Last updated: August 2026
Dream Advertising Sociedad Limitada (S.L.), trading as Tropicannava, respects your privacy and is committed to protecting your personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – “GDPR”) and applicable Spanish data-protection law.
2.1 Data Controller
The data controller responsible for your personal data is Dream Advertising Sociedad Limitada (S.L.). For any privacy-related request, contact us at [email protected].
2.2 Data We Collect
- Identification data: name, delivery and billing address, email address, phone number.
- Order data: products purchased, order value, order history.
- Payment data: limited transaction data required to process payment (full card or crypto-wallet details are handled directly by our payment providers and are not stored on our servers).
- Technical data: IP address, browser type, device information, and cookies (see Section 3, Cookie Policy).
- Communication data: any information you provide when contacting customer support.
2.3 Purpose and Legal Basis of Processing
- To process and fulfil your order (performance of a contract).
- To verify your age and eligibility to purchase (legal obligation / legitimate interest).
- To respond to customer service enquiries (legitimate interest).
- To send order updates and, where you have opted in, marketing communications (consent).
- To comply with applicable tax, accounting, and anti-fraud obligations (legal obligation).
2.4 Data Sharing
We share personal data only with third parties strictly necessary to operate the Site and fulfil your order, including: payment service providers (for payment processing), courier and logistics partners (for delivery), and IT service providers (for hosting and site security). We do not sell your personal data to third parties.
2.5 Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described above, including any period required to comply with legal, accounting, or tax obligations.
2.6 Your Rights
Under the GDPR, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. You may exercise these rights at any time by contacting us at [email protected]. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or your local supervisory authority.
2.7 International Transfers
Where a service provider is located outside the European Economic Area, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses, in accordance with GDPR requirements.
2.8 Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.
