This policy explains how we collect, use, and protect your personal data when you visit our site, buy from us, or join our list. We are the data controller responsible for your data. We keep it as plain as we can.
Whether you are passing through for the first time or you have been with us for years, your trust matters to us, and we work to keep it. That means holding your personal data carefully, using it only for the reasons we collected it, and never selling it to anyone.
A shop like ours needs a certain amount of information to work. Without it we could not get your order to you, answer your questions, or give you a site that is easy to use. We are also aware that the moment we collect that information, we become responsible for it.
We take that responsibility seriously. Below you will find a full account of the personal data we may collect and a plain explanation of how it is used. After that, we set out the rights you have and the tools you can use to see, change, or delete your personal information whenever you want.
Who we are
The/2nd is a company registered in Spain, with its registered address at Valencia. In this policy, “we”, “us”, and “our” refer to that company, trading as the/2nd. We are the controller of the personal data described below. We sell internationally. Where the law in your country gives you stronger rights than this policy describes, those rights apply.
The data we collect
Information you give us. When you place an order, create an account, join our list, enter a giveaway, leave a review, or contact us, we collect details such as your name, email address, postal address, phone number, and order history. Payment is handled by our payment provider. We receive confirmation that a payment was made, but we do not store full card numbers.
Information we collect automatically. When you use the site we collect device and usage data such as your IP address, browser type, the pages you view, and the links that brought you here. Most of this is collected through cookies and similar technologies, described below.
Information from others. We may receive data from our payment and fraud-prevention providers, our shipping carriers, and, if you interact with our adverts or social pages, from advertising and analytics platforms.
How we use your data, and our legal basis
We only use your data where the law allows. The main cases are:
/ To process and deliver your orders, handle returns, and provide support. Legal basis: performance of our contract with you.
/ To manage your account, if you choose to create one. Legal basis: performance of a contract.
/ To send you our newsletter and offers, where you have asked to receive them. Legal basis: your consent, which you can withdraw at any time.
/ To run analytics, non-essential cookies, and advertising. Legal basis: your consent.
/ To keep the site secure, prevent fraud, and improve our products and service. Legal basis: our
legitimate interests in running a safe and effective business.
/ To meet our accounting, tax, and other legal duties. Legal basis: compliance with a legal obligation.
Cookies and tracking
We use essential cookies to make the site work. With your consent, we also use analytics and advertising cookies to understand how the site is used and to reach the right audiences. Where required, we ask for your consent through a banner before setting any non-essential cookies, and you can change your choices at any time through the cookie settings on the site or through your browser.
Who we share it with
We do not sell your personal data. We share it only with:
/ Service providers who act on our instructions, including payment processing, shipping and logistics, email and marketing, website hosting, IT and security, analytics, and advertising.
/ Professional advisors such as accountants and lawyers, where needed.
/ Authorities or other parties, where we are required to by law or where it is needed to protect our rights.
/ A buyer or successor, if we are ever involved in a sale, merger, or restructuring of the business.
Every provider is bound by a contract to protect your data and to use it only for the purpose we set.
International transfers
We are based in the European Union, and your data is mainly processed within the European Economic Area. Some of our providers operate outside it. When your data is transferred outside the EEA, we rely on an adequacy decision, on Standard Contractual Clauses approved by the European Commission, or
on another lawful safeguard such as the EU to US Data Privacy Framework. You can ask us for a copy of the safeguards we use.
How long we keep it
We keep your data only as long as we need it for the purposes above. Order and financial records are kept for the periods required by Spanish commercial and tax law. Marketing data is kept until you unsubscribe or ask us to stop. When we no longer need your data, we delete it or make it anonymous.
Your rights
Wherever you are, you can ask us to:
/ Access the data we hold about you.
/ Correct it if it is wrong or incomplete.
/ Delete it, where there is no overriding reason for us to keep it.
/ Restrict or object to how we use it.
/ Receive it in a portable format, or have it sent to another provider.
/ Withdraw your consent at any time, where we rely on consent.
We do not make decisions about you using only automated processing that produces legal or similarly significant effects. To exercise any right, write to us at hello@the2nd.net. We respondwithin the time the law allows, usually within one month. If you are in the European Economic Area, you can also complain to your local data protection authority. In Spain that is the Agencia Española de Protección de Datos (aepd.es).
Regional rights
United Kingdom. If you are in the UK, the UK GDPR gives you the same core rights set out above, and you can complain to the Information Commissioner’s Office (ico.org.uk).
California. If you are a California resident, you have the right to know what we collect, to access and delete it, to correct it, and to opt out of the sale or sharing of personal information. We do not sell your personal information. You can exercise these rights, or use an authorised agent, by contacting us, and we will not treat you differently for doing so.
Other regions. Where your local law gives you privacy rights, we honour them. Contact us and we will help.
Children
Our site and products are not directed to children under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will remove it.
How we protect your data
We use appropriate technical and organisational measures to keep your data safe. No method of storage or transmission is completely secure, but we work to protect your data, and where the law requires it we will notify you and the relevant authority of a serious breach.
Other sites
Our site may link to other websites. We are not responsible for their content or their privacy practices, so please read their policies before sharing your data with them.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed. If we make a significant change, we will give clear notice on the site or by email.
Contact us
For any question about this policy or your data, reach us at: hello@the2nd.net

