Shopping Cart
“Curtidos Cabezas” is deeply committed to complying with Spanish and European regulations on the protection of personal data and guarantees full compliance with the obligations set forth, as well as the implementation of the security measures established in the General Data Protection Regulation (GDPR) (EU) 2016/679 of April 27, and in Organic Law 3/2018 of December 5 on the Protection of Personal Data and guarantee of digital rights (LOPD and GDD, hereinafter LOPD).
In accordance with these regulations, we inform you that the use of our website may require the provision of certain personal data through registration or contact forms, or by sending emails, and that these will be processed by “Curtidos Cabezas”, Data Controller, whose details are:
-
Company Name: Curtidos Cabezas, S.L.U.
-
CIF: B11295532
-
Registered Address: Av. De la Esperanza, 15 – 11600 Ubrique, Cádiz, Spain
-
Telephone: +34 956 460 548 / 956 460 513
-
Email: tienda@curtidoscabezas.com
Collection and Processing of Personal Data
Personal data is any information relating to a person: name, email, address, telephone, NIF/NIE... Additionally, when a User visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by their Internet service provider.
“Curtidos Cabezas”, as Data Controller, is obliged to inform Users of its website about the collection of personal data that may take place, either by sending an email or by filling out the forms included on the website.
Only the data necessary to carry out the contracted service or to properly respond to the User’s request for information will be obtained. The data collected are identifying and correspond to a reasonable minimum necessary to perform the activity. In particular, no specially protected data are collected at any time. In no case will the data be used for purposes other than those for which they were collected.
Contact Forms/Email
-
Purpose: To respond to your request for information made through our contact form(s).
-
Legal Basis: The User’s consent, which may be revoked at any time.
-
Data Transfer: Personal data will be processed through servers managed by Nicalia, considered as Data Processor.
Mailing List Subscription Forms (Newsletter)
-
Purpose: To send communications, some of them commercial, of interest to the User according to the theme of the website. As established by the LSSICE, “Curtidos Cabezas” undertakes not to send commercial communications without identifying them as such.
-
Legal Basis: The User’s consent, which may be revoked at any time.
-
Data Transfer: Personal data will be processed through servers managed by Mailrelay, considered as Data Processor.
Registration/Customer Account/Contracting Forms
Purposes:
-
Manage your User registration on our website.
-
Manage purchases made.
-
Provide information about the processing and status of purchases.
-
Maintain a historical record of purchases made on our website.
-
Send communications via email and/or telephone to inform the User of possible incidents, errors, problems, and/or order status.
-
Legal Basis: Execution of a contract.
-
Data Transfer: “Curtidos Cabezas” will not transfer or communicate your data to any third party, except in cases legally required or when strictly necessary for the provision of a service. Specifically, data may be transferred to:
-
Providers of technological or IT services.
-
Payment service providers.
-
Courier and parcel delivery companies.
-
Third parties or intermediaries, as service providers, acting on our behalf (administration, consultancy, etc.).
-
Data transfers will always be carried out with the strictest confidentiality, using necessary measures such as signing confidentiality agreements or adhering to their privacy policies established on their respective websites.
Comments Form
-
Purpose: To make a comment or review for publication on the website.
-
Legal Basis: The User’s consent, which may be revoked at any time.
-
Data Transfer: Personal data will be processed through this website’s servers, managed by Nicalia, considered as Data Processor.
Minors
Only individuals over 14 years of age may provide personal data on this website. As required by the LOPD and GDD, in the case of minors under 14, parental or guardian consent will be mandatory for us to process their personal data.
Furthermore, only individuals over 18 may contract our services. In the case of minors under 18, parental or guardian consent will be mandatory unless the minor is emancipated.
User Registration
When the User registers through the corresponding form, the information collected includes:
-
Name and surname
-
Email and/or telephone
-
Shipping addresses
-
IP
-
Username/password
The User must also accept the Terms of Contracting set forth in another section of the website.
The User must also provide a password that meets certain security requirements. Passwords do not expire. To recover it, the User must go to the specific recovery form and enter their email to continue the process and change it by clicking on the link sent to the provided email address. The User is responsible for keeping their password confidential, as well as for all uses made of it, and must notify “Curtidos Cabezas” of any unauthorized use as soon as possible.
