Privacy policy
Last updated: 31 August 2026
How we handle your personal data when you buy from us or get in touch, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
- Controller: ESLLETRO, S.L. (Tax ID B88707583)
- Registered address: Calle Navarra, 50 · 12002 Castellón de la Plana (Castellón), Spain
- Contact: info@tantolamps.com
We do not process data on a large scale or special categories of data, so we are not required to appoint a Data Protection Officer (art. 37 GDPR). For anything concerning your data, write to us at the address above.
2. What data we process and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Handling your order, shipping and invoicing | Name, address, email, telephone, payment details | Performance of the contract (art. 6.1.b GDPR) | For the duration of the relationship and afterwards for the legal tax and commercial periods |
| Answering your enquiries | Name, email and message content | Legitimate interest / your consent | While it is being handled and up to 1 year afterwards |
| Sending you commercial communications | Name and email | Your consent (art. 6.1.a GDPR) | Until you unsubscribe |
| Meeting legal obligations | Invoicing data | Legal obligation (art. 6.1.c GDPR) | The periods set by law |
3. Who has access to your data
We do not sell or transfer your data. Only the providers needed to give you the service have access, all of them under a data processing agreement:
- Stripe Payments Europe, Ltd. — payment processing. We do not store your card details: Stripe handles them directly.
- Web hosting provider: Hostinger International Ltd (Cyprus, European Union)
- Transport and logistics companies, with only the data needed to deliver your order. We will tell you which one is handling your shipment in the confirmation email.
- Public authorities, where required by law.
For the moment we do not use any email marketing platform. If we ever send a newsletter, we will update this policy beforehand and it will only go to people who have expressly asked for it.
3.1 Transfers outside the European Union
Our main providers are established in the European Union: Stripe Payments Europe, Ltd. in Ireland and Hostinger International Ltd (Cyprus, European Union).
Even so, some of them may rely on group companies located outside the European Economic Area — this is the case with Stripe and its US parent company. Those transfers are covered by the standard contractual clauses approved by the European Commission and, where applicable, by the EU-US Data Privacy Framework, which guarantee a level of protection equivalent to the European one.
4. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability at any time, and withdraw your consent. Write to us at info@tantolamps.com stating which right you are exercising and attaching a copy of your identity document.
If you believe we have not dealt with your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
5. Security
We apply technical and organisational measures to protect your data. The site runs over an encrypted connection and payment takes place in a secure environment managed by Stripe.
6. Minors
Our services are not aimed at children under 14. We do not knowingly collect their data.