Privacy policy

• Owner: TINE VERSE, S.L.
• Trade name: FAUMA
• VAT number: B13684378
• Registered address: Calle Castanyer s/n, 12594 Oropesa del Mar (Castellón), Spain
• Contact email: info@fauma.com
• Data Protection Officer (DPO): TINE VERSE, S.L. For any privacy-related matter you may get in touch through the following link: https://www.ovetauki.com/canal/grupo-fucsa.

Depending on your interaction with the Services, we may process the following categories of data:

2.1. Registration and account data

Registration and login may be carried out via third-party identity providers (Google or Apple) managed through Firebase Authentication, in which case we receive and store the associated email address. We do not request or store passwords directly.

2.2. Profile and delivery data

For the management of Product acquisition and delivery, user profile management and the supply of Digital Content: first name, surname, email address, telephone number and delivery address.

2.3. Billing data

FAUMA does not request tax details (fiscal address, VAT or ID number) and does not issue invoices unless expressly requested by the user. Following the transaction, the User receives an email with a reference for the contribution made. For purchases at a physical point of sale, the User may receive a receipt or payment confirmation for the card payment made via the point-of-sale terminal (POS).

2.4. Payment data

Online payment only (app and website): card payments (Visa, Mastercard, AMEX) and digital wallets (Apple Pay, Google Pay) are processed through Stripe (Stripe Payments Europe, Ltd.). FAUMA does not store full card details; these are processed directly by Stripe in accordance with the PCI-DSS standard.

Once payment is verified, access to the associated Digital Content will be automatically enabled in the User's account. Delivery of the physical Product will be carried out via the shipping or collection options available at any given time.

2.5. Product purchased as a gift

Where a User purchases a Product as a gift for a third party, we will process the purchaser's data and, where applicable, the recipient's data necessary for activation and/or delivery (name and contact/delivery details). The purchaser warrants that they have informed the recipient and that they are authorised to provide their data.

2.6. Usage, interaction and behavioural data

For the proper functioning of the purchased Product and the progressive release of Digital Content ("drip content"), we process data relating to the status of your Product and your interaction with unlocked Content, as well as behavioural data such as number of logins, species or projects of interest, badges earned, cumulative spend and point of purchase (digital or physical store, including store identification).

2.7. Browsing data

Data derived from use of the website and/or the App, including online identifiers and device and browser data, as well as information about interaction with our Services. This data may be collected through cookies and similar technologies, including measurement and analytics cookies/technologies and advertising and remarketing cookies/technologies from Google and Meta, in addition to technical cookies. Apple advertising (Apple Ads) does not use website cookies: its measurement relies on Apple's attribution technologies within the mobile app.

Details of each cookie/technology (name, provider, purpose and duration) are set out in the Cookies Policy.

We retain data for as long as necessary for the provision of the Services and, in any case:

• Account data and purchased Product: while the account remains active and access to the Digital Content continues. Following account closure or the expiry of the Digital Content access period, data will be deleted or, where appropriate, duly blocked (without active processing, except for disclosure to competent courts, tribunals or public authorities) for the applicable statutory limitation periods, after which it will be permanently erased.
• Billing data: for the periods required by tax and commercial law (generally up to 6 years under the Commercial Code, without prejudice to applicable tax retention periods).
• Data for commercial communications: until the User withdraws their consent or objects, at which point sending will cease.
• Browsing data obtained through cookies and similar technologies: including measurement and analytics cookies/technologies and advertising and remarketing cookies/technologies from Google and Meta, such data will be processed and retained in accordance with the duration of each cookie/technology and the criteria set out in the Cookies Policy; in particular, data associated with non-necessary cookies will be processed for as long as the User maintains their consent and, where applicable, until it is withdrawn or modified, without prejudice to such data being kept blocked, where appropriate, for the applicable statutory limitation periods.

We do not sell your personal data. The following recipients may access your data to the extent strictly necessary:

• Postal/courier company: for product delivery, name, telephone number and delivery address are shared with Sociedad Estatal Correos y Telégrafos, S.A. (Correos).
• Payment gateway: Stripe Payments Europe, Ltd. (Stripe), as processor/controller of payment data.
• Technology providers: technology and infrastructure providers such as Google/Firebase (Firebase Authentication, for authentication), Cloudflare, Inc. (hosting and deployment of the website and back office) and Supabase (backend infrastructure), as data processors.
• Analytics, measurement and advertising platforms: Google (Google Analytics and Google Ads), Meta Platforms Ireland Ltd. and Apple Inc., which may process data in connection with measurement and advertising/remarketing services and act as controllers (or, where applicable, joint controllers) in respect of the processing they carry out for their own advertising purposes.
• Conservation organisations: only aggregated and anonymised data, unless the User has given explicit prior consent.
• Public authorities and regulatory bodies, where there is a legal obligation.

Data processing agreements required under Art. 28 GDPR are in place with all data processors.

Some providers (e.g. Google/Firebase, Vercel, Supabase and, where applicable, the payment gateway) may process data outside the European Economic Area, in particular in the United States. Such transfers are covered by adequacy decisions (including the EU-US Data Privacy Framework where the provider is certified) or by Standard Contractual Clauses approved by the European Commission, together with any applicable additional safeguards.

FAUMA is a service intended exclusively for adults with the capacity to make financial contributions, that is, persons aged 18 or over or, where applicable, legally emancipated minors. The Service is not aimed at minors and does not include sensitive content.

When registering, making a contribution or using the Service, the User declares and warrants that they meet the age requirement stated above. Given the adult nature of the Service and the absence of sensitive content, FAUMA does not currently implement age verification mechanisms; however, should FAUMA become aware of, or have reasonable grounds to believe, that a User is under 18 years of age and is not legally emancipated, it will take appropriate measures to prevent that User from using the Service and to delete or, where applicable, restrict the processing of the associated personal data, to the extent appropriate under applicable law. Should FAUMA in the future enable an interface or features aimed at an under-age audience, or should the Service come to be regarded as offered directly to minors within the meaning of applicable law, the verification measures and, where applicable, the measures for obtaining and verifying the consent of the holder of parental responsibility or guardianship required by law will be adopted, taking into account available technology.

The User may exercise the rights of access, rectification, erasure, objection, restriction of processing, data portability and the right not to be subject to solely automated individual decisions, as well as withdraw any consent given, by contacting https://www.ovetauki.com/canal/grupo-fucsa, indicating the right being exercised and enclosing, where applicable, proof of identity.

The User has the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es, if they consider that the processing does not comply with applicable law.

FAUMA implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk, protecting data against destruction, loss, alteration or unauthorised access. No system is infallible, and absolute security cannot be guaranteed.

The website uses first-party and third-party cookies and similar technologies. Technical or strictly necessary cookies are used to enable the functioning of the site and the provision of the requested services. Non-necessary cookies, including measurement and analytics and advertising and remarketing cookies/technologies, in particular from Google and Meta, will only be used where the User has accepted/consented to them through the mechanism provided, and such consent may be withdrawn or modified at any time. Full information about the cookies and technologies used (including their identification, provider, purpose and duration) and how to configure or disable them is available in the Cookies Policy, accessible from the website.

We may update this Policy to reflect regulatory or operational changes. The current version will be published on this site, updating the "last updated" date and, where changes are material, notifying Users through additional means.

For any questions regarding this Policy, please contact info@fauma.com.