The controller responsible for personal data processed through terraintop.com is LA MANGA 3D, S.L. Unipersonal, tax identification number (NIF) B21782735, with its registered address at Gran V\u00eda de La Manga, km 4, Galer\u00eda El Flamenco, local 22, 30380 San Javier, Murcia, Spain.<\/p>\r\n
For privacy enquiries or to exercise your rights, email info@terraintop.com. For questions about a purchase, you can also use info@terraintop.com.<\/p>\r\n
When you make a purchase, we process the identification, contact, billing, delivery and order information needed to handle it, manage payment, prepare and dispatch the products, issue the relevant documentation, and deal with returns, guarantees and complaints. The legal bases are performance of the contract and compliance with applicable legal obligations.<\/p>\r\n
If you leave a review or comment, we process the name you provide, your email address, the content and rating where applicable, and the technical data necessary to moderate and protect that feature. The content and author’s name are displayed publicly once published; your email address is not published as part of the comment. Publication is based on the request and consent you express by submitting the content for that purpose; moderation and abuse prevention are based on our legitimate interest in protecting the website. Do not include other people’s personal data that should not be made public. You may request removal of your own data through the contact channels in this policy, without prejudice to any retention necessary to meet obligations or deal with claims.<\/p>\r\n
If you create an account, we process the data needed to manage access and the features you request. The legal basis is provision of that service. You may request closure of your account; purchase documentation will be retained where required by law or needed to address liabilities.<\/p>\r\n
If you contact us by email, form or another contact channel, we use the data you provide to reply and handle your enquiry. The legal basis is taking steps before entering into a contract when you ask about a purchase, performance of the contract when you are already a customer, or our legitimate interest in handling other communications addressed to the company.<\/p>\r\n
We may process technical data and access logs needed to protect the website, prevent abuse and maintain the service. This processing is based on our legitimate interest in preserving security, with measures proportionate to that purpose.<\/p>\r\n
Analytics or advertising processing that requires consent will only take place in accordance with your choices in the cookie panel. Its scope and providers are described in the cookie policy<\/a>. We do not currently send direct marketing campaigns by email or WhatsApp. We will not treat an enquiry or order as general authorisation to send promotional campaigns. If we offer a marketing subscription in future, we will first provide the relevant information and a straightforward way to withdraw consent or unsubscribe.<\/p>\r\n Fields marked as mandatory are necessary to provide the relevant function. If you do not supply them, we may be unable to process the order or request. Do not send identity documents, health data or other sensitive information unless we have requested it for a justified reason.<\/p>\r\n To manage orders, we disclose the necessary data to the selected payment services and the carrier responsible for delivery. Hosting, email, support and management providers may process data on the company’s behalf where their involvement is necessary. We will also provide information to public authorities, courts and other bodies where legally required.<\/p>\r\n Some payment entities act as independent controllers in relation to their own security, fraud prevention or financing obligations. Their privacy information will be available when you use each service.<\/p>\r\n We use WooPayments, supported by Stripe infrastructure, and PayPal for the enabled payment options. Depending on the method selected, Klarna, Amazon Pay, Apple Pay or Google Pay may also be involved. Order information and the data needed to process and authenticate the transaction and prevent fraud are disclosed. Each provider explains its processing and, where applicable, financing decisions. TerrainTop does not decide whether those entities grant credit.<\/p>\r\n Specific fraud prevention and automated-access protection services are also involved at checkout. Sift, provided by Sift Science, Inc., has been identified as integrated through the payment service. It may process IP addresses, session identifiers, device and browser characteristics, and usage and transaction information to assess fraud risks. Sift’s information is available in its service privacy notice<\/a>. Stripe’s payment component uses hCaptcha, provided by Intuition Machines, Inc., to protect against bots and abuse; you can consult its privacy policy<\/a>. These payment security activities are distinct from TerrainTop’s optional analytics and advertising. You may contact us to review a payment issue; payment or financing providers’ own decisions are also governed by their privacy information.