Envío GLS estándar gratis en Península desde 75 €. Ver condiciones
Fórmulas propias y selección dermocosmética

Privacy policy

Last updated: 1 September 2026

1. Data controller

Controller: Farmacia Dra. Teresa Castells Soler, trading as Farmacia Barcelona
Tax identification number (NIF): 46221255H
Address: Passeig de Gràcia 90, 08008 Barcelona, Spain
Privacy email: info@farmaciabarcelona.com
Telephone: +34 607 16 18 55

This policy explains how we process personal data when you visit the store, create or use an account, make a purchase, request a return, contact us, subscribe to communications or interact with our Shopify features.

2. Data we process

Depending on your interaction, we may process:

  • Identification and contact details: name, postal address, telephone number, email address and billing or delivery details.
  • Orders and the contractual relationship: products viewed or purchased, cart, discounts, amount, delivery, invoices, returns, cancellations, refunds, complaints and communications.
  • Account: identifiers, preferences, saved addresses, account activity and technical authentication data. Current Shopify accounts use passwordless access through codes or other available methods; we do not claim to retain security questions or a traditional store password.
  • Payment: chosen method, status, authorisation, amount and limited or masked references. Shopify Payments, PayPal or other providers displayed at checkout collect and process the necessary data directly. Farmacia Barcelona does not receive your full card number when it is processed directly by the provider.
  • Support and returns: enquiry content, reason for the request, photographs provided voluntarily, proof of delivery and any information necessary to resolve it.
  • Usage, device and security: IP address, browser, device, identifiers, logs, page interactions, cookies and signals necessary for security, operation, measurement or personalisation in accordance with your preferences.
  • Marketing: consent, channel, date, source, campaigns, opt-outs and, where you authorise it, interaction with communications or advertising.
  • Voluntary content: reviews or other content you choose to publish, where these features are available.

We do not need health data to sell cosmetics. Please do not send diagnoses, medical records or other health information unless it is strictly necessary to address an enquiry and an appropriate channel is available. If we accidentally receive particularly sensitive data, we will limit its use and apply the required legal basis and safeguards.

3. Where data comes from

We obtain data directly from you; from the store's technical activity and authorised cookies; from Shopify and providers involved in payment, delivery, support, security or marketing; and, where a valid legal basis exists, from the controlled migration of data from the previous PrestaShop store.

Migrated historical data will be used to maintain accounts, orders, accounting obligations, warranties and customer service. It will not be added to marketing solely because it has been migrated: promotional communications will require a valid legal basis and sufficient evidence of consent or the applicable statutory exception.

4. Purposes and legal bases

  • Managing carts, accounts, purchases, payment collection, delivery, cancellations, returns, refunds and related support: performance of a contract or pre-contractual steps, Article 6.1.b of the GDPR.
  • Invoicing, accounting, taxation, consumer protection, product safety, traceability, recalls and responding to authorities: compliance with legal obligations, Article 6.1.c of the GDPR.
  • Answering enquiries not linked to a purchase: pre-contractual steps when you request information with a view to entering into a contract and, in other cases, a legitimate interest in handling and documenting communications, Article 6.1.b or 6.1.f.
  • Preventing fraud, abuse and unauthorised access and protecting the store, customers and systems: a legitimate interest in security and the defence of rights, Article 6.1.f, and legal obligations where applicable.
  • Proportionately analysing and improving operation and experience: a legitimate interest for strictly necessary measurement, or consent where non-essential cookies or technologies are used, Articles 6.1.f and 6.1.a.
  • Sending advertising, newsletters or SMS, or personalising advertisements: consent, Article 6.1.a, unless a statutory exception strictly applies to similar products or services and an easy opt-out is provided. You may withdraw your consent at any time.
  • Publishing a requested review or content: consent or performance of the requested feature, as applicable. You may request removal, without prejudice to retention obligations or the defence of claims.
  • Establishing, exercising or defending legal claims: legitimate interest and compliance with legal obligations, Articles 6.1.f and 6.1.c.

Where processing is based on legitimate interest, we assess its necessity, impact and your reasonable expectations. You may object on grounds relating to your particular situation.

5. Mandatory data

Fields marked as mandatory are necessary to process the purchase, deliver the order, manage payment or respond to a request. If you do not provide them, we may be unable to enter into or perform the contract. Data for marketing and non-essential cookies is voluntary, and refusing it does not prevent you from making a purchase.

