At Pummba we are committed to protecting the privacy and security of our customers. 

We treat your data as we would want ours to be treated on any of the websites we visit, with respect and honesty. That is why we will always be clear and transparent with you, we will inform you about what data we are collecting and what we will do with that information. And, of course, if you have any questions you can always contact us by sending us an email to. [email protected]

And now, let's get down to business.

In compliance with Regulation (EU) 2016/679, General Data Protection and Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights we inform you of the following:

Data controller and contact details

Company name

NUBBA SPACES, S.L. ("Pummba"or "we")


C/Llauder, 7 1º 3ª.





+34 900670182


[email protected]

Source and categories of data

  1. We will process the data that you provide us through the "registration", "purchase" and "contact" forms, as well as through other means related to the use or services offered on the Web Platform, such as, for example, opinions or satisfaction surveys. This data generally includes first name, last name, postal address, telephone number, e-mail address, password, as well as any other information you provide in the comments section of the form. If you ask us for an invoice, we will also ask you for your identity document and the appropriate data for the realization of the invoice. 
  2. We may also process other personal information that you have provided to us or that has been generated in the course of our communications or provision of services.
  3. On the other hand, we also collect data through cookies. If you want you can see all the information about these cookies in our Cookies Policy.
  4. Finally, please note that by providing your data, you guarantee the truthfulness and accuracy of these. Therefore, you will be responsible for any false or inaccurate statements you make, as well as for any damage caused to Pummba or third parties as a result of these.

For what purpose we collect your data

We collect your data for:

  • To provide you with the services you request from us (e.g., sale of a product) and/or to respond to your requests for information.
  • To process payments and ship the products you purchase using our own means or through third parties.
  • We will process your data to fulfill our legal obligations (tax, accounting, money laundering, etc.), as well as to fulfill your rights (e.g., warranties or returns).
  • Send you electronic commercial communications and newsletters. You may object at any time by sending an email to [email protected] or by following the instructions contained in each communication. 
  • Send you satisfaction surveys about our products, sales process, transportation, deliveries, etc.
  • Perform data analysis (will not identify any person) of the navigation on our Web Platform according to information obtained with the use of cookies.
  • Show you advertising during navigation through the use of cookies based on your preferences, as well as based on the interactions you make in social networks through our Web Platform. Where appropriate, the corresponding social networks may treat your data in accordance with their privacy policies.

User's responsibility 

By providing us with your data through electronic channels, you guarantee that you are of legal age and that the data provided to Pummba are true, accurate, complete and up to date. For this purpose, you are responsible for the veracity of the data communicated and for keeping this information conveniently updated so that it corresponds to your real situation, making you responsible for any false or inaccurate data that you may provide, as well as for any damages, direct or indirect, that may arise.

 How long is your data retained?

Only what is necessary. We will keep your data for the time strictly necessary to fulfill the purposes for which they are being processed.

In general, we will keep your data for as long as our business relationship is in force so that we can manage it properly and send you commercial information that is of interest to you. However, if we observe a prolonged period of inactivity, we will proceed to delete your data to the extent that the processing is no longer adequate, relevant and necessary for the purposes intended for the processing. This rule applies unless you request us to delete your data.

Once the processing of your data is no longer adequate, relevant and limited to what is necessary for the purposes for which they are processed, we will keep your data properly blocked and only to meet potential liabilities, as required by law.

Finally, we inform you that we will take all reasonable steps to ensure that your data is rectified or deleted when it is inaccurate.

With whom do we share your data and why?

  1. As a general rule, we will not disclose your information to third parties. However, in certain cases we may need to disclose your information to:
  • Suppliers: Access to your personal data will be granted to those suppliers who need such access to provide their services to us, such as managers, IT or cloud providers. cloud o hosting (e.g. Shopify), CRM providers, partners, logistics companies or postal services, telecommunications providers, payment gateways, financial institutions or accountants. These third parties will act as our (sub)processors and will have in place appropriate safeguards to protect your personal information including a corresponding data processing contract in accordance with Art. 28 GDPR.
  • Transport: Depending on the mode of shipment and special service required, these third parties involved in the service will act as data controllers. 
  • Financial institutions: Depending on the form of payment and financial service required (financing, deferrals, etc.), these third parties involved in the service will act as data controllers. 
  • Others: We will share your personal data with third parties if we are required to do so by law, by an administrative or judicial authority or for the good of public interest or public order, such as to comply with anti-money laundering and anti-terrorism regulations, tax or social security obligations.
  1. Finally, please note that we may also share your information if we believe it is reasonably necessary to enforce the terms and policies of the Web Platform or to protect our operations or Users. In addition, in the event of a business restructuring, merger, spin-off or sale, we may transfer all of your personal information to the third party resulting from such transaction.

International transfers

Some of our suppliers may have their servers outside the European Economic Area (EEA).

