Privacy Policy

Data protection declaration

index

1. Information about the collection of personal data and contact details

by the controller

2. Collection of data during your visit to the website

3. Hosting & Content Delivery Network

4. Cookies

5. Contact

6. Data processing for order processing

7. Web analysis services

8. Retargeting, remarketing and recommendation advertising

9. Functions of the site

10. Tools and miscellaneous

11. Rights of the data subject

12. Retention period for your personal data

1) Information about the collection of personal data and

Contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest.

In the following we inform you about the handling of your personal data at

Use of our website. Personal data is all data with which you

can be personally identified.

1.2 The person responsible for data processing on this website within the meaning of

General Data Protection Regulation (GDPR) is Feelgoods Baleares SL, Avenida Blai Bonet 8, APARTAMENTO 601, 07180 Santa Ponça, Spain, Telephone: +4915256000120, Email: info@feelgoods-baleares.es. The controller of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing these personal data.

2) Collection of data during your visit to the website

2.1 If you use the website purely for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (server log files). When you visit our website, we collect the following data, which is technically necessary to display the pages to you:

- The website visited

- The date and time of access

- The amount of data sent in bytes

- The origin or reference from which you accessed the website

- Browser used

- The operating system used

- the IP address used (possibly in anonymized form)

The processing is carried out in accordance with Article 6 (1) (f) of the GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. We will not share the data or use it for any other purpose. However, we reserve the right to review the server log files at a later date if there are indications of unlawful use.

2.2 For security reasons and to protect the transmission of data and other

This website uses an SSL or TLS encryption protocol for confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted link by the character string "https://" and the padlock symbol in the browser bar.

3) Hosting & Content Delivery Network

3.1 Shopify

To host our website and display its content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Data may also be transmitted to: Shopify Inc, 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

All data collected on our website is processed on the provider’s servers.

We have concluded a contract with the provider that guarantees the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For the transfer of data to Canada, an appropriate level of data protection is guaranteed by an adequacy decision of the European Commission.

3.2 Cloudflare

We use a content delivery network from the following provider: Cloudflare Inc., located at 101 Townsend St., San Francisco, CA 94107, USA.

This service allows us to distribute large media files such as graphics, page content, or scripts more quickly across a network of regionally organized servers. Data processing is carried out in accordance with Article 6 (1) (f) of the General Data Protection Regulation in accordance with our legitimate interests, to improve the stability and functionality of our website.

We have concluded a contract with the provider that guarantees the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision of the European Commission.

4) Cookies

To make visiting our website more pleasant and enable the use of certain functions, we use cookies. These are small text files stored on the user's device. Sometimes these cookies are automatically deleted when the browser is closed (session cookies); sometimes they remain on the device for a longer period of time and allow the storage of page settings (persistent cookies). In the latter case, the user can check the storage duration in the browser's cookie settings.

In the event that some of the cookies we use also process personal data, this processing is carried out in accordance with Article 6 (1) (b) of the GDPR to fulfill the contract, in accordance with Article 6 (1) (a) of the GDPR if the user has given us their consent, or in accordance with Article 6 (1) (f) of the GDPR to protect our legitimate interests in the best possible functionality of the website and in an effective and user-friendly design of the website visit.

Users can also configure their browser to be informed about the installation of cookies and to decide whether they do not want to accept them individually, in certain cases or generally.

If you do not accept cookies, the functionality of our website may be limited.

5) Contact

When you contact us (e.g., via a contact form or by email), we collect personal data. The data collected in the case of a contact form is specified in the respective form. This data is stored and used exclusively to answer your inquiry or to contact you and for technical administration of your inquiry.

The legal basis for processing the data is our legitimate interest in answering your inquiry pursuant to Article 6, Paragraph 1, Letter f of the General Data Protection Regulation. If you contact us for the purpose of concluding a contract, the legal basis for processing the data is also that stated in Article 6, Paragraph 1, Letter b of the GDPR. Once your inquiry has been processed, your data will be deleted, provided that the circumstances indicate that the matter in question has been conclusively clarified and there are no statutory retention periods that prevent deletion.

6) Data processing for order processing

6.1 We will pass on the personal data we collect to the transport companies commissioned with the delivery for contract processing, insofar as this is necessary for the delivery of the goods. We will pass on your payment details to the commissioned credit institution for payment processing, insofar as this is necessary for payment processing. If we use payment service providers, we will expressly inform you of this. The legal basis for this data transfer is Article 6 (1) (b) of the General Data Protection Regulation.

6.2 Use of payment service providers

- Apple Pay

If you choose to use Apple Pay, a payment method provided by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment will be processed using the Apple Pay feature on your iOS, watchOS, or macOS device by charging a payment card stored with Apple Pay. Apple Pay uses security features built into your device's hardware and software to protect your transactions. To authorize a payment, you must enter a code you previously created and verify it using your device's Face ID or Touch ID feature.

