Privacy policy

Privacy Policy Statement

Thank you for your interest in our e-commerce store.

Protecting your privacy and your personal data is very important to us.

Scenit Nutrition S.L. (hereinafter, the “Data Controller” or “we”, or the “Website”) informs you about its Privacy Policy regarding the processing and protection of the personal data of users and customers that may be collected while browsing, purchasing a product, or contracting a service through the Website https://www.scenitnutrition.com.

Our store uses Shopify technology to provide you with e-commerce services. Below, we detail how we process your data in accordance with applicable regulations:

  • GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council.

  • LOPD-GDD: Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights.

  • LSSI-CE: Law 34/2002, on Information Society Services and Electronic Commerce.

Use of the Website implies acceptance of this Privacy Policy as well as the conditions included in the Legal Notice.

Data Controller and Data Protection Officer Contact Information

The data controller for the processing carried out on our website is:

Scenit Nutrition S.L.
Antonio Rodriguez 14 4A
28044 Madrid, Spain
Email: info@scenitnutrition.com
Tax ID (VAT): ESB87919510
Activity: E-commerce of sports nutrition and accessories.

Principles Applied to Data Processing

When processing your personal data, the Data Controller will apply the following principles, in line with the requirements of the European data protection regulation (GDPR):

  • Principle of lawfulness, fairness, and transparency: The Data Controller will always request consent for processing personal data, which may be for one or several specific purposes, about which the Data Controller will inform the User beforehand with complete transparency.

  • Principle of data minimisation: The Data Controller will request only the data strictly necessary for the purpose(s) for which it is requested.

  • Principle of storage limitation: The Data Controller will keep the personal data collected only for as long as strictly necessary for the purpose(s) of processing. The Data Controller will inform the User of the corresponding retention period depending on the purpose.
    In the case of subscriptions, the Data Controller will periodically review the lists and delete those records that have been inactive for a considerable period.

  • Principle of integrity and confidentiality: The personal data collected will be processed in such a way that its security, confidentiality, and integrity are guaranteed.
    The Data Controller takes the necessary precautions to prevent unauthorised access or misuse of users’ data by third parties.

Collection of Personal Data

To browse https://www.scenitnutrition.com, you do not need to provide any personal data.

The situations in which you do provide your personal data are the following:

  • When purchasing a product or contracting a service.

  • When signing up through a subscription form or a newsletter managed by the Data Controller with Klaviyo, Mailchimp and Brevo.

Rights

The Data Controller informs you that, regarding your personal data, you have the right to:

  • Request access to stored data.

  • Request rectification or deletion.

  • Request restriction of processing.

  • Object to processing.

  • Request data portability.

The exercise of these rights is personal and must therefore be exercised directly by the data subject by requesting it directly from the Data Controller. This means that any customer, subscriber, or collaborator who has provided their data at any time may contact Scenit Nutrition S.L. and request information about what data it holds and how it obtained it, request rectification, request portability of their personal data, object to processing, restrict its use, or request deletion of such data from the Data Controller’s files.

To exercise your rights of access, rectification, deletion, portability, and objection, you must send an email to info@scenitnutrition.com along with valid proof in law, such as a photocopy of your National ID (DNI) or equivalent.

You have the right to effective judicial protection and to lodge a complaint with the supervisory authority, in this case the Spanish Data Protection Agency (AEPD), if you consider that the processing of personal data concerning you infringes the Regulation.

Purpose of the Processing of Personal Data

When you connect to the Website to send an email to the Data Controller, subscribe to its newsletter, purchase a product, or make a booking/contracting, you are providing personal information for which Scenit Nutrition S.L. is responsible. This information may include personal data such as your IP address, first and last name, physical address, email address, telephone number, and other information. By providing this information, you consent to your information being collected, used, managed, and stored by — Scenit Nutrition S.L. — only as described in the Legal Notice and in this Privacy Policy.

