Privacy

Privacy Policy

Last updated: 13/06/2026

1. Data Controller

  • Owner: Robert Batlle Sanchez
  • Tax ID (NIF): 39927095S
  • Address: Domenech Soberano 5, 1º-2ª. 43203 Reus (Tarragona), Spain
  • Phone: +34 650 644 840
  • Email: info@36mood.com

In compliance with EU Regulation 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), we inform you of how we process the personal data you provide through this website.

2. Purposes and legal basis for processing

Order management and contractual relationship

We process your data to manage orders placed in the store, including invoicing, shipping and after-sales support.
Legal basis: performance of a contract (Art. 6.1.b GDPR).

Commercial communications and newsletter

If you give us your consent, we will send you emails about products, promotions and news from 36mood.com.
Legal basis: consent of the data subject (Art. 6.1.a GDPR). You may withdraw your consent at any time without affecting the lawfulness of processing carried out before its withdrawal.

Compliance with legal obligations

We process the data necessary to comply with applicable tax, accounting and legal obligations.
Legal basis: compliance with a legal obligation (Art. 6.1.c GDPR).

Fraud prevention

We may process data to verify compliance with contractual obligations and prevent fraudulent activity.
Legal basis: legitimate interest of the controller (Art. 6.1.f GDPR).

3. Categories of data processed

Depending on your relationship with us, we process the following categories of data:

  • Identification data: name, surname, postal address, phone number and email address.
  • Financial data: payment method, billing details and order history.
  • Browsing data: IP address, browser type and website usage data collected via cookies (see our Cookie Policy).

We do not process special categories of data (health data, ideology, racial origin, etc.).

4. Retention periods

  • Order and customer data: retained for the duration of the commercial relationship and, once ended, for 5 years to comply with tax and commercial obligations.
  • Commercial communications (newsletter): until you withdraw your consent.
  • Legal obligations: for the periods established by applicable regulations in each case.

5. Recipients

Your data may be shared with the following recipients where necessary for the provision of the service:

  • Carriers: GLS, for shipment management.
  • Payment processors: Redsys and PayPal, for payment processing.
  • Technology providers: web hosting provider, Google Analytics and marketing tools.
  • Public authorities: where required by applicable regulations.
  • Law enforcement: where there is a legal obligation to do so.
  • Financial institutions: for payment collection management.

Data processing agreements in compliance with Art. 28 GDPR have been signed with all providers acting as data processors.

6. International data transfers

Some of our providers (Google, PayPal) are based in the United States. Data transfers to these providers are carried out under the EU-US Data Privacy Framework, in force since July 2023, which ensures a level of protection equivalent to that required in the European Union.

7. Security

36mood.com applies the technical and organisational measures necessary to ensure the security of your personal data and prevent its loss, manipulation or unauthorised access, including:

  • Encryption of communications via HTTPS protocol.
  • Encryption of data stored on servers.
  • Restricted access to personal data.

8. Your rights

You may exercise the following rights at any time:

  • Access: obtain confirmation of whether we process your data and access it.
  • Rectification: request the correction of inaccurate data.
  • Erasure: request the deletion of your data when it is no longer necessary for the purpose for which it was collected.
  • Restriction: request that we suspend the processing of your data in certain circumstances.
  • Objection: object to the processing of your data on grounds relating to your particular situation.
  • Portability: receive your data in a structured, commonly used format.
  • Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@36mood.com indicating the right you wish to exercise and attaching a copy of your identity document.

If you believe that the processing of your data does not comply with applicable regulations, you have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es.

9. Cookies

This website uses its own and third-party cookies. For full information, please consult our Cookie Policy.

10. Changes to this policy

We may update this Privacy Policy to reflect legislative changes or updates to our services. When we make significant changes, we will notify you via the website or by email if you have a registered account.