unsubscribe.
  • We delete email enquiries once they have been dealt with and no retention obligation applies.
  • We store customer account data until you delete your account or ask us to delete it.

Obligation to provide information

To place an order, we need your name, shipping address and email address. Without this information, we cannot perform the contract. For the newsletter, only your email address is required, and signing up is voluntary.

No automated decision-making

We do not make decisions based solely on automated processing. The only exception is a possible credit check by Klarna if you choose this payment method.

Your rights

Under the GDPR, you have the following rights with regard to your personal information:

  • Right of access: You can request information about the personal information we hold about you.
  • Right to rectification: You can ask us to correct inaccurate information.
  • Right to erasure: You can ask us to delete your information, unless a legal retention obligation applies.
  • Right to restriction of processing: You can ask us to restrict the processing of your information.
  • Right to data portability: You can receive a copy of your information in a common format or ask us to transfer it to a third party.
  • Right to object: You can object to the processing of your information where it is based on our legitimate interest.
  • Withdrawal of consent: Where we process your information based on your consent, you can withdraw it at any time. This does not affect the lawfulness of processing carried out before the withdrawal.

You can exercise these rights at any time by contacting us using the contact details below. We may need to verify your identity before processing your request. We will respond within the legal time limits. You will not be discriminated against for exercising any of these rights.

Right to lodge a complaint

If you have complaints about how we process your personal information, please contact us using the contact details below. You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, Spain, www.aepd.es. You can also contact the supervisory authority in your country of residence.

International transfers

Shopify may also process information outside the European Economic Area, in particular in Canada and the United States. For Canada, there is an adequacy decision by the European Commission. Transfers to the United States are based on the EU-US Data Privacy Framework or the European Commission’s Standard Contractual Clauses. For the United Kingdom (Prodigi), there is also an adequacy decision.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or legal changes. We will post the revised version on this website and update the “Last updated” date.

Contact

If you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of your rights, please email us at tanja.stuchels@me.com or write to Tanja Stuchels, C. Valle de Nuria, 42, 03420 Castalla (Alicante), Spain.