For payment processing, the data you provide during the checkout process, along with your order information, is transmitted to Apple in encrypted form. Apple then re-encrypts this data with a developer-specific key before transmitting it to the payment service provider of the payment card stored in Apple Pay for payment. This encryption ensures that only the website where the purchase was made can access the payment data. Once the payment is made, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm the success of the payment.

If personal data is processed during the described transmissions, the processing will be carried out exclusively for the purpose of payment processing in accordance with Art. 6 (1) (b) GDPR. 1 (b) GDPR.

Apple stores anonymous transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was successful. Anonymization completely eliminates the possibility of personal identification. Apple uses anonymized data to improve Apple Pay and other Apple products and services.

When you use Apple Pay on iPhone or Apple Watch to complete a purchase.

The Mac and the authorization device communicate over an encrypted channel on Apple's servers. Apple does not process or store any of this data in a form that can personally identify you. You can disable the ability to use Apple Pay on your Mac in your iPhone's settings. Go to "Wallet & Apple Pay" and uncheck "Allow payments on Mac." - PayPal

One or more payment methods are available on this website from the following provider: PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg

If you select one of the provider's payment methods that corresponds to an advance payment, your payment details (including name, address, bank and payment card details, currency, and transaction number) as well as information about the order content will be transmitted as part of the order in accordance with Art. 6 (1) (b) GDPR. In this case, your data will be transmitted exclusively for the purpose of processing the payment with the supplier and only to the extent necessary for this purpose.

To select the payment method for advance payment, you must also provide certain personal information (first and last name, street, house number, postal code, city, date of birth, email address, telephone number or, if applicable, details of an alternative payment method).

To safeguard our legitimate interest in determining the creditworthiness of our customers, this data is transmitted to the supplier for the purpose of credit checks in accordance with Article 6 (1) (f) of the GDPR. The provider uses the personal data you provide and other data (such as shopping cart, invoice amount, order history, or previous payment experience) to determine whether the payment option you have chosen can be granted, taking into account your credit and payment risk.

7) Web analysis services

Google Tag Manager

This website uses Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Tag Manager enables you to aggregate, calibrate, monitor, and link various web applications, including tracking and analytics services, and to calibrate, monitor, and link them with specific conditions through a single user interface.

Google Tag Manager does not store or read information on users' devices, nor does it perform any autonomous data analysis.

However, when you visit the website, Google Tag Manager transmits the user's IP address to Google, where it is stored. It may also be transferred to Google LLC servers in the USA.

This processing only takes place if you have given us your express consent in accordance with Article 6 (1) (a) of the GDPR. Without this consent, Google Tag Manager will not be used during your visit to the website.

Users can revoke their consent at any time with future effect. To do so, they simply need to deactivate this service using the cookie consent tool we provide on our website. We have concluded a data processing agreement with Google, in which Google undertakes to protect the data of visitors to our website and not to share it with third parties.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision of the European Commission.

Further information on data protection and Google Tag Manager can be found at: https://business.safety.google/intl/es/privacy/ and https://support.google.com/tagmanager/answer/9323295?hl=es.

Specific information on the data protection-relevant services and applications covered by Google Tag Manager can be found in the relevant sections of this Privacy Policy.

8) Retargeting, remarketing and recommendation advertising

Google Ads Remarketing

This website uses retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. This technology enables us to specifically target visitors to our website who have already shown interest in our shop and our products with personalized, interest-based advertising. Advertising is displayed based on a cookie-based analysis of past and current usage habits, but does not involve the storage of personal data. Retargeting technology stores a cookie on the user's computer or mobile device in order to collect pseudonymized data about the user's interests and thus tailor the advertising to the stored information. These cookies are small text files that are stored on the user's computer or mobile device. Users are shown advertising that most closely matches their interests in terms of products and information.

All processing described above, in particular the installation of cookies to read information about the device used, only takes place if the user has given us their express consent in accordance with Article 6 (1) (a) of the GDPR. Without this consent, retargeting technology will not be used during the user's visit to the website.

Users can revoke their consent at any time with future effect. To do so, they must simply deactivate this service using the cookie consent tool provided on the website. The data may also be transferred to the following entities: Google LLC, USA. For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision of the European Commission. Further information about data protection at Google can be found here: https://business.safety.google/intl/es/privacy/

9) Functions of the site

9.1 Facebook plug-in

Our website uses social network plugins from the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quay, Square, Dublin 2, Ireland.

These plugins enable direct interaction with the content of the social network.

To increase the protection of your data when visiting our website, the plugins are first deactivated and then integrated into the site using a so-called "2-click" or "Shariff" solution. This integration ensures that no connection to the provider's servers is established when you access a page on our website containing such plugins.

