Privacy policy
Last updated: 17 June 2026 · Version 2.0
FAUMA is a trade name owned by TINE VERSE, S.L. (hereinafter, "TINEVERSE", "we" or the "Controller"). This Privacy Policy governs the processing of personal data of users ("User" or "You") collected through the website www.fauma.com and the FAUMA mobile application (collectively, the "Services"), in compliance with Regulation (EU) 2016/679 ("GDPR"), Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights ("LOPDGDD") and Law 34/2002 on Information Society Services and Electronic Commerce ("LSSI-CE").
Capitalised terms not specifically defined in this Privacy Policy shall have the meaning given to them in the FAUMA Terms and Conditions.
1. Data controller
- Owner: TINE VERSE, S.L.
- Trade name: FAUMA
- VAT number: B13684378
- Registered address: Calle Castanyer s/n, 12594 Oropesa del Mar (Castellón), Spain
- Contact email: info@fauma.com
- Data Protection Officer (DPO): TINE VERSE, S.L. has not appointed a Data Protection Officer, as this is not a legal requirement. For any data protection queries, please contact https://www.ovetauki.com/canal/grupo-fucsa.
2. Personal data we process
Depending on your interaction with the Services, we may process the following categories of data:
2.1. Registration and account data
Registration and login may be carried out via third-party identity providers (Google or Apple) managed through Firebase Authentication, in which case we receive and store the associated email address. We do not request or store passwords directly.
2.2. Profile and delivery data
For the management of Product acquisition and delivery, user profile management and the supply of Digital Content: first name, surname, email address, telephone number and delivery address.
2.3. Billing data
FAUMA does not request tax details (fiscal address, VAT or ID number) and does not issue invoices unless expressly requested by the user. Following the transaction, the User receives an email with a reference for the contribution made. For purchases at a physical point of sale, the User may receive a receipt or payment confirmation for the card payment made via the point-of-sale terminal (POS).
2.4. Payment data
Online payment only (app and website): card payments (Visa, Mastercard, AMEX) and digital wallets (Apple Pay, Google Pay) are processed through Stripe (Stripe Payments Europe, Ltd.). FAUMA does not store full card details; these are processed directly by Stripe in accordance with the PCI-DSS standard.
Once payment is verified, access to the associated Digital Content will be automatically enabled in the User's account. Delivery of the physical Product will be carried out via the shipping or collection options available at any given time.
2.5. Product purchased as a gift
Where a User purchases a Product as a gift for a third party, we will process the purchaser's data and, where applicable, the recipient's data necessary for activation and/or delivery (name and contact/delivery details). The purchaser warrants that they have informed the recipient and that they are authorised to provide their data.
2.6. Usage, interaction and behavioural data
For the proper functioning of the purchased Product and the progressive release of Digital Content ("drip content"), we process data relating to the status of your Product and your interaction with unlocked Content, as well as behavioural data such as number of logins, species or projects of interest, badges earned, cumulative spend and point of purchase (digital or physical store, including store identification).
2.7. Browsing data
Data derived from use of the website and cookies or similar technologies, as described in the Cookies Policy.
3. Purposes and legal basis for processing
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Creating and managing the User account and providing access to the Digital Content ("drip content") of the supported species or project. | Performance of a contract (Art. 6.1.b). |
| Managing the one-time payment for the Product and its delivery. | Performance of a contract (Art. 6.1.b). |
| Issuing invoices and complying with accounting, tax and commercial obligations, where applicable. | Legal obligation (Art. 6.1.c). |
| Sending operational or service communications (confirmations, incidents, changes to terms or policies). | Performance of contract / legitimate interest (Art. 6.1.b / 6.1.f). |
| Sending commercial communications and newsletters about FAUMA and marine conservation to non-customers. | Consent (Art. 6.1.a). |
| Sending commercial communications about our own similar products or services to existing customers, with a simple and free opt-out option in each communication. | Legitimate interest (Art. 6.1.f) in conjunction with Art. 21.2 LSSI-CE. |
| Security of the Services, fraud prevention and handling of rights requests. | Legitimate interest / legal obligation (Art. 6.1.f / 6.1.c). |
4. Retention periods
We retain data for as long as necessary for the provision of the Services and, in any case:
- Account data and purchased Product: while the account remains active and access to the Digital Content continues. Following account closure or the expiry of the Digital Content access period, data will be deleted or, where appropriate, duly blocked (without active processing, except for disclosure to competent courts, tribunals or public authorities) for the applicable statutory limitation periods, after which it will be permanently erased.
- Billing data: for the periods required by tax and commercial law (generally up to 6 years under the Commercial Code, without prejudice to applicable tax retention periods).
- Data for commercial communications: until the User withdraws their consent or objects, at which point sending will cease.
5. Recipients and data disclosures
We do not sell your personal data. The following recipients may access your data to the extent strictly necessary:
- Postal/courier company: for product delivery, name, telephone number and delivery address are shared with Sociedad Estatal Correos y Telégrafos, S.A. (Correos).
- Payment gateway: Stripe Payments Europe, Ltd. (Stripe), as processor/controller of payment data.
- Technology providers: technology and infrastructure providers such as Firebase / Google (authentication), Vercel Inc. (hosting and deployment of the landing page and back office) and Supabase (backend infrastructure), as data processors.
- Conservation organisations: only aggregated and anonymised data, unless the User has given explicit prior consent.
- Public authorities and regulatory bodies, where there is a legal obligation.
Data processing agreements required under Art. 28 GDPR are in place with all data processors.
6. International transfers
Some providers (e.g. Google/Firebase, Vercel, Supabase and, where applicable, the payment gateway) may process data outside the European Economic Area, in particular in the United States. Such transfers are covered by adequacy decisions (including the EU-US Data Privacy Framework where the provider is certified) or by Standard Contractual Clauses approved by the European Commission, together with any applicable additional safeguards.
7. Minors
FAUMA is a service intended exclusively for adults (persons aged 18 or over, or legally emancipated minors) with the capacity to make financial contributions. The service is not aimed at minors and does not include sensitive content.
By making a contribution, the User declares and warrants that they are over 18 years of age. TINEVERSE does not collect data from children under fourteen (14) years of age without verifiable consent from those holding parental responsibility or guardianship; if it becomes aware of having processed data of a child under 14 in these circumstances, it will delete such data as soon as possible.
Given the adult nature of the service and the absence of sensitive content, FAUMA does not currently implement age verification mechanisms. Should a user interface aimed at a younger audience be introduced in the future, the verification and parental consent measures required by law will be implemented.
8. User rights
The User may exercise the rights of access, rectification, erasure, objection, restriction of processing, data portability and the right not to be subject to solely automated individual decisions, as well as withdraw any consent given, by contacting https://www.ovetauki.com/canal/grupo-fucsa, indicating the right being exercised and enclosing, where applicable, proof of identity.
The User has the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es, if they consider that the processing does not comply with applicable law.
9. Security
FAUMA implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk, protecting data against destruction, loss, alteration or unauthorised access. No system is infallible, and absolute security cannot be guaranteed.
10. Cookies
The website uses cookies and similar technologies as described in the Cookies Policy, accessible from the website.
11. Changes to this Privacy Policy
We may update this Policy to reflect regulatory or operational changes. The current version will be published on this site, updating the "last updated" date and, where changes are material, notifying Users through additional means.
12. Contact
For any questions regarding this Policy, please contact info@fauma.com.
