Privacy policy


When browsing our on line store, we can collect information about your computer, including, where appropriate, your IP address, operating system and browser type. These are technical data and statistics on how to navigate our website. For the same reason, we can obtain information about your use of our website through a cookie file that is stored on the hard drive of your computer. Cookies contain information that is transferred to your computer's hard disk and help us improve our website in order to offer a better and more personalized service. In particular, they allow us:

  • Analyse the volume of visit and use of theportal.
  • Accelerate yuor seaches
  • If you are logged in, recognizeyourself when you connect to our website. Of course, you can refuse to accept cookies by activating the settings in your browser that allows you to refuse cookies. However, if you select this settings, you may not be able to access certain parts of the webside and/or you cannot take advantage of any of our service. you can also configure your browser in a way that restores cookies once you close it.

Who is the responsible for the treatment of your data?

Identity: Peanutsandnuts

Address: Coroleu, 25 08030 Barcelona

Phone: 616180123


This is our contact form

With what purpose do we treat your personal data and for how long?

We can collect and treat your personal information if:

  • You have contacted us and you want an answer, we need contact information to answer you. The term of conservation of the data will be determined by the resolution of the reasons for contact.
  • You have registered as a user of our web portal, and therefore, we need to store this information to be able to identify you  the next time you log in. The data will be kept until the user is unsubscribed.
  • You have made a purchase, we need the data, payment information, delivery address of the acquired merchandise and in order to fulfill the legal and fiscal obligations. The data will be stored until they are no longer legally and fiscally necessary.
  • You have subscrived to our newsletter. The data will be kept until you are unsubscribed.
  • We have been authorized to send you offers and we believe that they may be of interest to you. The data will be kept until you express your wish not to continue receiving the offers.
  • You have been authorized to send us inquiries to find out your opinion or degree of satisfaction. The data will remain until you express your desire not to continue answering the surveys.

Peanutsandnuts do not make automated decisions based on user profiles.​

What is the legitimation for the treatment of your data?

In the even that you make a purchase, the legal basis for the processing of personal data is based on the execution of the contact between the parties. The contractual relationship in our online store starts when you place an order for Peanutsandnuts products and you accept our Terms and General Conditions. 

In the even that you provide personal data through any form located on the web, the legal basis for the teatment of your data will reside in the freely given consent, which may be withdrawn at anytime.


Which recipients will your data be ceded to?

Peanutsandnuts will not make any transfer or transfer of any data, except that there is a legal obligation.

Keep in mind that in cases where you acquire products that need to be shipped through a carrier, Peanutsandnuts will have to transfer your delivery information to the transport company in order to deliver the order.

What are your rights when you provide us with your information and how to exercise them? 

The data protection regulations allow you to exercise your rights of access, rectification, opposition, deletion ("right to forget"), limitation of treatment, portability and not be subject to individualized decisions .

These rights are characterized by the following:

  • Exercise your right is for free.
  • If the requests are manifestly unfounded or excessive (e.g., repetitive character) the person responsible may:
    • Charge a fee that is proportional to the administrative costs incurred.
    • Refuse to act.
  • Requests must be answered within one month, although, if the complexity and number of applications are taken into account, the term may be extended for another two months.

  • The responsible of data treatment is obligated to inform you about the means to exercise these rights. These means must be accessible and you cannot deny this right for the sole reason that you opt for another means.

  • If the application is submitted by electronic means, the information will be provided by these means whenever possible, unless the interested party requests that it be otherwise.

  • If the person responsible fails to take the course of the request, he will inform, within a month, of the reasons for his non-performance and the possibility of claiming before a Control Authority.

    You can exercise the rights directly or through your legal or voluntary representative.

Right of access

The right of access is your right to address the responsible for data treatment to know if your personal data are being treated or not, and if this treatment is being carried out, obtain the following information:

  • A copy of your personal information that is the object of the treatment.

  • The purposes of treatment.

  • The categories of personal data that are treated.

  • The recipients or categories of recipients to whom personal data were communicated or will be communicated, in particular, recipients in third countries or international organizations.

  • The period foreseen for the preservation of personal data, or if it is not possible, the criteria used to determine this term.

  • The existence of the right of the interested party to request the person responsible: rectification or abolition of their personal data, the limitation of the treatment of their personal data or object to this treatment.

  • The right to file a complaint with a Control Authority.

  • When the personal data has not been obtained directly from you, any information available on its origin.

  • ​The existence of automated decisions, including the development of profiles, and at least in such cases, significant information on the logic applied, the importance and the consequences foreseen for this treatment for the interested party.

    When personal data is transferred to a third country or to an international organization, you have the right to be informed of the appropriate guarantees in which transfers are made.

Right of rectification

The exercise of this right means that you can rectify your personal data that are inaccurate without undue delay of the person in charge of the treatment.

Taking into account the purposes of the treatment, you have the right to complete the incomplete personal data, including by means of an additional declaration.