Your browser only establishes a direct connection to the provider's servers if you activate the plug-ins and thus consent to the transmission of data in accordance with Art. 6 (1) (a) GDPR. Regardless of whether you log in to an existing user profile, a certain amount of information about the device you use (including your IP address), your browser, and your page browsing history will be transmitted to the provider and, if necessary, further processed.

If you are logged into an existing user profile on the provider's social network, information about the interactions made through the plug-ins will also be published there and displayed to your contacts.

You can revoke your consent at any time by deactivating the activated plugin by clicking on the plugin itself. However, this revocation will not affect data that has already been transmitted to the provider.

We have concluded a contract with the provider that guarantees the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

The data may also be transferred to: Meta Platforms Inc. in the USA. For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision of the European Commission.

9.2 Instagram plugin

Our website uses social network plugins from the following provider: Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

These plugins enable direct interaction with the content of the social network.

To increase the protection of your data when visiting our website, the plugins are first deactivated and then integrated into the site using a so-called "2-click" or "Shariff" solution. This integration ensures that no connection to the provider's servers is established when you access a page on our website containing such plugins.

Your browser only establishes a direct connection to the provider's servers if you activate the plug-ins and thus consent to the transmission of data in accordance with Art. 6 (1) (a) GDPR. Regardless of whether you log in to an existing user profile, a certain amount of information about the device you use (including your IP address), your browser, and your page browsing history will be transmitted to the provider and may be further processed.

If you are logged into an existing user profile on the provider's social network, information about the interactions made through the plug-ins will also be published there and displayed to your contacts.

You can revoke your consent at any time by deleting the activated plugin by

by clicking on the plugin itself. However, the revocation has no effect on data that has already been transmitted to the provider.

We have concluded a contract with the provider that guarantees the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

The data may also be transferred to: Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision of the European Commission.

9.3 LinkedIn plugin

Our website uses social network plugins from the following provider: LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

These plugins enable direct interaction with the content of the social network.

To increase the protection of your data when visiting our website, the plugins are first deactivated and then integrated into the site using a so-called "2-click" or "Shariff" solution. This integration ensures that no connection to the provider's servers is established when you access a page on our website containing such plugins.

Your browser only establishes a direct connection to the provider's servers if you activate the plug-ins and thus consent to the transmission of data in accordance with Art. 6 (1) (a) GDPR. Regardless of whether you log in to an existing user profile, a certain amount of information about the device you use (including your IP address), your browser, and your page browsing history will be transmitted to the provider and may be further processed.

If you are logged into an existing user profile on the provider's social network, information about the interactions made through the plug-ins will also be published there and displayed to your contacts.

You can revoke your consent at any time by deactivating the activated plugin by clicking on the plugin itself. However, this revocation will not affect data that has already been transmitted to the provider.

We have concluded a contract with the provider that guarantees the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider refers to the so-called standard contractual data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

9.4 Pinterest plugin

Our website uses plugins from the social network Pinterest Inc., located at 808 Brannan Street, San Francisco, CA 94103, USA.

These plugins enable direct interaction with the content of the social network.

To increase the protection of your data when visiting our website, the plugins are first deactivated and then integrated into the site using a so-called "2-click" or "Shariff" solution. This integration ensures that no connection to the provider's servers is established when you access a page on our website containing such plugins.

Your browser only establishes a direct connection to the provider's servers if you activate the plug-ins and thus consent to the transmission of data in accordance with Art. 6 (1) (a) GDPR. Regardless of whether you log in to an existing user profile, a certain amount of information about the device you use (including your IP address), your browser, and your page browsing history will be transmitted to the provider and may be further processed.

If you are logged into an existing user profile on the provider's social network, information about the interactions made through the plug-ins will also be published there and displayed to your contacts.

You can revoke your consent at any time by deactivating the activated plugin by clicking on the plugin itself. However, this revocation will not affect data that has already been transmitted to the provider.

We have concluded a contract with the provider that guarantees the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider refers to the so-called standard contractual data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

9.5 X-Plugin

Our website uses social network plugins from the following provider: Twitter International Unlimited Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07 Ireland.

These plugins enable direct interaction with the content of the social network.

To increase the protection of your data when visiting our website, the plugins are first deactivated and then integrated into the site using a so-called "2-click" or "Shariff" solution. This integration ensures that no connection to the provider's servers is established when you access a page on our website containing such plugins.

Your browser only establishes a direct connection to the provider's servers if you activate the plug-ins and thus consent to the transmission of data in accordance with Art. 6 (1) (a) GDPR. Regardless of whether you log in to an existing user profile, a certain amount of information about the device you use (including your IP address), your browser, and your page browsing history will be transmitted to the provider and may be further processed.

