Shopping Cart
At Braguscamp we design and manufacture our own roof top tents and sell them through braguscamp.com. This policy explains clearly what personal data we process when you visit the website, create an account, place an order or contact us, why we use it, on what legal basis, how long we keep it and how you can exercise your rights under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
🏢
Data controller
BRAGUSCAMP S.L., tax ID (CIF) B19415827, registered in Torrejón de Ardoz (Madrid, Spain).
🔒
We do not sell your data
We use it to manage your orders and for whatever you authorise us to do.
✉️
Your rights
Access, erasure, objection and more, by writing to info@braguscamp.com.
⚖️
Supervisory authority
You can lodge a complaint with the Spanish Data Protection Agency (AEPD).
1. Data controller
Company: BRAGUSCAMP S.L.
Trade name: Braguscamp
Tax ID (CIF): B19415827
Registered office: Paseo de la Igualdad 1, Local 7, 28850 Torrejón de Ardoz (Madrid), Spain
Warehouse and fitting point: Calle Diego Martín 5, 28810 Villalbilla (Madrid), by appointment only
Email: info@braguscamp.com
WhatsApp: +34 690 086 820
Web: braguscamp.com
Braguscamp has not appointed a Data Protection Officer (DPO). For any matter relating to your personal data, please write to info@braguscamp.com with the subject line “Data protection”. You can find the rest of our company details in our legal notice.
2. What data we process
We only process the data you provide to us directly and the data generated when you use the website:
- Customer account: first and last name, email, password (encrypted), phone number, delivery and billing addresses and, if you provide them, your VAT/tax number or company details.
- Orders: products purchased, amounts, chosen payment method, shipping details, invoices, returns and warranty claims.
- Contact and WhatsApp: name, email or phone number and the content of the messages, photos or documents you send us when you contact us by email or WhatsApp.
- Newsletter: your email address and, where applicable, your name, if you subscribe to our marketing communications.
- Browsing: IP address, device and browser type, pages visited and data collected through cookies, as explained in our cookie policy.
Braguscamp does not store your card details. Payments by card, PayPal or seQura are handled directly by the relevant payment providers; we only receive confirmation of the payment and the information needed to reconcile it.
Fields marked as mandatory in our forms are required to process your request or order; if you do not complete them, we will not be able to handle it. You confirm that the data you provide is accurate and up to date. If you give us another person’s data (for example, the recipient of a delivery), you must have informed them beforehand.
3. Purposes and legal basis
We process your data for the following purposes and on the following legal bases (Art. 6(1) GDPR):
| Purpose | Legal basis |
|---|---|
| Creating and managing your customer account. | Performance of a contract (Art. 6(1)(b) GDPR). |
| Processing orders, payments, deliveries, returns, withdrawals and warranty claims. | Performance of a contract (Art. 6(1)(b) GDPR). |
| Issuing invoices and complying with accounting, tax and consumer law obligations. | Compliance with a legal obligation (Art. 6(1)(c) GDPR). |
| Answering your questions by email or WhatsApp, including before you buy. | Steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering your query (Art. 6(1)(f) GDPR). |
| Sending you our newsletter and marketing communications. | Consent (Art. 6(1)(a) GDPR and Art. 21 LSSI-CE). |
| Measuring website usage (analytics) and the effectiveness of our ads through non-essential cookies. | Consent (Art. 6(1)(a) GDPR and Art. 22(2) LSSI-CE). |
| Keeping the website secure, preventing fraud and defending our rights in the event of claims. | Legitimate interest (Art. 6(1)(f) GDPR). |
Where processing is based on our legitimate interest, we have assessed that your interests or rights do not override it, and you may object at any time. Where it is based on your consent, you may withdraw it whenever you wish, without affecting the lawfulness of processing carried out before withdrawal.
Braguscamp does not take decisions based solely on automated processing that produce legal effects concerning you. If you choose to pay with PayPal or finance your purchase with seQura, these providers will process your data under their own terms and privacy policies.
4. How long we keep your data
We keep your data only for as long as necessary for the purpose for which it was collected:
| Data | Retention period |
|---|---|
| Orders and invoicing | 6 years under the Spanish Commercial Code (Art. 30) and 4 years for tax purposes under the Spanish General Tax Act, or any longer period required by applicable law. |
| Customer account | For as long as you keep your account, until you ask us to delete it. |
| Newsletter | Until you unsubscribe or withdraw your consent. |
| Email or WhatsApp enquiries | For as long as needed to handle your enquiry and then for 1 year. |
| Cookies | For the periods set out in our cookie policy. |
Once these periods have ended, the data is kept blocked (Art. 32 LOPDGDD), available only to judges, courts and the competent authorities for the limitation period of any possible liabilities, and is then deleted.