The personal data and the purpose of processing by the Data Controller differ depending on the information capture system:

  • Product or service contracting forms: The Data Controller requests personal data that may include: first and last name, identity document (tax identification number, foreigner identification number, passport or residence permit), email address, postal address, telephone number, and payment data (payment methods or bank details) for the purpose of maintaining a commercial relationship with the User, shipping orders, providing the contracted services, and issuing invoices and collecting payment for the contracted products or services.

  • Content subscription forms: The Data Controller requests the following personal data: first and last name, email address, telephone number, and website address to manage the subscription list, send newsletters, promotions, and special offers.

The personal data provided to the Data Controller will be located on the servers of The Rocket Science Group LLC d/b/a Mailchimp, headquartered in the USA, Klaviyo and Brevo.

There are other purposes for which the Data Controller processes personal data:

  • To ensure compliance with the conditions set out in the Legal Notice and applicable law. This may include developing tools and algorithms that help this Website ensure the confidentiality of the personal data it collects.

  • To support and improve the services offered by this Website.

  • To analyse user browsing. The Data Controller collects other non-identifying data obtained through the use of cookies downloaded to the User’s computer when browsing the Website, whose characteristics and purpose are detailed in the Cookies Policy.

Security of Personal Data

To protect your personal data, the Data Controller takes all reasonable precautions and follows industry best practices to prevent its loss, misuse, unauthorised access, disclosure, alteration, or destruction.

Your data may be incorporated into a mailing list file, for which Scenit Nutrition S.L. is responsible for management and processing. The security of your data is guaranteed, as Scenit Nutrition S.L. takes all necessary security measures and guarantees that personal data will only be used for the stated purposes.

Content from Other Websites

Pages on this Website may include embedded content (for example, videos, images, articles, etc.). Embedded content from other websites behaves in exactly the same way as if you had visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking code, and monitor your interaction using this code.

Cookies Policy

For this Website to function properly, it needs to use cookies, which are information stored in your web browser.

On the Cookies Policy page you can consult all the information related to the cookie collection policy, the purpose, and the processing of cookies.

Legal Basis for Data Processing

The legal basis for processing your data is: consent.

To contact the Data Controller, subscribe to a newsletter, or post comments on this Website you must accept this Privacy Policy.

Categories of Personal Data

The categories of personal data processed by the Data Controller are:

  • Identification data.

  • No specially protected categories of data are processed.

Retention of Personal Data

The personal data you provide to the Data Controller will be retained until you request its deletion.

Recipients of Personal Data

  • Mailchimp (The Rocket Science Group LLC d/b/a), headquartered in the USA.
    More information at: https://mailchimp.com
    The Rocket Science Group LLC d/b/a processes the data for the purpose of providing email marketing services to the Data Controller.

  • Google Analytics is a web analytics service provided by Google, Inc., a Delaware company whose main office is at 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, United States (“Google”).
    Google Analytics uses “cookies”, which are text files placed on your computer, to help the Data Controller analyse how Users use the Website. The information generated by the cookie about Website use (including the IP address) will be directly transmitted to and stored by Google on servers in the United States.
    More information at: https://analytics.google.com
    Google’s Privacy Policy explains how Google manages privacy regarding the use of cookies and other information.
    You can also see a list of the types of cookies used by Google and its partners, and all information relating to their use of advertising cookies.

  • Hotjar Ltd
    Level 2, St Julian’s Business Centre, 3 Elia Zammit Street, St Julian’s STJ 1000, Malta
    (web analytics services). Data is collected from which pseudonymous user profiles are created. These profiles are used to analyse visitor behaviour in order to improve our offering and tailor it to needs.
    More information at: http://www.hotjar.com/privacy

  • Meta (Facebook Ads) is an online advertising service provided by Meta Platforms, Inc. (formerly known as Facebook, Inc.), headquartered at 1601 Willow Road, Menlo Park, California 94025, United States.
    Facebook Ads uses “cookies” and other similar technologies to collect data on browsing behaviour and user preferences in order to deliver more relevant advertising. This data is processed and stored on servers located in the United States and other countries where Meta has facilities.
    More information at: https://www.facebook.com/policy.php

