Last updated: September 2026
Courtesy translation. In case of any discrepancy, the Spanish version prevails.
| Controller | Tulipaneta S.L. |
|---|---|
| Tax ID (NIF) | B21621214 |
| Address | Carrer de Praga, 40, 08024 Barcelona (Horta-Guinardó), Spain |
| hola@gatroigcheesecake.com | |
| Phone | +34 672 145 922 |
When you place an order through the site, we collect the following data:
When you pay, an order number is generated and linked to the data above so that we can locate your order.
The legal basis for this processing is the performance of the pre-contractual and contractual relationship arising from your order (Art. 6.1.b GDPR) and, for the retention of invoices and receipts, compliance with legal obligations (Art. 6.1.c).
| Stripe (Stripe Payments Europe, Ltd., Ireland) | Processes the payment and sends the receipt by email. Acts as controller or processor of the payment data under its own privacy policy (stripe.com/privacy). It may transfer data outside the European Economic Area with the safeguards provided for in the GDPR. |
|---|---|
| Cloudflare, Inc. | Technical provider that runs the function that creates the payment session and assigns the order number. It processes order data only for that purpose, with GDPR safeguards. |
| Google (Google Ireland Limited) | If you choose home delivery, the address you enter is sent to the Google Maps routing service to calculate the distance and delivery cost; its processing is governed by Google’s privacy policy. |
| Resend (Resend, Inc.) | Email delivery provider: sends your order confirmation to your email and the order notice to our shop. |
| Hosting: Webempresa | Website hosting provider. |
| WhatsApp and Instagram (Meta Platforms) | Only if you decide to message us through those channels (for example, to send us the order confirmation or enquiries); their processing is governed by Meta’s privacy policies. |
Home delivery is carried out by our own courier; your delivery details are not shared with any external delivery platform. We do not sell or transfer your data to third parties for advertising purposes.
We keep order data for as long as needed to handle the order and afterwards for the periods required by applicable tax and commercial law (generally up to 6 years for accounting purposes, under the Spanish Commercial Code).
Online payments are made on Stripe’s secure page (checkout.stripe.com), not on this site. Your card details are sent directly to Stripe, which complies with the PCI DSS standard; Tulipaneta S.L. has no access to them. Stripe will send a receipt to the email address you provide. Refunds, where applicable, are paid back by the same payment method used.
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time by contacting Tulipaneta S.L. at the email address given in section 1 or by WhatsApp at +34 672 145 922. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that the processing of your data does not comply with current regulations.
This site is not aimed at persons under 18. If you are a minor, please place the order with the involvement of your parents or legal guardians.