<\/p>\r\n Google provides the Analytics services and advertising tools integrated into the website. Measurement may involve processing online identifiers, pages visited, actions, referral information and device information; advertising may involve interactions and conversions. This optional processing must respect your consent choices as described in the cookie policy. Search Console and PageSpeed Insights are used to administer and assess the website; connecting them does not in itself mean that analytics cookies are installed on a visitor’s device.<\/p>\r\n Jetpack Search is currently disabled. When enabled, that search service uses Automattic\/WordPress.com services: it sends search terms and filters to return results and may process technical and usage data associated with that function. Wordfence, provided by Defiant, helps protect the website against malicious access and abuse. Its configuration uses remote IP geolocation lookups and participation in its security network. These features may disclose IP addresses and technical data associated with security incidents to Defiant to detect and prevent attacks. They do not authorise advertising. The Joinchat button lets you start a WhatsApp conversation; if you use it, WhatsApp\/Meta processes data from that channel under its privacy information. We also manage messages received at our Gmail address, a Google service. When an avatar is displayed through Gravatar, an Automattic service, an identifier derived from the email address is communicated and the browser connects to that service to retrieve the image, with the technical data inherent in that connection. Its information is available at https:\/\/automattic.com\/privacy-notice\/.<\/p>\r\n Webempresa provides website hosting and the associated maintenance services that apply. Its data processing documentation is available at https:\/\/www.webempresa.com\/condiciones-servicios-contratados-webempresa.html. Administrative, accounting and tax management providers, and companies involved in delivery, may access the data necessary for their function. Not all providers are involved in every visit or purchase. You may request further information about the recipients of your data at info@terraintop.com.<\/p>\r\n Provider information: Stripe<\/a>, PayPal<\/a>, Automattic and Woo<\/a>, Jetpack Search<\/a>, Google<\/a>, WhatsApp<\/a> and Wordfence<\/a>. Information specific to an additional payment method is provided in its interface when selected.<\/p>\r\n Some of the services above belong to international groups and may process data from the United States or other countries outside the European Economic Area. Their privacy documents explain the destinations, entities and safeguards for each service. Transfers subject to the GDPR must rely on an applicable adequacy decision or appropriate safeguards, such as the European Commission’s standard contractual clauses and any necessary supplementary measures.<\/p>\r\n You can consult the mechanisms described by Google<\/a>, Stripe<\/a> and Automattic<\/a>, the standard contractual clauses published by Defiant<\/a>, and the transfer sections of the PayPal and WhatsApp policies linked above. You may request information or a copy of the safeguards applicable to your data by emailing info@terraintop.com.<\/p>\r\n We retain order data while managing the order and subsequently for the statutory retention periods and the periods needed to address liabilities. Accounting documentation and supporting records will generally be retained for six years from the last accounting entry, without prejudice to longer periods required by law.<\/p>\r\n Account data will be retained while you maintain the service and, after closure, only where necessary for legal obligations or liabilities. Enquiries without a purchase will be retained as long as needed to resolve them and subsequently only where liabilities arising from that communication must be addressed. Technical and security logs will be retained for the time necessary to detect, investigate and resolve incidents; they will not be retained indefinitely for that purpose. If an incident occurs, records necessary for its investigation and for the establishment, exercise or defence of claims may be preserved. Wordfence’s security traffic log is configured with a maximum age of 30 days and a limit of 2,000 records. This limit does not cover other providers’ logs or backups; records needed to investigate an incident or address liabilities may be retained while that need persists. Cookie durations are stated in the cookie policy.<\/p>\r\n Where erasure is appropriate, data will be blocked for the legally applicable periods and then deleted. The retention period for an invoice does not mean that all browsing or account data is retained for the same period.<\/p>\r\n You may request access, rectification, erasure, objection, restriction of processing and portability where applicable. You may also withdraw consent without affecting the lawfulness of processing carried out before its withdrawal.<\/p>\r\n We will handle your request without undue delay and, as a general rule, within one month of receiving it. Where justified by the complexity or number of requests, this period may be extended by up to two further months; we will inform you of the extension and its reasons within the first month.<\/p>\r\nRequired data<\/h2>\r\n
Recipients and service providers<\/h2>\r\n
International transfers<\/h2>\r\n
Retention<\/h2>\r\n
Your rights<\/h2>\r\n