Tesoros del Mediterráneo

Privacy Policy

Tesoros del Mediterráneo - Ethical Dog Breeders in Spain

Last updated: September 1, 2024

1. General Information and Data Controller

At tesorosdelmediterraneo.es, we deeply value and respect your privacy and the protection of your personal data. This Privacy Policy establishes how we collect, use, store and protect your personal information when you visit our website, contact us or use our ethical puppy breeding services.

Data Controller

Owner: David Vázquez Rodríguez (natural person)

Legal status: Natural person — family breeding operation (registered núcleo zoológico), not a commercial company

Address: Barbadás (Ourense), Galicia, Spain

Phone: +34 683 57 35 16

WhatsApp: +34 683 57 35 16

Email: contacto@tesorosdelmediterraneo.es

Website: https://tesorosdelmediterraneo.es

Zoological registry number: ES300030440050 — issued by the Director General de Ganadería, Pesca y Acuicultura (Región de Murcia)

Activity: Breeding with LOE pedigree. Verified breeder per MundoAnimalia, member since 2026. Family-run breeder based in Barbadás (Ourense), Galicia.

Applicable Legal Framework

This Privacy Policy complies with current Spanish and European regulations on the protection of personal data on the Internet, specifically:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR)
  • Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD)
  • Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE)
  • Royal Decree 1720/2007, of December 21, approving the Regulations for the development of Organic Law 15/1999

2. Principles of Personal Data Processing

The processing of your personal data is governed by the following principles established in Article 5 of the GDPR:

Lawfulness, Fairness and Transparency

All data processing is carried out with a valid legal basis and in a transparent manner, providing clear and complete information about the use of your data.

Purpose Limitation

Your personal data is collected only for specific, explicit and legitimate purposes related to our ethical puppy breeding services.

Data Minimization

We collect only the personal data that is strictly necessary for the specific purposes of the processing.

Accuracy

We keep your data up to date and accurate, taking steps to rectify or delete inaccurate data without delay.

Storage Limitation

We keep your personal data only for as long as necessary for the purposes of the processing.

Integrity and Confidentiality

We implement appropriate technical and organizational measures to ensure the security of your personal data.

3. Types of Personal Data We Collect

3.1 Identification and Contact Data

  • Full name
  • Phone number (landline and mobile)
  • Email address
  • Complete postal address
  • Identity document (ID/Passport) for sales contracts

3.2 Family Contact Data

  • Information about family composition (number of members, ages of children)
  • Previous experience with pets
  • Breed preferences and puppy characteristics
  • Housing situation (apartment, house, garden)

3.3 Financial and Payment Data

  • Billing information
  • Payment data (processed securely through certified providers)
  • Transaction history related to puppy purchases

3.4 Navigation and Technical Data

  • IP address and approximate geographic location
  • Browser type and operating system
  • Pages visited on our website
  • Time spent and navigation patterns
  • Cookies and similar technologies

3.5 Communication Data

  • Phone conversations (with your consent)
  • Message exchange via WhatsApp, email or web forms
  • Photos and videos shared during the puppy selection process

4. Purposes of Processing and Legal Basis

4.1 Management of Inquiries and Information Requests

Purpose: Respond to your inquiries about breeds, puppy availability, prices and services

Legal Basis: Legitimate interest and consent of the data subject

Retention: 2 years since last communication

4.2 Puppy Sales and Delivery Process

Purpose: Manage the complete puppy reservation, sale and delivery process

Legal Basis: Execution of the sales contract

Retention: 10 years in accordance with Spanish commercial law

4.3 Post-Sale Follow-up and Health Guarantee

Purpose: Provide ongoing support, health monitoring and warranty management

Legal Basis: Execution of the contract and legitimate interest

Retention: For the life of the animal (approximately 15 years)

4.4 Marketing and Commercial Communications

Purpose: Send information about new litters, events and educational content

Legal Basis: Express consent of the data subject

Retention: Until consent is withdrawn

4.5 Compliance with Legal Obligations

Purpose: Comply with legal obligations in health, tax and animal welfare matters

Legal Basis: Compliance with legal obligations

Retention: As established by applicable regulations

4.6 Service Improvement and Web Analytics

Purpose: Analyze website usage and improve our services

Legal Basis: Legitimate interest

Retention: 2 years for browsing data

5. Recipients and Data Transfers

Your personal data may be communicated to the following categories of recipients:

5.1 Specialized Service Providers

  • Veterinary services: Collaborating veterinary clinics for health monitoring
  • Transport services: Companies specialized in animal transport for deliveries
  • Payment services: Secure payment platforms for transaction processing
  • Technology services: Hosting, email marketing and web analytics providers

5.2 Competent Authorities

  • Spanish Data Protection Agency (AEPD)
  • Health authorities for compliance with animal welfare regulations
  • Tax administration for compliance with tax obligations
  • Judicial authorities when required by law

5.3 Canine Sector Organizations

  • Royal Canine Society of Spain (RSCE) for pedigree registration
  • Breeder associations for certifications and verifications

Important: We do not sell, rent or transfer your personal data to third parties for commercial purposes.