Therefore, and in compliance with Article 34 point 5 of the LOPD and 66.2 of the RLOPD, we inform you that in the event that the data provided by you are transferred or stored outside the European Economic Area (EEA), you will be expressly accepting the necessary transfer of international data to the international servers of such providers, the sole purpose being the storage of data on servers, and only those strictly necessary to provide the service.

For information purposes, and without excluding those not listed here, some of Pummba's suppliers with international servers are Shopify, Google, PayPal, Apple Pay or Amazon Pay. In any case, all international transfers will be made on the basis of Standard Contractual Clauses (SCT), after assessment of the circumstances of the transfers and the additional measures we will apply, as well as the guarantees we will require from these providers to ensure an adequate level of protection of the transferred data. 

Know your rights

Your information is yours alone. And as such, you have many rights related to your personal information, ts provided by the General Data Protection Regulation (GDPR) and the Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights:

  • The right to access your data to know what personal data concerning you we are processing. 
  • The right to rectify or delete: in certain circumstances, you have the right to rectify inaccurate personal data concerning you that is processed by us or even to ask us to delete it. 
  • The right to request a restriction: in certain circumstances, you have the right to ask us to restrict the processing of your data.
  • The right to portability: in certain circumstances, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format and to transfer it to another data controller.  
  • The right to object: in certain circumstances and for reasons related to your particular situation, you have the right to object to the processing of your data in which case, we would stop processing them except for compelling legitimate reasons or for the exercise or defense of possible claims. At any time, you may object to receiving commercial communications.
  • The right to complain: at any time you can complain to the competent supervisory authority depending on your place of residence. In the case of Spain, the Spanish Data Protection Agency (AEPD). In any case, before initiating any claim, you can contact us via email ([email protected]) in order to try to solve any discrepancy or controversy in a friendly way.

How can you exercise your rights?

If you want to exercise your rights, file a complaint, or if you simply have any doubts, do not hesitate to contact us by e-mail at [email protected]

These rights are characterized by the following:

  • It is free of charge, except in the case of manifestly unfounded or excessive requests (e.g. repetitive nature), in which case Pummba may charge a fee proportional to the administrative costs incurred or refuse to act.
  • You may exercise your rights directly or through your legal representative or volunteer.
  • We must respond to your request within one month, although, taking into account the complexity and number of requests, the deadline may be extended by another two months.
  • We are required to inform you of the means to exercise these rights, which must be accessible and we may not deny you the exercise of the right solely because you choose another means. If the request is submitted electronically, the information will be provided electronically whenever possible, unless you ask us to do otherwise.
  • If Pummba does not act on the request, it will inform you, within one month at the latest, of the reasons for its failure to act and the possibility to complain to a supervisory authority.

In order to facilitate this exercise, we provide links to the application form for each of the rights:

Form to exercise the right of access

Form for exercising the right of rectification

Form for exercising the right to object

Form for exercising the right to erasure ("right to be forgotten")

Form for the exercise of the right to limit the processing of personal data

Form for exercising the right to portability

Form of exercise of the right not to be subject to automated individual decisions

To exercise your rights Pummba offers you the following means:

  1. By written and signed request addressed to NUBBA SPACES, S.L., C/Llauder, 7 1º 3ª 08003 BARCELONA Ref. Exercise of LOPD Rights.
  2. By sending a scanned and signed form to the following e-mail address [email protected] indicating in the subject Exercise of Rights LOPD.

In both cases, you must prove your identity by attaching a photocopy or, where appropriate, a scanned copy of your ID card or equivalent document in order to verify that we are only responding to the interested party or his legal representative, in which case you must provide proof of representation.

Likewise, and especially if you consider that you have not obtained full satisfaction in the exercise of your rights, we inform you that you may file a complaint with the national supervisory authority by contacting the Spanish Data Protection Agency, C/ Jorge Juan, 6 - 28001 Madrid.

How soon will we get back to you?

We will respond to your requests as soon as possible and, in any case, within one month. If this is not the case, we ask for your understanding and that you contact us again in order to solve any possible technical error that may have prevented us from responding in time.

Modification of the privacy policy

From time to time we may make changes to this page to reflect how we process your data.

In case we make any significant changes, we will make it clear on this web page, or by any other means of contact such as e-mail.

Does Pummba use cookies?

Yes! Cookies help us to offer you a more personalized experience on our Web Platform. 

That being said, as this is an important and extensive topic, we have prepared a Cookies Policy in which you will find everything about them, so that you have all the information you want if you want to know more about this topic.

Contact us for any questions

If you have any questions or comments about our privacy policy, want us to stop using your information, want to exercise any of the rights listed above or have any complaints, please do not hesitate to contact us, we will be happy to answer all your questions.

You can contact us by sending us an e-mail at [email protected]