5. Recipients and processors
We do not sell or transfer your data to third parties for commercial purposes. To provide our services we work with providers that act as data processors, with whom we have signed the contracts required by Art. 28 GDPR, or that act as independent controllers within their own scope:
- Hosting and technical services: hosting and maintenance provider for the online shop.
- Payment providers: PayPal, seQura and the card payment gateway, to process your payments or financing.
- Carriers: they receive your name, address and contact phone number to deliver your order.
- Email marketing tool: only if you have subscribed to the newsletter.
- Google: analytics and advertising measurement services, only if you have accepted the relevant cookies.
- Meta (WhatsApp): when you choose to contact us via WhatsApp.
We may also disclose your data to the Spanish Tax Agency, courts or other public authorities where we are required to do so by law.
6. International transfers
Some providers, such as Google, PayPal or Meta (WhatsApp), may process data outside the European Economic Area, in particular in the United States.
In such cases, transfers are based on the EU-US Data Privacy Framework, where the recipient is certified, or on the standard contractual clauses approved by the European Commission, together with any additional safeguards required. You can ask us for more information at info@braguscamp.com.
7. Your rights
You may exercise the following rights at any time:
- Access: find out whether we process your data and obtain a copy of it.
- Rectification: have inaccurate or incomplete data corrected.
- Erasure: ask us to delete your data when it is no longer needed, unless we are legally required to keep it.
- Objection: object to processing based on legitimate interest or to receiving marketing communications.
- Restriction: ask us to suspend processing in certain circumstances.
- Portability: receive the data you gave us in a structured, commonly used format, or have it transmitted to another controller.
- Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.
How to exercise your rights
Write to us at info@braguscamp.com with the subject line “Data protection”, stating which right you wish to exercise. If we have reasonable doubts about your identity, we may ask you for additional information to confirm it. Exercising your rights is free of charge and we will reply within one month, which may be extended by two further months for complex requests, in which case we will let you know.
To unsubscribe from the newsletter, use the link included in every email. To withdraw your consent to cookies, please see our cookie policy.
8. Complaints to the AEPD
If you believe we have not handled your data correctly, or you have not received a satisfactory reply when exercising your rights, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es). We would be grateful if you contacted us first so that we can try to resolve it.
9. Children and minors
Our website is not aimed at children under 14. Under Art. 7 LOPDGDD, children under 14 may not provide us with their data without the consent of their parents or guardians. To make purchases you must have the legal capacity to enter into contracts. If we find that we have received data from a child under 14 without the necessary authorisation, we will delete it.
10. Security of your data
We apply technical and organisational measures appropriate to the risk to protect your data against loss, misuse or unauthorised access: encrypted connection (HTTPS), encrypted passwords, access control and confidentiality agreements with our providers.
No system is completely infallible. In the event of a data breach, we would act in accordance with the GDPR, notifying the AEPD and, where appropriate, the people affected. We recommend that you use a strong password and do not share it.
11. Communications via WhatsApp
If you write to us on WhatsApp at +34 690 086 820, your messages are transmitted via WhatsApp, a service provided by Meta (WhatsApp Ireland Limited in the EU). When you use WhatsApp, Meta processes certain data as a controller under its own terms.
- We use WhatsApp to answer your questions and to keep you informed about your order, deliveries and fitting appointments.
- We will not send you advertising via WhatsApp without your prior consent.
- Please do not send us card details or passwords via WhatsApp. You can ask us to delete the conversation at any time.
You can find out how Meta processes your data in the WhatsApp privacy policy.
12. Changes to this policy
We may update this policy to reflect changes in the law or in our services. We will always publish the current version on this page with its update date and, if the changes are significant, we will inform you by appropriate means.
Questions about your data?
Write to us at info@braguscamp.com or via WhatsApp. Please also see our legal notice and our cookie policy.
Frequently asked questions
Do you sell my data to other companies?
No. We only share it with the providers we need to handle your order (payment, delivery, web hosting) and with the authorities when required by law.
Do you store my card details?
No. Payment is processed directly by the payment gateway, PayPal or seQura. Braguscamp never sees or stores your full card number.
How do I unsubscribe from the newsletter?
Use the unsubscribe link in any of our emails, or write to info@braguscamp.com. Unsubscribing is immediate and free of charge.
Can you delete my account?
Yes. Write to us and we will delete your account. Your order and invoice data will be kept blocked for the periods required by law and then deleted.
Last updated: October 2026
