Data controller

FLOFUM, S.L. (CIF B75621250), Calle Parcerisa 13, Local 1, 08014 Barcelona, Spain, which operates this site under the name Tyrnix. Privacy questions and requests: support@tyrnix.com.

The data involved

• Enquiries: name, email, phone, country, delivery address, the product you ask about and your message.
• Correspondence: the content of your emails, including any photos sent for a return or a guarantee claim.
• Orders: the delivery details, the products, the amount due and the delivery status.
• Refunds: the account holder’s name and IBAN, requested only after a returned product has arrived.
• Site visits: the server logs kept by our host, which record IP addresses, browser details and the pages requested.

We never see or store card numbers. If you pay by card, the details go straight to the payment provider named at the checkout, which takes the money and tells us only whether it succeeded. With cash on delivery there is nothing of the kind to handle at all.

Purposes and legal grounds

What we do	Ground under the GDPR
Reply to an enquiry with a total	Pre-contractual steps you asked for, art. 6(1)(b)
Deliver, handle returns and guarantee claims, refund	Performance of the contract, art. 6(1)(b)
Keep invoices and accounts	Legal obligation, art. 6(1)(c)
Keep server logs for security	Legitimate interest in protecting the site, art. 6(1)(f)

There is no newsletter, no sale or rental of data, and no profiling or automated decision-making.

Recipients

• Courier companies, which need your name, address, phone number and the amount to collect.
• Our web and email hosting provider, which stores data on our behalf.
• Our accountants, and tax or other authorities where the law obliges us to share data.
• Our bank, when a refund is paid.

Our hosting provider may store data on servers outside the European Economic Area. Any such transfer relies on the standard contractual clauses approved by the European Commission.

Retention

• An enquiry that does not become an order is deleted after 12 months.
• Orders and invoices are kept for six years, as Spanish commercial and tax law requires.
• Refund bank details are deleted as soon as the bank has confirmed the payment.
• Server logs are kept by our host only for as long as security needs require.

Your rights

You may ask for access to your data, for corrections, for deletion, for its use to be restricted, for a copy in a portable format, or object to how it is used. Write to support@tyrnix.com; you will have an answer within a month. Where the law requires us to keep something, such as an invoice, we will explain that instead of deleting it.

You can also complain to the Agencia Española de Protección de Datos (aepd.es) or to the data protection authority in your own country.

Cookies

Tyrnix does not use tracking or advertising cookies. Putting something in the basket sets three that a shop cannot work without, each named on the cookies page.

Updates

Any change to this notice will be published here with a new date. Data already collected will not be used for a new purpose without telling you first.