6. International Data Transfers

Some of our technology service providers may be located outside the European Economic Area (EEA). In these cases:

  • We verify that the destination country has an adequate level of protection according to the European Commission
  • We apply appropriate safeguards through standard contractual clauses
  • We guarantee that your data protection rights are respected

The main destinations for international transfers include:

  • United States: Providers certified under adequacy frameworks
  • United Kingdom: Country with adequacy decision from the European Commission

7. Security Measures and Data Protection

We implement appropriate technical and organizational measures to protect your personal data:

7.1 Technical Measures

  • SSL/TLS encryption for all web communications
  • Secure and encrypted backup systems
  • Firewalls and intrusion detection systems
  • Restricted access via multi-factor authentication
  • Regular updates of security systems

7.2 Organizational Measures

  • Ongoing staff training in data protection
  • Internal security and confidentiality policies
  • Regular security and compliance audits
  • Security incident response procedures
  • Confidentiality agreements with all employees and collaborators

7.3 Security Breach Notification

In the event of a security breach that may pose a risk to your rights:

  • We will notify the AEPD within a maximum of 72 hours
  • We will inform you directly if the risk is high for your rights and freedoms
  • We will implement immediate corrective measures

8. Your Rights as a Data Subject

In accordance with the GDPR and LOPDGDD, you have the following rights:

8.1 Right of Access (Art. 15 GDPR)

You can request information about what personal data we process, for what purpose, for how long and to whom we communicate it.

8.2 Right to Rectification (Art. 16 GDPR)

You can request the correction of inaccurate or incomplete personal data.

8.3 Right to Erasure - 'Right to be Forgotten' (Art. 17 GDPR)

You can request the deletion of your personal data when:

  • They are no longer necessary for the original purposes
  • You withdraw your consent and there is no other legal basis
  • They have been unlawfully processed

8.4 Right to Restriction of Processing (Art. 18 GDPR)

You can request the suspension of the processing of your data in certain circumstances.

8.5 Right to Data Portability (Art. 20 GDPR)

You can request to receive your data in a structured, commonly used format, or to have us transmit it directly to another controller.

8.6 Right to Object (Art. 21 GDPR)

You can object to the processing of your data for reasons related to your particular situation.

8.7 Rights Relating to Automated Decisions (Art. 22 GDPR)

You have the right not to be subject to decisions based solely on automated processing.

8.8 Right to Withdraw Consent

You can withdraw your consent at any time without affecting the lawfulness of prior processing.

Exercise of Rights

To exercise any of these rights, you can contact us through:

Email: contacto@tesorosdelmediterraneo.es

Phone: +34 683 57 35 16

Postal address: [Facility Address], Madrid, Spain

Required documentation: Copy of ID/Passport or valid identification document

Response time: Maximum 1 month from receipt of your request

9. Cookies and Similar Technologies

9.1 Types of Cookies We Use

Technical Cookies (Necessary)

  • Purpose: Basic website functionality
  • Duration: Session and persistent
  • Legal basis: Legitimate interest

Analytics Cookies

  • Purpose: Statistical analysis of website usage
  • Provider: Google Analytics
  • Duration: Up to 2 years
  • Legal basis: Consent

Personalization Cookies

  • Purpose: Remember user preferences
  • Duration: Up to 1 year
  • Legal basis: Consent

9.2 Cookie Management

You can manage your cookie preferences through:

  • Cookie configuration panel on our website
  • Your browser settings to block or delete cookies
  • Specific tools provided by third parties

Important: Disabling technical cookies may affect website functionality.

10. Minors

Processing of Minor's Data

In accordance with Article 8 of the GDPR and Article 7 of the LOPDGDD:

  • Minimum age: 14 years to give valid consent
  • Under 14 years: Requires parental or guardian consent
  • Verification: We implement measures to verify age and parental consent
  • Special protection: We apply additional protection measures for minors' data

Rights of Minors

Minors and their legal representatives may exercise all the rights established in this privacy policy.

