1. Data Controller

In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and the applicable data protection legislation, we inform you that the personal data provided through this website will be processed by:

Company Name: SHODWELL SL
Tax ID (NIF): B67511451
Registered Address: C/Jadraque, 9, Ground Floor, Door 3, 08032 Barcelona, Spain
Commercial Registry Details: Registered with the Commercial Registry of Barcelona (Registro Mercantil de Barcelona), Volume 47092, Page 159, Section 8, Sheet B-540845
Email: info@gardentranquil.com
Website: https://gardentranquil.com

Data Protection Officer (DPO): You may contact our Data Protection Officer at gerard.p@twistedmyths.net for any questions relating to the processing of your personal data.

2. Purpose of Data Processing

We process your personal data for the following purposes:

To manage the purchase, payment, shipping and delivery of products ordered through our online store.
To respond to enquiries, requests and communications submitted through our contact forms.
To create and manage customer accounts.
To send newsletters and marketing communications when you have given your consent.
To improve the operation, security and functionality of our website.
To manage cookies and similar technologies in accordance with our Cookie Policy.
To comply with our legal, tax and administrative obligations.

3. Legal Basis for Processing

The legal basis for processing your personal data is:

The performance of a contract when you purchase products from our website.
Your consent when you subscribe to newsletters, complete contact forms or agree to receive marketing communications.
Compliance with legal obligations.
Our legitimate interests where permitted by applicable law.

4. Data Retention

Personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations.

Purchase and invoicing information will be retained for 5 years in compliance with tax legislation, and for 10 years in the case of accounting/fiscal documentation, in accordance with Organic Law 7/2012.
Marketing data will be retained until you withdraw your consent or unsubscribe from our communications.
Contact form and customer account data will be retained while your consent remains valid, unless a longer legal obligation applies.
Cookie-related data will be retained while your consent remains valid.

5. Categories of Personal Data

Depending on the services you use, we may process the following information:

First and last name
Postal address
Email address
Telephone number
Signature
Billing details / financial or insurance data
Order information
IP address
Technical browsing information

We do not intentionally collect or process special categories of personal data.

6. Recipients of Personal Data

Your personal data may be shared with:

Tax Authorities, banks, savings banks and public administrations with jurisdiction, where necessary to comply with tax and fiscal obligations applicable to the sale of products. Legal basis for this transfer: compliance with a legal obligation.
Shipping and courier companies, for order delivery.
Payment service providers and financial institutions, for payment processing.
Technology providers hosting or maintaining our website and online store.
Public authorities where disclosure is required by law.

We do not sell or rent your personal data to third parties.

7. International Data Transfers

Where any of our service providers are located outside the European Economic Area (EEA), we will ensure that appropriate safeguards are implemented in accordance with the GDPR, including Standard Contractual Clauses or other approved legal mechanisms.

8. Specific Processing Activities

Online Orders

Purpose: To process purchases, payments, shipments and customer service.
Legal Basis: Performance of a contract and compliance with a legal obligation.
Retention: 5 years (tax obligations) / 10 years (accounting documentation, Organic Law 7/2012).
Data Processed: First and last name, postal address, email address, signature, billing/financial or insurance data.
Recipients: Tax Authorities, banks, savings banks and public administrations, where necessary for tax compliance purposes.

Contact Forms

Purpose: To respond to enquiries and customer requests.
Legal Basis: User consent.
Retention: While consent remains valid.
Data Processed: First and last name, email address, IP address.

Customer Accounts

Purpose: To manage registered customer accounts and purchase history.
Legal Basis: User consent.
Retention: While consent remains valid.
Data Processed: First and last name, email address.

Purpose: To send commercial communications, promotions and product updates.
Legal Basis: User consent.
Retention: Until consent is withdrawn.
Data Processed: First and last name, email address.

Cookies

Purpose: To ensure the proper operation of the website, improve user experience and analyse website usage.
Legal Basis: User consent, except for strictly necessary technical cookies.
Retention: According to the duration established for each cookie in our Cookie Policy.
Data Processed: Email address, IP address.

9. Your Rights

Under the GDPR, you have the right to:

Access your personal data and confirm whether or not we are processing it.
Rectify inaccurate or incomplete data.
Erasure (“right to be forgotten”): request the deletion of your data, except where retention is required by law or for the exercise or defence of legal claims.
Restrict the processing of your personal data in certain circumstances.
Object to processing based on legitimate interest or for direct marketing purposes.
Portability: receive your data in a structured, commonly used, machine-readable format.
Withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to its withdrawal.
Not be subject to decisions based solely on automated processing, including profiling, that produce legal effects or significantly affect you, where legally applicable.

The exercise of these rights is free of charge.

10. Exercising Your Rights

To exercise any of your rights, please contact us at:

SHODWELL SL C/Jadraque, 9, Ground Floor, Door 3 08032 Barcelona, Spain Email: info@gardentranquil.com

Your request should include:

Full name and proof of identity (e.g. ID document); if identity is uncertain, we may request additional information.
The right you wish to exercise. If no specific processing activity is indicated, we will respond in relation to all processing activities affecting your data.
A description of your request.
Contact details for notifications.
Documentation proving representation if acting on behalf of another person.

Requests submitted by phone will not be answered by phone; you will be asked to submit your request in writing, and we will indicate how and where to send it.

11. Security Measures

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, in accordance with the level of risk associated with each processing activity described in this policy.

Our website uses SSL encryption to ensure secure, authenticated communication between your browser and our servers.

12. Marketing Communications

We will only send promotional emails or commercial communications where you have expressly consented or where otherwise permitted by applicable law (Article 21 of the Spanish Law 34/2002, LSSI-CE).

You may unsubscribe at any time, free of charge, using the unsubscribe link included in every marketing email or by contacting us directly.

13. Social Media

GardenTranquil maintains an official profile on Instagram to provide information about products, services, promotions and company news.

By following or joining our page, you provide your consent to the processing of the personal data published on your profile for this purpose.

Users interacting with our social media pages are subject to the privacy policies of the respective platforms, which you can access and configure at any time.

We reserve the right to remove comments or content that are unlawful, offensive, defamatory, discriminatory, or that infringe intellectual property rights, image rights or the law.

Participation in contests or promotional campaigns organised through social media will be governed by the specific terms published for each promotion, in compliance with the LSSI-CE.

We will not use personal data obtained through social media platforms for direct marketing outside those platforms without the appropriate legal basis or your consent.

Images published on our social media page will not be stored in any processing system by SHODWELL SL, although they will remain on the social media platform itself.

14. Cookies

This website uses technical, analytical, preference and marketing cookies.

Detailed information about the cookies used, their purposes and how to manage your preferences is available in our [Cookie Policy].

15. Complaints

If you believe that the processing of your personal data does not comply with applicable data protection legislation, you have the right to lodge a complaint with the competent supervisory authority. If you reside in Spain, this is the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) — www.aepd.es. If you reside in another country, you may contact the supervisory authority in your country of residence, place of work, or the place where the alleged infringement occurred.

16. Changes to this Privacy Policy

SHODWELL SL reserves the right to modify this Privacy Policy at any time to reflect legislative changes, regulatory requirements or changes in our business activities.

The version published on this website will always be the current version.

Last updated: July 2026

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact:

SHODWELL SL Tax ID (NIF): B67511451 Address: C/Jadraque, 9, Ground Floor, Door 3, 08032 Barcelona, Spain Email: info@gardentranquil.com Telephone: +34 602 69 25 86

Privacy Policy