  • Google (Google Ads) is an online advertising service provided by Google LLC, headquartered at Amphitheatre Parkway, Mountain View, CA 94043, United States. Google Ads uses “cookies” and other similar technologies to collect data on browsing behaviour and preferences in order to deliver more relevant advertising. Data is processed and stored on servers located in the United States and other countries where Google has facilities.
    More information at: https://policies.google.com/privacy

  • Klaviyo, a company headquartered at 125 Summer St., Floor 6, Boston, MA 02110, United States.
    Klaviyo processes data to provide email marketing services and purchase behaviour analytics to the Data Controller. Like other services, Klaviyo uses “cookies” to collect information that enables better personalisation of marketing communications.
    More information at: https://www.klaviyo.com/privacy

  • TikTok is a social media service offered by TikTok Inc., headquartered at 10100 Venice Blvd, Culver City, CA 90232, United States.
    TikTok uses “cookies” and similar technologies to analyse user behaviour on the platform, in order to personalise content and offer targeted advertising. This data may be stored on servers outside the European Union.
    More information at: https://www.tiktok.com/legal/privacy-policy?lang=en

  • Awin AG, headquartered at Eichhornstraße 3, 10785 Berlin, Germany.
    Awin is an affiliate network that uses “cookies” to track sales and other conversions originating from affiliate links. When you click an affiliate link, a cookie is placed on your device that enables Awin and the Data Controller to track the conversion.
    More information at: https://www.awin.com/legal

  • Judge.me is a product review platform offered by Judge.me Pte. Ltd., headquartered at 12 Marina Boulevard, #17-01 Marina Bay Financial Centre Tower 3, Singapore 018982.
    Judge.me collects and processes personal data to facilitate and display product reviews. This data is processed and stored on servers located in different countries, depending on service needs.
    More information at: https://judge.me/privacy

  • Smile.io is a points and rewards programme platform, headquartered at PO Box 33042, Ira Needles, Waterloo, Ontario N2T 2M9, Canada. It includes awarding points for purchases and sending notifications about the status of your points balance.
    More information: https://smile.io/privacy-policy

  • Shopify: Our store is hosted on the Shopify platform. Shopify may process personal data of our customers and visitors, together with data from other Shopify merchants, for the purpose of providing advanced security, fraud prevention, analytics, and marketing features (“Enhanced Services”).
    This means that your information may be shared with Shopify and, where applicable, with third parties located in countries outside the European Economic Area. Shopify guarantees data protection through legal mechanisms such as the Standard Contractual Clauses approved by the European Commission.
    You can find more information in Shopify’s Privacy Policy and exercise your rights of access, rectification, objection, or withdrawal of consent in Shopify’s privacy portal.
    More information: https://www.shopify.com/legal/privacy/app-users

  • Microsoft Clarity is a web behavioral analytics service provided by Microsoft Corporation, headquartered at One Microsoft Way, Redmond, WA 98052, United States. Microsoft Clarity uses cookies and similar technologies — such as heatmaps, session recordings, and click analysis — to collect data on how users interact with the Website, with the aim of improving its usability and performance. Additionally, Microsoft Clarity incorporates artificial intelligence features that analyze behavioral patterns on an aggregated basis. The data collected may be stored and processed on servers located outside the European Economic Area. For more information: https://privacy.microsoft.com/en-us/privacystatement
  • Microsoft Advertising (Bing Ads) is an online advertising service provided by Microsoft Corporation, headquartered at One Microsoft Way, Redmond, WA 98052, United States. Microsoft Advertising uses cookies and similar technologies to collect data about users' browsing behavior and preferences, with the aim of delivering more relevant advertising across the Microsoft network (including Bing and partner sites). Data is processed and stored on servers located in the United States and other countries where Microsoft operates facilities. For more information: https://privacy.microsoft.com/en-us/privacystatement
  • Brevo (formerly Sendinblue) is an email marketing and automation service provided by Sendinblue SAS, headquartered at 7 rue de Madrid, 75008 Paris, France. Brevo processes personal data for the purpose of managing contact lists, sending commercial communications and newsletters, and analyzing recipient behavior. Data may be stored on servers located inside or outside the European Economic Area, with appropriate protection measures guaranteed in all cases. For more information: https://www.brevo.com/legal/privacypolicy/

