1. Controller

The controller of your personal data is Francisc Tar, trading as "Tarlabs.". NIF: ESX4262237S. Address: Mecánico Rada 4, 45510 Fuensalida (Toledo), Spain. E-mail: info@tarlabs.es.

2. What data we process and why

PurposeDataLegal basis (GDPR)
Creating and managing your buyer accountName, e-mail, phone, company, VAT number, addresses, password (stored hashed)Contract or pre-contractual steps (art. 6.1.b). For contacts of a business customer: our legitimate interest in managing the business relationship (art. 6.1.f)
Processing order requests and passing them to the manufacturerOrder contents, account and address data, messagesContract (art. 6.1.b)
Verifying buyers' VAT numbers through VIES and preventing fraudCompany, VAT number, countryLegitimate interest in checking that buyers are genuine businesses (art. 6.1.f)
Arranging freight, if you choose Wcargoplus freightContact person, addresses, order and goods dataContract (art. 6.1.b)
Billing manufacturers for subscriptions and service feesManufacturer contact and billing dataContract (art. 6.1.b); legal tax obligations (art. 6.1.c)
Service e-mails (order status, account)E-mail, order dataContract (art. 6.1.b)
NewsletterE-mailConsent with double opt-in (art. 6.1.a), withdrawable at any time through the link in every e-mail
Website security and spam protection (Google reCAPTCHA on forms, server logs)IP address, device and usage dataLegitimate interest in protecting the service (art. 6.1.f)
Suggesting your language or store from your approximate locationIP addressLegitimate interest (art. 6.1.f)
Audience statistics (Google Analytics through Google Tag Manager)Online identifiers, pages viewed, device dataYour consent through the cookie banner (art. 6.1.a)
Accounting and legal obligationsBilling dataLegal obligation (art. 6.1.c)

The data marked as required in the forms are needed to register or order; without them we cannot provide the service. Your account is assigned to a buyer group automatically, based on the VIES result. You can ask for a manual review at any time.

3. Who receives your data

  • Manufacturers whose products you order. They receive the order and the data needed to confirm, invoice and deliver it, and process them as independent controllers.
  • CargoPay.eu and the carriers it books, only if you choose Wcargoplus freight.
  • Service providers that process data on our behalf (processors):
    • hosting: Amazon Web Services EMEA SARL (AWS);
    • Google (e-mail delivery, reCAPTCHA, Tag Manager and Analytics);
    • Stripe (billing of manufacturers);
    • Adobe (Magento Commerce services and aggregated reporting);
    • Mageplaza (IP geolocation).
  • The European Commission's VIES service, for VAT checks.
  • Public authorities, when the law requires it.

Some of these providers (Google, Stripe, Adobe, Amazon Web Services) may process data in the United States or other countries outside the EEA. Such transfers rely on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

4. How long we keep data

  • Account data: while your account is active. After it is closed, kept blocked for the limitation periods for legal claims.
  • Order and billing records: 6 years (art. 30 Spanish Commercial Code) and the periods set by tax law.
  • Newsletter: until you unsubscribe.
  • Server logs: only as long as needed to detect and investigate security incidents, then deleted.
  • Cookies: for the periods in the table below.

5. Your rights

You have the right to:

  • access, rectify or erase your data;
  • restrict processing or object to it;
  • data portability;
  • withdraw your consent at any time.

To exercise these rights, write to info@tarlabs.es. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).

6. Cookies

We use strictly necessary cookies and similar technologies (local storage) to run the shop. Analytics cookies are used only if you accept them. The banner offers "Accept all" and "Reject all" with equal prominence. You can change your choice at any time with the Cookie settings link in the footer, or by deleting cookies in your browser.

NameProviderPurposeDurationType
PHPSESSIDThis siteKeeps your session (login, cart)Session / 1 hourNecessary
form_keyThis siteProtects forms against cross-site request forgerySession / 1 hourNecessary
private_content_version, section_data_ids, X-Magento-VaryThis siteShows up-to-date cart and account contentSession to 1 yearNecessary
mage-cache-sessid, mage-messages, storeThis siteCache handling, on-screen messages, selected language/storeSession to 1 yearNecessary
mage-cache-storage, mage-cache-storage-section-invalidation (local storage)This siteStores cart and account data in the browserUntil clearedNecessary
user_allowed_save_cookie, wcp_cookies_rejectedThis siteRemember your cookie choice (accepted or rejected)1 yearNecessary
_GRECAPTCHAGooglereCAPTCHA protection of login, registration and contact forms6 monthsNecessary
_ga, _ga_<ID>Google (Analytics, via Tag Manager)Distinguish visitors and sessions for statistics2 yearsAnalytics (consent)

Last updated: 14 November 2026