If you are logged into an existing user profile on the provider's social network, information about the interactions made through the plug-ins will also be published there and displayed to your contacts.

You can revoke your consent at any time by deactivating the activated plugin by clicking on the plugin itself. However, this revocation will not affect data that has already been transmitted to the provider.

We have concluded a contract with the provider that guarantees the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

YouTube

This website uses plugins to display and play videos from the following providers: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

In addition, the data may be transferred to Google LLC, USA.

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the provider's servers to load the plugin. Certain information, including your IP address, is transmitted to the provider.

If the playback of the embedded videos is triggered via the plugin, the provider also sets cookies to collect information about user behavior, create playback statistics and prevent abusive behavior.

If you are logged into a user account with the provider when you visit the site, your data will be directly assigned to your account when you click on a video. If you do not want this data to be assigned to your account, you must log out before clicking the "Play" button.

All of the aforementioned processing, in particular the installation of cookies to read information about the device used, will only take place if you have given us your express consent in accordance with Article 6, paragraph 1, letter a of the GDPR. You can revoke your consent at any time with future effect by deactivating this service using the "Cookie Consent Tool" provided on the website.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision of the European Commission.

10) Tools and miscellaneous

Cookie consent tool

This website uses a cookie consent tool to obtain the effective consent of users to the use of cookies that require such consent. The cookie consent tool is presented to users when opening the website in the form of an interactive interface, allowing users to give their consent to the use of certain cookies or cookie-based applications by checking the relevant boxes. By using this tool, all cookies or services that require consent will only be loaded if the user has given their consent by checking the relevant boxes. This ensures that these cookies are only installed on the user's device if the user has given their prior consent.

This tool sets cookies that are technically necessary to save the selected cookie settings. Generally, no personal data is processed. If personal data (e.g., IP address) must be processed in individual cases to save, assign, or log cookie settings, this processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the lawful, personalized, and intuitive handling of cookie consent and thus in the legally compliant design of our website.

Another legal basis for data processing is Article 6(1)(c) of the General Data Protection Regulation. As the data controller, we are obligated to make the use of cookies that are not necessary for technical reasons dependent on the user's consent.

Further information about the operator and the setting options of the cookie consent tool can be found in the corresponding user interface of our website.

11) Rights of the data subject

11.1 The applicable data protection regulations grant you extensive rights vis-à-vis the controller responsible for processing your personal data (rights to information and intervention), about which we inform you below:

- Right to information under Article 15 of the General Data Protection Regulation

- Right to rectification pursuant to Article 16 of the General Data Protection Regulation

- Right to erasure pursuant to Article 17 of the General Data Protection Regulation

- Right to restriction of processing pursuant to Article 18 of the Data Protection

General Data Protection Regulation

- Right to information pursuant to Article 19 of the General Data Protection Regulation

- Right to data portability pursuant to Article 20 of the General Data Protection Regulation

- Right to withdraw consent in accordance with Article 7 paragraph 3 of the Data Protection

General Data Protection Regulation

- Right to lodge a complaint under Article 77 of the General Data Protection Regulation

11.2 RIGHT OF OBJECTION

If we process your personal data as part of a balancing of interests based on our overriding legitimate interests, you have the right to object to this processing at any time with future effect for reasons arising from your particular situation. If you exercise your right of objection, we will cease processing the data in question. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS WHICH OVERRIDE YOUR INTERESTS AND FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISE OR DEFENSE OF RIGHTS.

If we process your personal data for direct marketing purposes, you have the right to object to the processing of the relevant personal data for such marketing purposes at any time. You can exercise your right of objection as described above. If you exercise your right of objection, we will cease processing the relevant data for direct marketing purposes.

12) Retention period for your personal data

The duration of storage of personal data depends on the respective legal basis, the purpose of the processing and, if applicable, also on the respective statutory retention period (e.g. retention periods under commercial and tax law).

If personal data is processed on the basis of an explicit consent in accordance with Art. 6 (1) (a) GDPR, this data will be stored until the data subject revokes his or her consent.

If statutory retention periods exist for data that is processed within the framework of legal or quasi-legal obligations on the basis of Art. 6 (1) (b) GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for the performance or initiation of a contract and/or we have no legitimate interest in further storage.

If personal data is processed on the basis of Art. 6 (1) (f) GDPR, it will be stored until the data subject exercises his or her right of objection pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

If personal data is processed on the basis of Art. 6 (1) (f) GDPR for direct marketing purposes, this data will be stored until the data subject exercises his or her right of objection in accordance with Art. 21 (2) GDPR.

Unless otherwise stated in the other information in this statement on specific processing situations, stored personal data will be deleted when it is no longer needed for the purposes for which it was collected or otherwise processed.