Privacy policy

Last updated: November 29, 2026

1. Data Controller

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (General Data Protection Regulation or GDPR), and Spanish Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we inform users that the personal data provided through this website will be processed by:

  • Trade name: SlowMov

  • Legal entity: MANUAL THINKING SL

  • Tax Identification Number (NIF): B66397159

  • Registered address: Carrer de Luis Antúnez, 18, 08006 Barcelona, Spain

  • Contact email: [Privacy contact email]

  • Website: www.slowmov.com

Hereinafter referred to as "SlowMov" or the "Data Controller".

SlowMov is committed to protecting the privacy of its customers and users, ensuring that their personal data is processed lawfully, fairly, and transparently.

2. Personal Data We Collect

SlowMov collects only the personal data necessary to manage its business activities, provide its services, and maintain relationships with customers and users.

The data we may process includes:

Identification and Contact Information

  • First and last name.

  • Postal address.

  • Email address.

  • Telephone number.

Purchase and Order Information

  • Products purchased.

  • Purchase history.

  • Billing and shipping addresses.

  • Payment and transaction information.

  • Return or exchange requests.

  • Information necessary to resolve incidents or issues.

Payments are processed through specialized service providers. SlowMov does not need to store customers' complete bank card details.

User Account Information

When users create an account, we may process their registration details, identification and login information, preferences, and the history associated with their account.

Browsing Data

We may collect technical information regarding the use of our website, including:

  • IP address.

  • Browser and device type.

  • Pages visited.

  • Interactions with the website.

  • Information collected through cookies and similar technologies.

Browsing data obtained through non-essential cookies will only be processed where there is a valid legal basis and, where required, the user has given their consent.

Communications and Customer Support

When a user contacts SlowMov, we may process the information provided to respond to enquiries, resolve issues, or handle requests.

Loyalty Programs and Promotions

If we offer loyalty programs, gift cards, product reviews, or promotional activities, we may process the data necessary to manage these features.

3. Purposes and Legal Bases for Processing

Personal data will be processed exclusively for legitimate, specified, and explicit purposes.

3.1. Purchase and Order Management

We use personal data to:

  • Process purchases and payments.

  • Prepare and ship orders.

  • Issue invoices.

  • Manage returns and exchanges.

  • Provide order status updates.

  • Resolve issues related to purchases.

Legal basis: Performance of a contract or implementation of pre-contractual measures, pursuant to Article 6(1)(b) of the GDPR.

3.2. Compliance with Legal Obligations

We may process and retain certain personal data to comply with tax, accounting, administrative, and consumer protection obligations.

Legal basis: Compliance with legal obligations, pursuant to Article 6(1)(c) of the GDPR.

3.3. Customer Support

We process information provided by users to respond to enquiries, information requests, complaints, and communications relating to our products and services.

Legal basis: Performance of a contract or pre-contractual measures, where applicable, and, in other cases, our legitimate interest in responding to communications received, pursuant to Article 6(1)(b) or Article 6(1)(f) of the GDPR, depending on the nature of the request.

3.4. Marketing and Commercial Communications

SlowMov may send information about news, products, promotions, and commercial activities by email or other electronic means when:

  • The user has previously provided their explicit consent.

  • A prior contractual relationship exists and the communications concern our own products or services similar to those previously purchased, provided that the requirements established in Article 21(2) of the Spanish Law on Information Society Services and Electronic Commerce (LSSI-CE) are met.

In all cases, users may object to receiving commercial communications easily and free of charge, both when their data is collected and through the unsubscribe link included in each communication.

Legal basis: The data subject's consent, pursuant to Article 6(1)(a) of the GDPR, or legitimate interest where the exception established in Article 21(2) of the LSSI-CE applies, pursuant to Article 6(1)(f) of the GDPR.

SlowMov will not send electronic commercial communications without a valid legal basis.

3.5. Security and Fraud Prevention

We may process certain personal data to protect website security, prevent unauthorized access, detect fraudulent transactions, and protect our customers' rights.

Legal basis: Our legitimate interest in ensuring the security of our services and preventing fraudulent activities, pursuant to Article 6(1)(f) of the GDPR, without prejudice to any applicable legal obligations.

3.6. Website Analytics and Improvement

We may analyze the operation and use of our website to improve its accessibility, performance, functionality, and shopping experience.

Where these activities involve analytical cookies or other tracking technologies requiring consent, we will request the user's authorization in advance.

Legal basis: Consent, pursuant to Article 6(1)(a) of the GDPR, where required; or legitimate interest for technical processing activities that do not require such consent and have passed the relevant balancing assessment.

4. Shopify E-Commerce Platform

Our online store uses the Shopify technology platform, which provides tools for managing products, orders, payments, and other e-commerce functions.

To properly provide these services, Shopify may process certain customers' personal data in accordance with the features used, applicable contractual terms, and its own privacy policies.

Further information is available at:

https://www.shopify.com/legal/privacy

SlowMov will seek to ensure that service providers processing personal data on its behalf offer the safeguards required by the GDPR, including appropriate data processing agreements where applicable.

5. Recipients of Personal Data

SlowMov will not sell its customers' personal data to third parties.

However, certain data may be disclosed to service providers when necessary to deliver contracted services or comply with legal obligations.

These recipients may include:

  • Shopify: For hosting and operating our online store.

  • Payment service providers: To manage payments and transactions.

  • Shipping and logistics companies: To deliver orders.

  • IT and technology providers: For website maintenance and security.

  • Tax and accounting advisors: To comply with legal obligations.

  • Marketing and communication service providers: Where their services are used and an appropriate legal basis exists for processing.

  • Public authorities and competent bodies: Where legally required.

