Privacy policy

Controller

The controller of your personal data is STOFFEL [company name, address, registration no., VAT no. — TBD]. Contact: hello@stoffelclub.com.

What we process and why

• Membership requests (waitlist): email address, language, the date and proof of your consent and confirmation, and your Founding Member number. Basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with the unsubscribe link in every email.
• Fulfilling orders: name, delivery address, email, phone (Art. 6(1)(b) GDPR).
• Payments: handled by Stripe; we never store card details.
• Invoicing and accounting: invoice data (Art. 6(1)(c) GDPR).
• Customer service, returns and complaints (Art. 6(1)(b) and (c) GDPR).
• Analytics — only with your consent (Art. 6(1)(a) GDPR).

Recipients

Brevo (Sendinblue SAS, France) for the membership list and emails, Stripe (payments), our logistics partner (shipping), our hosting provider (Vercel). Some may process data outside the EEA under standard contractual clauses.

Your rights

You have the right of access, rectification, erasure, restriction, portability, objection and to withdraw consent. You may lodge a complaint with the Spanish Data Protection Agency (AEPD) or your local authority.