Website Browsing

When browsing https://www.scenitnutrition.com, non-identifying data may be collected, including IP address, geolocation, a record of how services and sites are used, browsing habits, and other data that cannot be used to identify you.

The Website uses the following third-party analytics services:

  • Google Analytics.

  • Hotjar.

  • Microsoft Clarity.

The Data Controller uses the information obtained to gather statistical data, analyse trends, administer the site, study browsing patterns, and collect demographic information.

The Data Controller is not responsible for the processing of personal data carried out by the websites that you may access through the links contained on the Website.

Accuracy and Truthfulness of Personal Data

You undertake that the data provided to the Data Controller is correct, complete, accurate, and up to date, and you agree to keep it properly updated.

As a User of the Website, you are solely responsible for the truthfulness and correctness of the data sent to the Website, releasing Scenit Nutrition S.L. from any liability in this regard.

Acceptance and Consent

As a User of the Website, you declare that you have been informed of the conditions regarding the protection of personal data, and you accept and consent to the processing of such data by Scenit Nutrition S.L. in the manner and for the purposes indicated in this Privacy Policy.

Revocability

To exercise your rights of access, rectification, deletion, portability, and objection, you must send an email to info@scenitnutrition.com along with valid proof in law, such as a photocopy of your National ID (DNI) or equivalent.

The exercise of these rights does not include any data that Scenit Nutrition S.L. is required to keep for administrative, legal, or security purposes.

Changes to the Privacy Policy

The Data Controller reserves the right to modify this Privacy Policy to adapt it to legislative or case-law developments, as well as industry practices.

These policies will remain in force until they are modified by others duly published.

Cookies Policy

In compliance with Article 22.2 of Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce, the Data Controller informs you that this Website uses cookies, as well as its policy on the collection and processing of cookies.

What are cookies?

A cookie is a file that is downloaded to your computer when you access certain web pages. Cookies allow a website, among other things, to store and retrieve information about your browsing habits and —depending on the information they contain and how you use your device— may be used to recognise you.

Types of cookies used

The website https://www.scenitnutrition.com uses the following types of cookies:

  • Analytics cookies: These are those that, whether processed by the Website or by third parties, allow the number of users to be quantified and thus enable measurement and statistical analysis of how users use the Website. To do this, your browsing on this Website is analysed in order to improve it.

  • Technical cookies: These are cookies processed by the Website that allow registered users to navigate through the restricted area and use its different functions, such as carrying out the purchase process of a Product or Service.

Some cookies are essential for the functioning of the Website, for example, the commenting system or the search engine.

  • Personalisation cookies: These allow users to access the Service with certain general predefined characteristics depending on a series of criteria established by the user, such as the language or the type of browser used to connect to this Website.

Disabling cookies

You can accept, block, or delete cookies installed on your device by configuring your browser options. In the following links you will find instructions to enable or disable cookies in the most common browsers:

Third-party cookies

The Website uses services from Google Analytics, Google Ads, Mailchimp, Hotjar, Meta, Klaviyo, TikTok, Awin AG, Judge.me, and Smile.io, Microsoft Clarity and Microsoft Advertising (Bing Ads) and Brevo, which may install cookies used to obtain statistics and advertising data.

You can obtain more information in our Privacy Policy.

Contact

If you have any questions about this Cookies Policy or would like to make any comments about this Website, you can send an email message to info@scenitnutrition.com.