Service providers acting as data processors may only use personal data in accordance with the documented instructions of the Data Controller, under the conditions established in Article 28 of the GDPR.

6. International Data Transfers

When using technology providers such as Shopify, certain personal data may be transferred, stored, or processed outside the European Economic Area (EEA).

Where international transfers of personal data take place, SlowMov will ensure that they comply with Chapter V of the GDPR.

Depending on the circumstances, such transfers must be based on:

  • An adequacy decision issued by the European Commission.

  • Standard Contractual Clauses approved by the European Commission, together with any necessary supplementary measures.

  • Other transfer mechanisms or safeguards recognized under applicable legislation.

Users may request information about the safeguards applicable to international transfers of their personal data by contacting SlowMov.

7. Data Retention Periods

Personal data will be retained for as long as necessary to fulfill the purposes for which it was collected and, subsequently, for the periods required by applicable legislation.

In particular:

  • Purchase and billing data: For the periods legally required under applicable tax, accounting, and commercial regulations.

  • User account data: For as long as the account remains active or until its deletion is requested, unless a legal obligation requires continued retention.

  • Marketing data: Until the user withdraws consent or exercises their right to object, without prejudice to retaining the minimum information necessary to demonstrate compliance with legal obligations.

  • Customer support data: For as long as necessary to manage the request and address any potential liabilities.

  • Browsing data and cookies: For the periods specified in the relevant Cookie Policy, according to the technologies used.

Once the applicable retention periods have expired, personal data will be securely deleted or anonymized or, where legally required, appropriately restricted and retained for the corresponding statutory period.

8. Users' Rights

In accordance with the GDPR and the LOPDGDD, users may exercise the following rights regarding their personal data:

Right of Access: To know what personal data we process and obtain information about how it is used.

Right to Rectification: To request the correction of inaccurate or incomplete personal data.

Right to Erasure: To request the deletion of personal data where the legally established conditions are met.

Right to Object: To object to the processing of personal data in certain circumstances, particularly when used for direct marketing purposes.

Right to Restriction of Processing: To request that the processing of personal data be temporarily restricted in the cases established by law.

Right to Data Portability: To receive personal data in a structured, commonly used, and machine-readable format and, where technically feasible, request its transmission to another data controller.

Right to Withdraw Consent: To withdraw previously granted consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Right Not to Be Subject to Solely Automated Individual Decision-Making: Under the conditions established in Article 22 of the GDPR.

To exercise any of these rights, users may submit a request to:

info@slowmov.com

The request must provide sufficient information to identify the data subject and specify the right they wish to exercise. SlowMov may request additional information to verify the user's identity where reasonable doubts exist.

Requests will be answered within a maximum period of one month from receipt, except where applicable legislation allows an extension, in which case the data subject will be informed.

Exercising these rights is free of charge, except where otherwise permitted by law.

9. Right to Lodge a Complaint

If you believe that your personal data has not been processed in accordance with applicable legislation, you may contact SlowMov to submit a complaint.

You also have the right to lodge a complaint with the competent data protection supervisory authority.

In Spain, you may contact:

Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD)

Website: https://www.aepd.es

You may also contact another competent supervisory authority where permitted under applicable legislation.

10. Cookie Policy

The SlowMov website uses cookies and similar technologies to enable its operation and, where applicable, analyze browsing activity and provide personalized content.

Strictly necessary cookies may be used without consent when they meet the requirements established by applicable regulations.

Analytical, advertising, or personalization cookies that require consent will only be installed or activated after the user has provided valid authorization.

Users may accept, reject, or configure non-essential cookies through the consent management system available on the website.

Users may also withdraw or modify their consent through the cookie settings mechanism provided on the website.

Detailed information about the types of cookies used, their purposes, providers, and retention periods will be available in our Cookie Policy, which should be read together with this Privacy Policy.

11. Personal Data Security

SlowMov implements appropriate technical and organizational measures to protect personal data against loss, destruction, alteration, unauthorized access, or improper disclosure.

These measures are established taking into account the nature of the data processed, the existing risks, and the available technological resources.

However, no computer system can guarantee absolute security.

For this reason, we recommend that users use secure passwords and avoid sharing confidential information through unprotected communication channels.

In the event of a personal data breach, SlowMov will take the measures required by applicable legislation, including notifying the relevant authorities and affected individuals where necessary.

12. Protection of Minors' Personal Data

Our online store services are intended for the general public and are not specifically designed to collect personal data from minors.

In Spain, where the processing of personal data is based on a minor's consent, minors may provide valid consent themselves only if they are over 14 years of age, except in cases where the law requires the involvement of their legal representatives.

Where necessary, we will request authorization from parents or legal guardians.

If we become aware that we have collected personal data from a minor without the necessary legal basis, we will take appropriate measures to delete such data.

13. Links to Third-Party Websites

Our website may contain links to websites or services operated by third parties.

SlowMov is not responsible for the privacy policies or data processing practices of these external platforms.

We recommend that users review the relevant privacy policies before providing personal information to third parties.

14. Changes to This Privacy Policy

SlowMov reserves the right to modify this Privacy Policy whenever necessary to reflect regulatory, technological, or operational changes.

Any modifications will be published on this page, and the last updated date will be revised accordingly.

Where required by law, users will be informed of significant changes, and renewed consent will be requested where necessary.

15. Contact

For any questions regarding this Privacy Policy or the processing of your personal data, you may contact us using the following details:

SlowMov

Carrer de Luis Antúnez, 18
08006 Barcelona, Spain

Email: info@slowmov.com

Website: www.slowmov.coffee

We are committed to responding to privacy and data protection enquiries in accordance with applicable legislation.