Privacy Policy 

Who is responsible for processing your data?

The data controllers are:

• The company Roca Sanitario, S.A., with tax ID number A08037392, and registered address at Avinguda Diagonal, 513, 08029, Barcelona, telephone 93.419.45.01 ane e-mail lopd@roca.net (hereinafter Roca)
• The company Zapp-Studio S.L., with tax ID number B73818056, and registered address at C/ Jose Manuel Sanchez Pedreño 1, 4ºIzq 30009, Murcia, telephone 868 103 142 e-mail info@zapp-studio.com

Both Roca and Zapp-Studio S.L are co-responsible for the processing. This means that they have regulated and are jointly in charge of processing and protecting your personal data.

Why do we process your personal data?

Your personal data is processed to accept and process orders, to process payments and to communicate with you in connection with your order.

What is our legal basis to process your personal data?

The processing of your data is needed for the execution of the purchase agreement of the offered products that links us to you.  

It is possible that some data processing linked to the purchase process are only activated because you request or authorise us, as is the case of the storage of payment data (card) for future purchases, in which case the legal basis of the processing is your own consent. 

We consider that we have a legitimate interest in carrying out the necessary verifications to detect and prevent possible frauds when you make a purchase. We understand that this data processing is positive for all parties involved in the payment of a purchase and in particular for you, as it allows us to put measures in place to protect you against fraud attempts by third parties. 

How long will we keep your data?

We will process your data for the time needed to manage the purchase of the products you have bought, including possible complaints or claims linked to the purchase of the product. 

In some cases, we will only process the data until the time you decide, as is the case of the payment data (card) you have asked us to store for future purchases.

In any case, we will process your data during the time that is strictly necessary to fulfill the corresponding purpose, we will keep them properly stored and protect for the time any responsibilities derived from the processing might arise, in compliance with the regulation in force at any given time. Once the possible actions prescribe in each case, we will proceed to delete the personal data. 

Will we share the data with third parties?

Your data will not be shared with third parties, unless there is a legal obligation to do so. The processing will take place within the European Union.

In this regard, we remind you that Zapp-Studio S.L is the company in charge of accepting and managing the orders, as well as processing the payments, while Roca is in charge of the delivery of the product. 

What are your rights when you provide us with your data?

We undertake to respect the confidentiality of your personal data and to guarantee the exercise of your rights, by sending a written notification to Roca Sanitario, S.A., 08029-Barcelona, Avenida Diagonal, nº 513 or by e-mail to lopd@roca.net. Should we consider it necessary to identify you, we may request a copy of a document establishing your identity. In particular, regardless of the purpose or legal basis of the processing of your data, you have the right to:

• Request access to your data.

• Request that we rectify the data we already store. Please note, however, that by actively providing us with your personal data, you guarantee that they are true and accurate and you agree to notify us of any changes or modifications to them. 

• Request us to delete your data once they are no longer necessary for the purpose we need them for as mentioned above, or once we lack the legal basis to do it. 

• Request us to limit the processing of your data, which implies that in certain cases you may request us to temporarily suspend the data processing or to keep them beyond the necessary time frame whenever you deem it necessary. 

If you have given us your consent to the processing of your data for any purpose, you also have the right to withdraw it at any time.  

When the legal basis for the treatment of your data is your consent or the execution of the agreement, you also have the right to request the portability of your personal data. This means you have the right to receive the personal data you request in a structured, commonly used and machine-readable format, in order to be able to transmit it directly to another entity, whenever technically possible. 

On the other hand, when the processing of your data is based on our legitimate interest, you also have the right to object to the processing of your data. 

Finally, we inform you of your right to file a complaint with the relevant data protection authority, in particular with: the Spanish Data Protection Agency (https://www.agpd.es/portalwebAGPD/index-ides-idphp.php), or with the corresponding body in each country.