6. Recipients and providers

We only disclose data or allow access where there is a valid purpose and legal basis. The main categories are:

  • Platform and hosting: Shopify, which provides the store, accounts, payment, security, communications and other features.
  • Payment: Shopify Payments, PayPal and the method you select at checkout.
  • Logistics: GLS, UPS and other carriers necessary to deliver, track or return orders.
  • Operation and migration: Next-Cart Store Migration, Matrixify, Shopify CLI Connector and controlled developments such as farmacia-barcelona-grow-v2, only as permitted and necessary.
  • Communications and marketing: Shopify Messaging, Shopify tools and providers that we activate with the corresponding consent or legal basis.
  • Advisers and authorities: tax, legal, technical or security advisers; banks; insurers; courts; tax, health, consumer protection or data protection authorities where necessary or required.

We review permissions and agreements with providers. A provider may act as a processor following our instructions, or as an independent controller where it determines its own purposes and means, for example certain payment providers or Shopify for the features described below.

7. Shopify and Network Intelligence

The store is hosted on Shopify. Shopify processes data to provide, protect and improve its services. Shopify Network Intelligence is currently active and may combine certain interactions with other Shopify data to improve products, segmentation and personalisation. For these additional features, Shopify may act as an independent controller in accordance with its terms.

Non-essential cookies, identifiers or advertising uses will be subject to consent where required. You can find out how Shopify uses consumer data and exercise rights concerning its processing at https://privacy.shopify.com/. If you request erasure from Farmacia Barcelona and the request should be granted, we will also process the corresponding requests through Shopify's available tools.

8. International transfers

Although Shopify indicates that the hosting location configured for this store is the European Union, some providers or members of their groups may process data in other countries. Where data is transferred outside the European Economic Area without an adequacy decision, recognised safeguards will be used, such as standard contractual clauses, supplementary measures or another valid mechanism. You may request information on the applicable safeguards through the privacy email address.

9. Retention

We retain data only for as long as necessary for each purpose and to fulfil obligations or defend rights. As general criteria:

  • order, invoice and accounting data is retained throughout the relationship and for the applicable commercial and tax periods; certain accounting documents may be retained for at least six years;
  • delivery, return, conformity, warranty and complaint data is retained for the applicable liability and limitation periods;
  • enquiries are retained while being handled and for a proportionate period for follow-up or defence;
  • marketing data is used until you withdraw consent or object; we will retain evidence of consent and a minimal suppression list for as long as necessary to respect the opt-out;
  • security and fraud logs are retained for limited periods depending on risk, investigations and provider obligations.

At the end of the period, data is deleted, anonymised or blocked where the law requires retention without ordinary use.

10. Your rights

You may request:

  • access to your data;
  • rectification of inaccurate data;
  • erasure where appropriate;
  • restriction of processing;
  • objection to processing based on legitimate interest and, at any time, to direct marketing;
  • data portability where applicable;
  • withdrawal of consent without affecting the lawfulness of prior processing.

Send your request to info@farmaciabarcelona.com or to the postal address provided. We may request proportionate information to verify your identity. We will respond within the statutory period, normally one month, which may be extended in the cases provided for by the GDPR.

You may also lodge a complaint with the Spanish Data Protection Agency: https://www.aepd.es/, or with the competent supervisory authority in your place of residence.

11. Automated decisions

Payment and security providers may generate automated risk signals. If a decision based solely on automated processing produces legal effects or similarly significant effects, we will apply the required safeguards, including the possibility of requesting human intervention, expressing your point of view and contesting the decision where applicable.

12. Cookies and preferences

We use cookies necessary for the store, cart, payment and security to function. Non-essential analytics, personalisation or advertising cookies will be activated according to preferences and applicable law. You can accept, reject or change your choices through the store's banner or privacy panel. Withdrawing consent must be as easy as giving it.

13. Minors

The store is not intended for minors to make purchases without the necessary legal capacity or authorisation. We do not knowingly collect minors' data for marketing without a valid legal basis. If you believe a minor has improperly provided us with data, contact us so that we can review it and, where appropriate, delete it.

14. Security

We apply reasonable technical and organisational measures and require safeguards from providers. No system is completely infallible. Do not email passwords, access codes or full card numbers. If you notice an incident, contact us immediately.

15. Changes to this policy

We will update this policy when practices, providers, features or rules change. We will publish the update date and, where a change is substantial or the law requires it, communicate it through an appropriate channel. We will review this policy particularly when installing apps, pixels or new marketing channels, or activating markets.

16. Contact

Farmacia Barcelona - Farmacia Dra. Teresa Castells Soler
Passeig de Gràcia 90, 08008 Barcelona, Spain
Email: info@farmaciabarcelona.com
Telephone: +34 607 16 18 55