Privacy policy
This is an English translation provided for information purposes. In case of discrepancy, the Spanish version prevails.
At Gloop we process your data in accordance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD) and Spanish Law 34/2002 (LSSI).
1. Data controller
- Controller: REVOLUCIÓN SOSTENIBLE, S.L. (Gloop)
- Tax ID (CIF): B06910269
- Privacy contact email: hello@gloop.site
- Phone: +34 644 573 145
Gloop is not required to appoint a data protection officer. For any privacy matter, write to us at the email above.
2. What data we process, why and on what legal basis
| When | Data | Purpose | Legal basis | Retention period |
|---|---|---|---|---|
| Sample request form | Name, company (if applicable), tax ID (if an invoice is requested), email, phone, shipping address, customer type (individual or business) | Managing the shipment of samples, charging for shipping and deducting it from the first order | Performance of a contract or of pre-contractual measures at your request (Art. 6.1.b GDPR) | For as long as the relationship lasts and, afterwards, for the period required by law (6 years for accounting and invoicing data under the Spanish Commercial Code; 4 years for tax purposes) |
| Contact form, email, phone or WhatsApp | Name, email, phone, company, message | Answering your enquiry and, if you ask, sending you a quote | Your consent when sending the enquiry (Art. 6.1.a) or pre-contractual measures (Art. 6.1.b) | Until the enquiry is resolved and, at most, 2 years if no business relationship follows |
| Customers and orders | Contact, billing and shipping data, order history | Managing orders, invoicing, shipping and customer service | Performance of the contract (Art. 6.1.b) and legal obligations (Art. 6.1.c) | During the relationship and then for the legal period (6 years) |
| Card payments | Card data is processed directly by Stripe; Gloop neither sees nor stores it | Charging for sample shipping | Performance of the contract (Art. 6.1.b) | According to Stripe’s policy |
| Newsletter and commercial communications (when sent) | Name, email, company, job title | Sending you information about Gloop products similar to those you already know or have ordered | Legitimate interest (Art. 6.1.f GDPR and Art. 21.2 LSSI), always with the option to unsubscribe in every message | Until you unsubscribe |
| Business contacts (B2B) | Name, job title, work email and phone | Maintaining the business relationship with the company | Legitimate interest (Art. 19 LOPDGDD) | For as long as the relationship lasts |
| Cookies | See the Cookie policy |
Fields marked with an asterisk in the forms are mandatory. If you do not complete them, we will not be able to process your request.
We do not make automated decisions or carry out profiling with legal effects on you.
3. Who we share your data with
We do not sell your data. We only share it with:
- transport companies, to deliver shipments;
- our tax and accounting advisers and the public authorities when required by law;
- service providers that process data on Gloop’s behalf under a data processing agreement:
- Payments: Stripe Payments Europe, Ltd. (Ireland)
- CRM and contact management: HubSpot (HubSpot Ireland Ltd.) and Gloop’s own CRM (Captation Group)
- Email: Google Workspace (Google Ireland Ltd.)
- Web analytics and advertising: Google Analytics (Google Ireland Ltd.) and Meta Pixel (Meta Platforms Ireland Ltd.), only if you accept cookies
4. International transfers
Some of these providers (for example Google, HubSpot, Stripe or the web host) may process data in the United States. These transfers are based on the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023), where the provider is certified, or on the standard contractual clauses approved by the European Commission. You can ask us for more information at hello@gloop.site.
5. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw any consent you have given, without affecting processing carried out before the withdrawal.
To exercise them, write to hello@gloop.site or send a letter to the address in section 1, stating which right you wish to exercise. If we have reasonable doubts about your identity, we may ask for additional information to confirm it. We will reply within one month.
If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
6. Minors
This website is not aimed at children under 14. We do not knowingly collect their data. If you are a parent or guardian and believe a minor has given us data, contact us and we will delete it.
7. Security
We apply technical and organisational measures appropriate to the risk to protect your data against loss, unauthorised access or alteration, including encrypted connections (HTTPS) and restricted access to information. If a security breach occurs that poses a high risk to you, we will inform you without undue delay.
8. Changes to this policy
We may update this policy due to legal changes or changes in our services. We will always publish the current version on this page with its date. If the change is significant, we will let you know.