Legal

Privacy Policy

Last updated:

1. Data Controller

  • Controller: Tactta
  • Website: tactta.com
  • Contact: hola@tactta.com

In compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we hereby inform you about the processing of your personal data.

2. Data We Collect

Tactta may collect the following personal data:

  • Contact data: Email address (required for registration and communications).
  • Giveaway participation data: Name and national identity document (DNI) (winner only, for age verification and prize delivery).
  • Preference data: Products viewed, clicks on categories, responses to interactive quizzes (if you choose to share them).
  • Browsing data: IP address, browser type, pages visited, time spent on the site (via analytics cookies).

We do not collect sensitive data (health data, sexual orientation, beliefs) except for data that users voluntarily share when interacting with our quizzes (in which case it is processed locally on their device and is not stored).

3. Purposes of Processing

We process your data for the following purposes:

  • Managing your participation in giveaways and pre-launches.
  • Sending you commercial communications about products and promotions (only with your express and separate consent).
  • Notifying you of the launch of products for which you have pre-registered.
  • Analyzing use of the website in order to improve our content and services.
  • Complying with legal obligations (tax, consumer protection, etc.).

4. Legal Basis

The legal basis for the processing of your data is:

  • Express consent (Art. 6(1)(a) GDPR): for giveaways, newsletters, pre-orders and analytics.
  • Performance of a contract (Art. 6(1)(b) GDPR): for the management of orders and the delivery of prizes or products.
  • Legal obligations (Art. 6(1)(c) GDPR): for compliance with tax, accounting and consumer protection obligations.

Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out prior to its withdrawal.

5. Data Retention

  • Giveaway participation: For the duration of the giveaway and for 6 months thereafter, to resolve any claims.
  • Email marketing list: Until the user withdraws their consent.
  • Order data: For the statutory tax retention period (6 years).
  • Web analytics data: 26 months (anonymized GA4 profiles).

6. Recipients and Data Disclosure

We will not disclose your personal data to third parties, except where required by law or to the following service providers (data processors):

  • Formspree: Form processing (USA, under EU Standard Contractual Clauses).
  • Google Analytics 4: Web analytics (anonymized).
  • Microsoft Clarity (if applicable): Heatmaps (anonymized).
  • Vercel: Web hosting (USA, under Standard Contractual Clauses).
  • Courier companies: For the delivery of prizes or products.

All data processors operate under contracts that guarantee compliance with the GDPR.

7. International Transfers

Some of our providers are located in the USA. Transfers are carried out under the Standard Contractual Clauses (SCCs) approved by the European Commission, which guarantee an adequate level of protection.

8. Your Rights

As a user, you have the following rights over your personal data:

  • Access: To know what data of yours we process.
  • Rectification: To correct inaccurate data.
  • Erasure (“right to be forgotten”): To have your data deleted.
  • Objection: To object to specific processing operations.
  • Restriction: To restrict processing in specific cases.
  • Portability: To receive your data in a structured format.
  • Withdrawal of consent: At any time.

You may exercise these rights by sending an email to hola@tactta.com with the subject line “GDPR” and a copy of your identity document so that we can verify your identity.

If you believe that the processing of your data does not comply with the applicable regulations, you may file a complaint with the Spanish Data Protection Agency: aepd.es

9. Minors

Our services are directed exclusively at persons over 18 years of age. We do not knowingly collect data from minors. If we detect that data from a minor has been collected, we will delete it immediately.

10. Cookies

We use first-party and third-party cookies for:

  • Technical cookies: Essential for the operation of the site.
  • Analytics cookies: Google Analytics 4 (requires consent).
  • Third-party cookies: For the integration of form and marketing tools (require consent).

You can configure your browser to reject cookies. By browsing tactta.com you accept the use of technical cookies. All other cookies require your express consent via the cookie banner.

11. Security

We apply appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration or destruction, including HTTPS encryption, certified hosting (Vercel, SOC 2) and access restricted to authorized personnel.

12. Changes to This Policy

We reserve the right to amend this privacy policy. Material changes will be notified by email to registered users. The version in effect will always be the one published on this page.

13. Contact

For any questions about this policy or the processing of your data: hola@tactta.com