Privacy Policy

Last updated: 11/06/2026

1. Data Controller

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), we inform you that the Data Controller responsible for processing your personal data is:

Company name: IJS SLAPE, S.L.
Tax ID (CIF): B67012187
Registered address: Carrer Moreneta, 30, 08253 Sant Salvador de Guardiola, Barcelona, Spain
Phone: 938 25 25 08
Email: rafa@ijs.io
Website: https://auping.es

2. Personal Data We Collect

2.1 Data you provide directly

Full name
Email address
Phone number
Message or enquiry submitted via the contact form

2.2 Automatically collected data (browsing)

IP address and approximate geolocation
Browser type and operating system
Pages visited, time spent and actions taken
Browsing behaviour and interaction with the website (heatmaps, session recordings)
Cookies and similar technologies (see our Cookie Policy)

3. Purposes of Processing and Legal Basis

3.1 Handling enquiries and information requests

Purpose: To respond to messages submitted via the website contact forms and to handle product and store enquiries.
Legal basis: Legitimate interest (Art. 6.1.f GDPR) and execution of pre-contractual measures (Art. 6.1.b GDPR).
Retention period: For as long as necessary to handle the request and, thereafter, for the applicable statutory limitation periods (generally 3 years).

3.2 Statistical analysis and website improvement

Purpose: To analyse user behaviour in order to improve the browsing experience, website content and the performance of our marketing activities.
Legal basis: Consent of the data subject (Art. 6.1.a GDPR) obtained via the cookie management panel.
Tools used: Google Analytics, Hotjar, Google Tag Manager, Google Search Console. See our Cookie Policy for further information.
Retention period: As determined by each tool under its own policies, with a maximum of 26 months for Google Analytics.

3.3 Advertising and remarketing

Purpose: To display personalised ads to users who have previously visited our website, via Google Ads and Meta (Facebook and Instagram).
Legal basis: Consent of the data subject (Art. 6.1.a GDPR) obtained via the cookie management panel.
Retention period: As determined by each advertising platform under its own policies.

4. Recipients and International Transfers

Your personal data will not be shared with third parties except as required by law or where necessary for the provision of the service. The data processors we work with are listed below:

Hostinger web hosting and databases.
Google LLC Google Analytics, Google Tag Manager, Google Search Console and Google Ads (web analytics and advertising).
Meta Platforms Ireland Ltd. Meta Pixel for advertising campaigns on Facebook and Instagram.
Hotjar Ltd. user behaviour analysis (heatmaps and session recordings).

International transfers: Some of the providers listed above (Google, Meta, Hotjar) may be located outside the European Economic Area (EEA). These transfers are carried out with the appropriate safeguards required under the GDPR, such as Standard Contractual Clauses approved by the European Commission or adherence to the EU-U.S. Data Privacy Framework.

5. Rights of Data Subjects

In accordance with the GDPR and LOPDGDD, you may exercise the following rights at any time:

Access: to obtain confirmation of whether we process your data and, if so, to access it.
Rectification: to request the correction of inaccurate or incomplete data.
Erasure (‘right to be forgotten’): to request the deletion of your data when it is no longer necessary for the purpose for which it was collected.
Restriction of processing: to request that the processing of your data be restricted in certain circumstances.
Portability: to receive your data in a structured, commonly used format and to transmit it to another controller.
Objection: to object to the processing of your data, particularly in relation to commercial communications.
Not to be subject to automated decisions that produce significant legal effects.

To exercise any of these rights, please write to us at Carrer Moreneta, 30, 08253 Sant Salvador de Guardiola, Barcelona or send an email to rafa@ijs.io, enclosing a copy of your identity document.

If you believe that the processing of your data does not comply with applicable regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

6. Cookies and Similar Technologies

Our website uses first-party and third-party cookies. For detailed information about the types of cookies used, their purposes and how to manage your consent, please consult our Cookie Policy.

7. Security Measures

We have implemented the necessary technical and organisational measures to ensure the security and integrity of personal data and to prevent its alteration, loss, processing or unauthorised access. These include, among others, encrypted communications (HTTPS/TLS) and access controls to our systems.

8. Minors

The services offered through this website are not intended for children under the age of 14. If a minor has provided us with their data without the consent of their parents or legal guardians, please notify us at rafa@ijs.io so that we can delete it immediately.

9. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy to reflect changes in legislation or business practice. Any changes will take effect upon publication on the website. We recommend that you review this document periodically.

10. Applicable Law and Jurisdiction

This Privacy Policy is governed by Spanish and European data protection law. Any disputes shall be submitted to the Courts and Tribunals of Barcelona, unless applicable regulations provide otherwise.ough an automated spam detection service.