TESKIS
Privacy Policy
How Teskis (FLOFUM, S.L.) collects, uses and protects your personal data: lawful bases, recipients, retention periods and your GDPR rights.
Last updated: 10 September 2026
This policy explains what personal data Teskis collects when you email us a list of gardening tools, take a quote from us or browse this site, why we hold it, how long we keep it, and what you can ask us to do with it. It is written to meet the requirements of the General Data Protection Regulation (Regulation (EU) 2016/679), Spanish Organic Law 3/2018 (LOPDGDD) and the Spanish information society services law (Ley 34/2002, LSSI-CE).
Who is responsible for your data
The data controller is:
| Company | FLOFUM, S.L., trading as Teskis |
|---|---|
| Registered address | Calle Parcerisa 13, Local 1, 08014 Barcelona, Spain |
| CIF | B75621250 |
| support@teskis.com | |
| Website | https://teskis.com |
Contact is in writing only — the enquiry form or support@teskis.com. We do not operate a telephone line, so we hold no call recordings or caller records. Messages are answered Monday to Saturday, 9–6 CET.
What personal data we collect
- Order details — the items on the list you send us, quantities, the prices we quote, order number, order date and dispatch date.
- Delivery details — the name and postal address the parcel is going to, and any delivery instructions you include in your email.
- Email address — the address you write to us from, used for the quote, order confirmation, dispatch notice, returns correspondence and, only if you ask for them, product emails.
- Payment status — whether the cash for an order has been collected at the door, is still due, or has been refunded. Payment is handed to the courier in cash, so no card details are taken at any point and we hold none.
- Correspondence — the emails you send us and our replies, including photographs you attach to a returns or damage claim.
- Site analytics and technical data — pages viewed, referring page, approximate location derived from IP address, device and browser type, and cookie identifiers.
We do not ask for and do not want special category data (health, beliefs, biometrics). Please do not include such information in messages to us.
Why we use it, and the lawful basis for each purpose
| Purpose | Data used | Lawful basis |
|---|---|---|
| Reading your list, quoting the job, then fulfilling and dispatching the order and answering questions about it | Order details, delivery details, email, payment status | Performance of a contract, and steps taken at your request before entering into one — Article 6(1)(b) |
| Handling returns, refunds and faulty or damaged items | Order details, delivery details, email, correspondence, payment status | Performance of a contract — Article 6(1)(b), and legal obligation — Article 6(1)(c), for statutory conformity rights |
| Issuing invoices and keeping accounting and tax records | Order details, billing name and address, payment status | Legal obligation — Article 6(1)(c) |
| Preventing and investigating fraudulent or abusive orders | Order details, delivery details, payment status, technical data | Legitimate interest — Article 6(1)(f), in protecting the business against loss on parcels sent out before any money is collected |
| Keeping the site secure and working, and diagnosing errors | Technical data, server logs | Legitimate interest — Article 6(1)(f), in a functioning, secure site |
| Measuring how the site is used so we can improve pages and product information | Site analytics, cookie identifiers | Consent — Article 6(1)(a), given through the cookie banner |
| Sending product and offer emails | Email address, purchase history | Consent — Article 6(1)(a), withdrawable at any time |
Where we rely on legitimate interest, we have weighed that interest against your rights and use the least amount of data that achieves the purpose. You can object to any of it (see Your rights below).
Cookies and analytics
This site has no basket, no checkout and no accounts, so nothing is stored to hold an order or to keep you signed in. The strictly necessary cookies that do remain record the choice you make in the cookie banner and help keep the site secure; they cannot be switched off. Analytics cookies only load after you accept them in the banner, and you can change or withdraw that choice at any time through the cookie settings link in the site footer. Refusing analytics does not affect how you order, what we quote or any of our terms. Analytics data is used in aggregate; we do not use it to build advertising profiles or sell audience data.
Who we share your data with
- Couriers and postal operators — they receive the recipient’s name, delivery address, email for tracking notifications and the cash amount to collect at the door. Delivery is free on every order, so the only sum the driver collects is the figure we quoted you.
- Our email service provider — it sends order, dispatch and returns emails on our behalf, and marketing emails where you have consented.
- Our hosting and IT providers — they host this site and the systems where we keep our email and order records, under contract.