In your application you will have to indicate what information you are referring to and the correction that must be made. In addition, when necessary, you must accompany your request for the documentation that justifies the inaccuracy or incompleteness of your information.

Right of opposition

This right, as its name implies, supposes that you can object to the person responsible for the processing of personal data in the following cases:

  • When they are the object of treatment based on a mission of public interest or in the legitimate interest, including the development of profiles:
  • The responsible of data treatment will cease to treat the data unless we prove imperative reasons that prevail over the interests, rights and freedoms of the interested party, or for the formulation, exercise or defense of claims.
  • When the treatment has the purpose of direct marketing, including the preparation of profiles previously cited:
  • Exercise this right for this purpose, personal data will no longer be treated for these purposes.

Right of deletion ("to forget")

You may exercise this right before the person in charge requesting the abolition of your personal data when any of the following circumstances apply:

  • If your personal data are no longer necessary in relation to the purposes for which they were collected or treated in a different way.
  • If the treatment of your personal data has been based on the consent that you provided to the person responsible, and withdraw the same, provided that said treatment is not based on another cause that legitimizes it.
  • If you have opposed the processing of your personal data in exercising the right of opposition under the following circumstances:
    • The treatment was based on the legitimate interest or the fulfillment of a mission of public interest, and other reasons have not prevailed to legitimize the treatment of your data.
    • That your personal data be the subject of direct marketing, including the elaboration of profiles related to the aforementioned marketing.

  • If your personal information has been dealt illegally.

  • If your personal data should be abolished for the fulfillment of a legal obligation established in the Law of the European Union or of the EU Member States that applies to the responsible of data treatment. 

  • ​If the personal data were obtained in relation to the offer of services of the information society mentioned in article 8, section 1 (conditiond applicable to the processing of data of minors in relation to the service of the company of the information).

In addition, the RGPD in regulating this right connects it in some way with the so-called "right to oblivion", so that this right of abolition is extended in such a way that the person responsible for the treatment that has made public personal data is obliged to indicate to those responsible for the treatment that they are dealing with such personal data that delete all links to them, or the copies or replicas of such data.

However, this right is not unlimited, in such a way that it may be feasible not to abolish when the treatment is necessary for the exercise of the freedom of expression and information, to fulfill an obligation legal for the accomplishment of a mission realized in public interest or in the exercise of public powers conferred to the person in charge, for reasons of public interest, in the scope of the public health, for purposes of archive of public interest , purposes of scientific or historical research or statistical purposes, or for the formulation, exercise or defense of claims.

Right to the limitation of the treatment

This right consists of obtaining the limitation of the treatment of your data carried out by the person responsible, although his exercise presents two aspects:

  • You can request the suspension of the treatment of your data:

    • When they impute the accuracy of your personal data, during a period that allows the person responsible to verify it.

    • When you are opposed to the processing of your personal data that the responsible person realizes on the basis of the legitimate interest or mission of public interest, while that one verifies if these reasons prevail over yours.

  • Request the person responsible for the conservation of your data:

    • When the treatment is unlawful and you have opposed the deletion of your data and instead requests the limitation of its use.
    • When the person in charge no longer needs the personal data for the purposes of the treatment, but the interested one needs them for the formulation, the exercise or the defense of claims.

​​Right to portability

The purpose of this right is to further strengthen the control of your personal data, so that when the treatment is carried out by automated means, you receive your personal data in a structured, commonly used, mechanical reading and interoperable, and can be transmitted to another person responsible for the treatment, provided that the treatment is legitimate based on the consent or in the context of the execution of a contract.

However, this right, by its very nature, cannot be applied when the treatment is necessary for the fulfillment of a mission of public interest or in the exercise of public powers conferred on the responsible of data treatment. 

Right to not to be the object to individual automated decisions:

This right aims to ensure that you are not the object of a decision based solely on the treatment of your data, including the development of profiles, which has legal effects on you or significantly affects you in a similar way.

About this profile creation, this is about any form of treatment of your personal data that assesses personal aspects, in particular to analyze or predict aspects related to your work performance, economic situation, health, preferences or personal interests, reliability or the behavior.

However, this right will not apply when:

  • Be necessary for the celebration or execution of a contract between you and the responsible of data treatment. 

  • The treatment of your data is based on your prior consent.

However, in these two first cases, the responsible of data treatment must guarantee your right to obtain human intervention, express your point of view and challenge the decision.

  • Be authorized by the Law of the European Union or the EU Member States and establish appropriate measures to safeguard the rights and freedoms and legitimate interests of the interested party.

In turn, these exceptions will not apply to the special categories of data (art.9.1), unless Article 9.2.a or 9.2.g  is applied and the appropriate measures mentioned in the preceding paragraph have been taken .


How to exercise your rights?

You can exercise your rights by contacting Peanutsandnuts

By electronic means sending an email addressed to: or you can use our contact form on our website.

Our postal address is:


Coroleu, 25

08030 Barcelona

More information about your rights: (in spanish)