Once registered, the User has access to a private panel where they can view certain content, purchase history, and manage account options, such as password or User data.
The User may receive the following notifications:
-
Account validation email upon registration.
-
Purchase confirmations, receipts, incidents, shipments, etc.
-
Store newsletter if subscribed (with the option to unsubscribe at any time).
-
Password recovery emails.
-
Account deletion confirmations.
Security Measures
Users are informed that “Curtidos Cabezas” has adopted technical and organizational security measures to prevent loss, misuse, alteration, unauthorized access, and theft of data, thereby ensuring confidentiality, integrity, and quality of the information, in accordance with current data protection regulations.
This website also uses SSL encryption to allow secure transmission of personal data through the site’s contact or registration forms.
Accuracy of Data
The User declares that all data provided are true and correct and undertakes to keep them updated. The User will be responsible for the veracity of their data and solely liable for any disputes or conflicts that may result from their falsity.
Data Transfer
“Curtidos Cabezas” will not transfer or communicate your data to any third party, except in cases legally required or when service provision requires a contractual relationship with a Data Processor (payment platforms, administration, intermediaries, etc.). The User accepts that certain personal data collected may be provided to these Data Processors when necessary for the effective performance of a contracted service or purchased product.
Additionally, in cases where required, Customer data may be transferred to certain public authorities to comply with legal obligations: Spanish Tax Agency, banks, Labor Inspectorate, etc.
User Rights
The GDPR and the LOPD and GDD grant individuals the ability to exercise rights related to the processing of their personal data. To do so, the User must contact us by email at tienda@curtidoscabezas.com or by written communication to the address in our Legal Notice, properly identifying themselves.
The User may request to exercise the following rights:
-
Right of access: obtain information about whether their personal data is being processed, its purpose, the origin of the data, and any communications made or planned.
-
Right of rectification: request correction of inaccurate data or deletion of inappropriate or excessive data.
-
Right of restriction: request limitation of processing, in which case data will only be stored for the exercise or defense of claims.
-
Right of opposition: object to processing in cases where consent is not required, such as marketing files or automated decisions.
-
Right of portability: request data be transferred in exportable format to another company.
If consent has been granted for a specific purpose, the User has the right to withdraw it at any time without affecting the lawfulness of prior processing.
We undertake to process these requests within the legal maximum period (1 month).
If a User believes there is a problem with the way “Curtidos Cabezas” handles their data, they may file a complaint with the Security Officer or with the relevant Data Protection Authority, the Spanish Data Protection Agency being the competent authority in Spain.
Data Retention
-
Contact form/email inquiries: data retained only as long as necessary to respond.
-
Customer data: retained until the end of the contractual relationship, and then for the minimum period required by law:
-
4 years: Social Order Law (affiliation, salary obligations, etc.); Tax Law.
-
5 years: Civil Code (personal actions without a special term).
-
6 years: Commercial Code (accounting books, invoices, etc.).
-
10 years: Anti-Money Laundering Law.
-
Indefinitely: anonymized or aggregated data.
-
-
Newsletter subscribers: data retained indefinitely until consent is revoked.
Social Media
“Curtidos Cabezas” has profiles on major social networks (Facebook, X, Instagram, YouTube). The purpose of processing data in this context is to inform followers of activities and provide personalized user support, using the tools allowed by each platform.
Use of these networks is subject to their respective terms of use and privacy policies. “Curtidos Cabezas” recommends Users review these policies before using provided links or applications.
“Curtidos Cabezas” will not extract data from social networks without the express consent of the User.
Confidentiality
All information provided by the User will be considered confidential and will not be used for purposes other than those described herein. “Curtidos Cabezas” undertakes not to disclose or reveal information about the User’s intentions, consultation requests, or the duration of their relationship with the company.
Validity
This privacy and data protection policy was drafted on September 19, 2025. It may vary depending on legislative or jurisprudential changes, and it is the User’s responsibility to review the updated document to be aware of their rights and obligations at all times.