11. Data Protection Officer (DPO)

Although we are not legally required to appoint a Data Protection Officer, we have appointed a privacy manager:

Privacy Manager: David Vázquez Rodríguez

Email: privacidad@tesorosdelmediterraneo.es

Phone: +34 683 57 35 16

Functions:

  • Supervise compliance with data protection regulations
  • Conduct data protection impact assessments
  • Act as contact point with the AEPD
  • Provide advice on data protection matters

12. Retention of Personal Data

Retention Criteria

Retention periods are determined based on:

  • Purpose of processing
  • Applicable legal obligations
  • Service needs
  • Exercise of rights and legal defense

Specific Periods by Category

Active Client Data

  • Duration: During contractual relationship + 10 years
  • Justification: Commercial and tax obligations

Health Guarantee Data

  • Duration: Lifespan of the animal (up to 15 years)
  • Justification: Fulfillment of offered guarantees

Inquiry Data without Purchase

  • Duration: 2 years since last communication
  • Justification: Legitimate interest in future commercial opportunities

Marketing Data

  • Duration: Until consent is withdrawn
  • Justification: Consent of the data subject

Web Browsing Data

  • Duration: 2 years
  • Justification: Service analysis and improvement

Secure Deletion

Upon expiration of retention periods, we proceed with the secure deletion of data through:

  • Physical deletion of storage media
  • Multiple overwriting of digital data
  • Certified destruction of physical documents

13. Data Protection Impact Assessment

We conduct impact assessments (DPIA) when our processing activities may pose a high risk to individuals' rights and freedoms, especially in cases of:

  • New processing involving innovative technologies
  • Massive processing of personal data
  • Combination of data from different sources
  • Automated customer profiling

14. Complaints to the Supervisory Authority

If you consider that the processing of your personal data does not comply with current regulations, you may file a complaint with the competent supervisory authority:

Spanish Data Protection Agency (AEPD)

Address: C/ Jorge Juan, 6 - 28001 Madrid

Phone: +34 683 57 35 16 / +34 683 57 35 16

Website: https://www.aepd.es

Electronic office: https://sedeagpd.gob.es

Procedure:

  1. Submission: Via the electronic office or in person
  2. Documentation: Identification of the complainant and description of the facts
  3. Processing: The AEPD will evaluate the complaint and may initiate sanctioning procedures
  4. Rights: You may be represented by a lawyer and a solicitor

15. Modifications to the Privacy Policy

Update Procedure

This Privacy Policy may be modified to adapt to:

  • Regulatory changes in applicable legislation
  • New services or features on our website
  • Improvements to our data protection practices
  • Recommendations from data protection authorities

Notification of Changes

We will notify you of any substantial changes through:

  • Prominent notice on our website for at least 30 days
  • Informative email to our client database
  • Update of the 'last modified' date in the document header

Acceptance of Modifications

Continued use of our services after publication of the modifications will constitute your acceptance of the new terms.

16. Contact Information and Inquiries

For Data Protection Inquiries

Privacy Manager: David Vázquez Rodríguez

Specific email: privacidad@tesorosdelmediterraneo.es

Direct phone: +34 683 57 35 16

For General Inquiries

General email: contacto@tesorosdelmediterraneo.es

WhatsApp: +34 683 57 35 16

Phone: +34 683 57 35 16

Hours of Operation

  • Monday to Friday: 9:00 AM - 7:00 PM
  • Saturdays: 9:00 AM - 5:00 PM
  • Sundays: By appointment

Address

Tesoros del Mediterráneo

Barbadás (Ourense), Galicia, Spain


17. Language and Jurisdiction

Policy Language

This Privacy Policy is available in Spanish. In case of translation into other languages, the Spanish version shall always prevail.

Applicable Law and Jurisdiction

This Privacy Policy is governed by current Spanish and European legislation. Any dispute arising from the processing of personal data shall be submitted to the jurisdiction of the Courts of Madrid, Spain.

18. Transparency Statement

At tesorosdelmediterraneo.es we are committed to:

✓ Total transparency in the processing of your personal data

✓ Agile response to your inquiries and exercise of rights

✓ Continuous improvement of our data protection practices

✓ Strict compliance with Spanish and European regulations

✓ Constant training of our team in data protection

✓ Responsible innovation in the use of new technologies

Quality Commitment

We maintain the highest standards in data protection because we understand that the trust of our families is fundamental to our business model based on ethical breeding and long-term support.

19. Effective Date

This Privacy Policy comes into effect on September 1, 2024 and replaces any previous version.

Last updated: September 1, 2024

tesorosdelmediterraneo.es - Ethical Dog Breeders in Spain

Where every puppy finds its perfect family - Ethical breeding, lifetime support

For any questions about this Privacy Policy, please do not hesitate to contact us at contacto@tesorosdelmediterraneo.es or +34 683 57 35 16.