- Our accountants and tax advisers — for invoicing, bookkeeping and statutory filings.
- Public authorities — the Spanish tax agency, courts or police, where a law or a valid legal request requires disclosure.
Each provider acts as our processor under a written Article 28 contract, may only use the data to perform the service, and may not use it for their own purposes. We do not sell personal data and we do not share it with data brokers.
International transfers
We prefer suppliers inside the European Economic Area. Some providers — typically analytics and email tools — process data in countries outside the EEA, including the United States. Where that happens, the transfer is covered by a European Commission adequacy decision, or by the Standard Contractual Clauses adopted under Article 46(2)(c) together with technical measures such as encryption in transit and at rest. You can email support@teskis.com for a copy of the safeguards that apply to a specific transfer.
How long we keep it
| Record | Retention period |
|---|---|
| Invoices and accounting records | 6 years from the end of the financial year (Article 30, Spanish Código de Comercio); tax records are also held for the 4-year limitation period in the Ley General Tributaria |
| Order and delivery records | 3 years from delivery, matching the statutory guarantee of conformity on goods sold in Spain |
| Returns, refund and damage claims | 3 years from the close of the claim |
| Customer service emails not tied to an order | 2 years from the last message |
| Marketing consent and unsubscribe records | Until you withdraw consent; we then keep a minimal suppression record so you are not emailed again |
| Analytics data and cookies | No more than 14 months, then deleted or aggregated beyond identification |
| Server and security logs | 12 months |
When a period ends, data is deleted or irreversibly anonymised. Where a claim, dispute or investigation is live, the relevant records are kept blocked until it is resolved.
How we protect your data
The site runs over HTTPS, access to quote and order records is limited to the people who price, fulfil and support orders, staff accounts use individual credentials with two-factor authentication, and backups are encrypted. No card details reach us at any stage, because the courier collects the money in cash at the door. No system is immune to incident; if a breach is likely to put your rights at risk we will notify the supervisory authority within 72 hours and tell you directly where the regulation requires it.
Your rights
- Access — a copy of the personal data we hold about you and an explanation of how it is used.
- Rectification — correction of anything inaccurate or incomplete, such as a mistyped delivery address.
- Erasure — deletion of your data where we no longer need it, though invoices we are legally obliged to keep cannot be erased before their retention period ends.
- Restriction — a pause on processing while an accuracy dispute or objection is examined.
- Portability — the data you gave us for your order, in a structured, machine-readable format, sent to you or directly to another controller where technically feasible.
- Objection — to any processing based on legitimate interest, and at any time and without reason to direct marketing.
- Withdrawal of consent — for analytics cookies and marketing emails, at any time, without affecting processing carried out before the withdrawal.
- Not to be subject to automated decisions — we make no decisions about you by automated means alone and carry out no profiling that produces legal or similarly significant effects.
How to exercise them
Email support@teskis.com with “Data request” in the subject line and tell us which right you want to use. Write from the address you used to order, or give us the order number, so we can match the request to the right records; if we still cannot identify you we may ask for further information, and we will not ask for more than we need. We reply within one month. If a request is complex we may extend that by up to two further months and will tell you why within the first month. Requests are free unless they are manifestly unfounded or excessive.
Requests about a specific order or return are often quicker to resolve alongside our returns process, where the 30-day return window applies to used and unused items provided they can be inspected.
Complaining to a supervisory authority
If you think we have handled your data incorrectly, please tell us first — most issues are a records problem we can fix the same week. You also have the right to complain to the Spanish data protection authority:
- Agencia Española de Protección de Datos (AEPD)
- C/ Jorge Juan 6, 28001 Madrid, Spain
- www.aepd.es
If you live in another EU or EEA country, you may instead complain to the supervisory authority where you live or work, or where the alleged infringement took place.
Children
Teskis sells gardening tools to adults. The site is not directed at children, and we do not knowingly collect data from anyone under 14, the age of digital consent set by Spanish law. If you believe a child has given us personal data, email us and we will delete it.
Changes to this policy
If we change how we use personal data — a new processor, a new purpose, a different retention period — we will update this page and change the date at the top. Where a change materially affects you and we hold your email address, we will tell you by email before it takes effect. Questions about anything here go to support@teskis.com.