Privacy Policy

Last updated: August 9, 2025

1. Introduction and Commitment to Privacy

At TAP IS TAP S.L. (hereinafter, “Tap is Tap,” “we,” or “the Company”), we recognize that privacy and control over personal data are fundamental rights of all individuals. This Privacy Policy aims to explain, clearly and comprehensively, how we process, protect, and respect the personal data of users who access our website https://tapistap.com (hereinafter, “the Website”) or use our services. Our commitment is based on putting the will, interests, and security of users above any commercial interest, adopting the best practices in regulatory compliance, transparency, and individual control.

2. Applicable Regulations

This Policy is governed by the following:
Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR). Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD). Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).

3. Personal Data We Collect

We collect only the data strictly necessary to provide our services, with the least possible impact on user privacy. This may include:

Identification data (name, surname). Contact information (email, telephone number, postal address). Website browsing and usage data (cookies, IP address, approximate geolocation). Transaction data (if purchases are made on the website: order history, payment method, billing). Any additional information that the user voluntarily chooses to provide.

4. Purposes of processing

We process personal data for the following purposes, always based on prior, free, and informed consent, and limiting its use to what is strictly necessary:

Providing the services requested by the user and managing the contractual or pre-contractual relationship. Responding to queries, suggestions, or complaints submitted by users. Sending personalized information and offers only when the user has expressly agreed to it. Improving the browsing experience and performing statistical analysis of website use, applying anonymization techniques whenever possible.
Compliance with legal obligations and responding to requests from competent authorities.

5. Legal basis for processing

The legal bases that legitimize data processing are:

Performance of a contract or implementation of pre-contractual measures (Art. 6.1.b GDPR). Express consent of the user (Art. 6.1.a GDPR). Compliance with legal obligations (Article 6.1.c GDPR). Legitimate interest in improving our services and preventing fraud, while respecting the rights and freedoms of users (Article 6.1.f GDPR).

6. Communication and transfer of data

At Tap is Tap, we do not transfer or sell personal data to third parties for commercial purposes. We will only share data in the following cases:

When strictly necessary for the provision of a contracted service (e.g., courier companies, hosting providers). In compliance with legal obligations (e.g., competent tax, judicial, or administrative authorities). With the express authorization of the user. All third parties that may access the data act as data processors under contracts that guarantee the same level of protection required by this Policy.

7. Data retention

The data will be retained:

For the duration of the contractual relationship or service provision. Until the user requests its deletion. For a maximum period of 5 years after the termination of the relationship, solely to address potential legal liabilities or claims.

8. User Rights

Users may exercise the following rights at any time:

Access: to know what data we process.
Rectification: to correct inaccurate or incomplete data.
Deletion: to request the deletion of personal data (“right to be forgotten”).

9. Contact

For further information or any questions be sure to reach out to us through our e-mail: contact@tapistap.com