In accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), the RARITET online store informs Users about how their personal data is collected, used, and protected.
1. Data Controller
-
Company: Bantour Sun Spain, S.L.
-
CIF / VAT: ESB54728811
-
Registered Address: Calle Cuba 8, La Nucía, Alicante, Spain, 03530
-
Email for privacy inquiries: ventas@raritet.shop
2. Data Collection and Purposes of Processing
We collect personal data (first name, last name, email address, phone number, shipping address, and payment details) exclusively when you voluntarily provide them when placing an order, registering an account, or contacting customer support. Your data is used for the following purposes:
-
Managing your purchases, processing orders, and invoicing.
-
Organizing the delivery of goods to the address provided by you.
-
Communicating with you regarding order status or processing support requests.
-
Fulfilling our legal, tax, and accounting obligations.
3. Legal Basis for Processing
The processing of your data is carried out on the following legal bases:
-
Performance of a contract: The data is necessary for the conclusion and execution of the sales contract when placing an order on the site (Art. 6.1.b GDPR).
-
Legal obligation: Data processing for invoicing and accounting is required in accordance with Spanish tax legislation (Art. 6.1.c GDPR).
-
Consent: When contacting us via feedback forms, you give explicit consent to the processing of your contact data to respond to your inquiry (Art. 6.1.a GDPR).
4. Data Transfer to Third Parties
We guarantee the confidentiality of your data and do not sell it for marketing purposes. However, to fulfill your orders, we are obliged to transfer strictly necessary data to the following categories of third parties:
-
Transport and logistics companies (including the Packlink Pro platform and engaged couriers) — for the delivery of goods.
-
Payment gateways and financial institutions (Redsýs, Bizum, BBVA) — for secure transaction processing. The RARITET store does not have access to your full bank card details and does not store them on its servers.
-
Government authorities, tax services, and our accountants — to fulfill legal obligations in Spain.
5. Data Retention Periods
Your personal data will be kept for exactly as long as necessary to achieve the purposes for which it was collected. After the transaction is completed, your data will be blocked and stored exclusively to fulfill legal obligations. In particular, according to the Spanish Commercial Code and tax legislation, accounting documents and invoices are kept for 6 years.
6. Your Rights
At any time, you have the right to exercise control over your personal data. You have the following rights:
-
Right of access: to know what data of yours we process.
-
Right to rectification: to request the modification of inaccurate or outdated data.
-
Right to erasure (right to be forgotten): to request the deletion of your data if it is no longer needed for the initial purposes and there are no legal grounds for its retention.
-
Right to restriction of processing and data portability.
To exercise your rights, send a written request to the email ventas@raritet.shop, attaching a copy of your identity document and indicating the right you wish to exercise.
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the competent supervisory authority — the Spanish Data Protection Agency (AEPD) via the website www.aepd.es.