Privacy Policy

In compliance with the provisions of Organic Law 15/1999, of 13 December, on the Protection of Personal Data (LOPD), and with Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI), and to adapt to European Regulation 679/2016 on the Protection of Personal Data (RGPD), we have updated our Privacy Policy.
Remember that before you start using any of our services or functionalities, you should read in this Privacy and Cookies Policy, as well as in the Terms and Conditions the specific section about them. In this section you will be able to see if there are any particular conditions for its use, or if it requires a specific treatment of your Personal Data.
The user accepts that the personal data provided in the registration process to our website, as well as those generated as a result of the user’s activity on our website, will be included in our “Clients” and “Web Users” files, owned by CALMABAGS, in order to adequately provide the requested services, comply with the company’s invoicing, accounting and auditing requirements, perform statistical analyses, as well as carry out satisfaction surveys and commercial communications by e-mail or other equivalent electronic means related to products, promotions or discounts. In this sense, the user accepts that, depending on their consumption habits, they may receive messages or notifications with personalised promotions.

Responsible for the File
Ismael Menacho Perez, on behalf of CALMABAGS with contact address at Calle Sor Pilar Linares, 26, 11600 Ubrique. Cádiz, and with DNI- 25591432E, telephone +34 699 30 78 87 and e-mail address “” is responsible for the files in which the personal data collected and processed from this website will be included.
These files are duly registered in the General Data Protection Register of the Spanish Data Protection Agency.
Data Collection
CALMABAGS only collects the personal data that you provide us with through the forms included on the website and our e-mail addresses.
Uses and Purposes of the Data Collected
Personal data is collected for the purposes detailed below, if you do not agree with any of them you can communicate it to the email address “”. The uses and purposes foreseen are:

Registration and User Management
The information you provide in the registration form will be used for the management of the users of the website. CALMABAGS will not accept false registration attempts or attempts to impersonate the identity of persons or companies. Providing false information in the registration form will result in the automatic cancellation of the user’s registration.
Order Management
When you purchase a product or service in our online shop, the data you provide will be used to process and invoice the orders placed.
Publication of Comments
The information you provide through the forms will be used for the management of users and publication of comments on our blog.
Communication of Data to Third Parties
CALMABAGS, foresees the communication of your personal data to third parties in the cases detailed below, if you do not agree with any of these transfers you can communicate it to the email address
The foreseen communications are: Communications established in the Law
Your data will be communicated to third parties in those cases in which a legal regulation establishes it (public administrations, administrative or judicial authorities…etc.).
Payment Management
Your personal data will be communicated to third parties when necessary for the payment of products or services purchased (banks and / or financial institutions that own the means of payment used).
Management of Shipments.
Your personal data will be communicated to third parties when it is necessary for the shipment through our logistics platforms of the products or services purchased.
CALMABAGS uses state-of-the-art technologies to protect your personal data and information. Our website is stored on secure servers protected against the most common types of attacks.

However, we must remind you that there is no invulnerable technology and that you must therefore use the means at your disposal to maintain the level of security of your data, in particular we recommend that you use strong passwords to access your user account, with at least 8 characters alternating numbers, letters, uppercase, lowercase and special characters.
We also recommend that you change your password regularly (at least once a year) and that if you suspect that a third party may know your password, you change it immediately.
Data Processor
In the event that the products or services contracted require access to or processing of files containing personal data, CALMABAGS, through Ismael Menacho Perez, will become the PROCESSOR, as stipulated in art. 12 of the LOPD, and therefore may only access or process the personal data included in the client’s files when strictly necessary for the provision of the services contracted and always under the instructions provided by the client.
CALMABAGS will only process the data in accordance with the client’s instructions, will not apply them or use them for other purposes, nor will it communicate them, not even for their conservation, to other persons.
In this case, CALMABAGS undertakes to access and process the information and files containing personal data to which it has access, in accordance with the technical and organisational security measures corresponding to the nature of the data processed or stored, in accordance with the security levels established in Royal Decree 1720/2007, or any regulations that may replace it.
Once the provision of services has been concluded, the personal data owned by the client will be blocked and subsequently cancelled or returned, as will any support or document containing any personal data subject to processing.
CALMABAGS is obliged, in accordance with article 10 of the LOPD, to maintain secrecy regarding the personal data accessed, even after the commercial relationship between both parties has ended, and this obligation must be extended to all the staff of the organisation that accesses these files. This duty of secrecy is also extended to all other information that is not personal data and to which it has access or knowledge during the provision of its services.
Nevertheless, the client authorises CALMABAGS, for the sole purpose of its use as a commercial reference, to disclose his identification data and/or distinctive signs, as well as the condition of client of the products and services offered by CALMABAGS.
This authorisation is understood to be granted solely for the inclusion of the CLIENT in advertising campaigns, lists and portfolios of commercial references published by CALMABAGS by any means.

Security Measures Applicable to the Processing of Personal Data
Security Level: In accordance with the indications provided by the Client regarding the level of security applicable to the files containing personal data subject to this contract, CALMABAGS states that it will apply the basic security level measures described in R.D. 1720/2007.
Scope of Application of the Technical and Organisational Security Measures: CALMABAGS, declares that it will apply the technical and organisational measures indicated in this section, to the functions described in these contracting conditions.
Security Document: CALMABAGS declares that it has a Security Document, in accordance with the provisions of art. 88 of R.D. 1720/2008.
4th.- Functions and Obligations Manual: CALMABAGS declares that it possesses and keeps updated, a Manual of Functions and Obligations of the Personnel with respect to its Information Systems and Files with Personal Data as required by art. 89 of R.D. 1720/2007, having been disclosed this Manual to all its personnel. CALMABAGS undertakes not to allow access to or processing of files containing personal data to personnel who have not received a copy of this document.
5th.- Incident Register: CALMABAGS declares that it has an internal Incident Register that complies with the requirements of art. 90 of R.D. 1720/2007, this Register being used by its personnel to report any incident related to the security of the information and personal data included in the files with personal data that they process.
6th.- Access Control: CALMABAGS undertakes to implement, prior to the commencement of its services, all technical and organisational measures necessary to guarantee the principles of security and confidentiality of the information to which it has access as a result of its functions and, in particular, states that it complies with the following measures with regard to access control:
– Maintains an updated list of authorised users and accesses. – Allows access only to authorised users according to the functions assigned to each of them.
to each of them. – Establishes mechanisms that prevent access to data or resources with rights other than those authorised.
than those authorised. – Access permissions are granted only to authorised personnel.
7th.- Identification and Authentication: CALMABAGS in its access to personal data of the data controller maintains the following security measures with regard to the identification and authentication of users who are going to have access to said data:
– Identification and authentication is personalised.

– There is a procedure for assigning and distributing passwords, which imposes the use of strong passwords.
– Passwords are stored in an unintelligible form. – Passwords are confidential (known only to the user) Passwords are changed at least once a year.
passwords are changed at least once a year.
8th.- Media Management: CALMABAGS shall adopt the following security measures with regard to media containing personal data:
– Maintain an inventory of media. – Establish a labelling system in accordance with the inventory system that allows for
also identify the type of information they contain. – Store authorised media in a restricted-access location.
authorisation system for the output of media from your premises, including output via e-mail.
outgoing media from their premises, including by e-mail. – Adopt specific measures to ensure the confidentiality and security of personal data during transportation and
personal data during transport and disposal of media.
9th.- Back-up copies: CALMABAGS declares that it has a system of back-up copies that guarantees the recovery of its information in the event of it being necessary, this system being tested at least once every 6 months.
10th.- Non-automated files: CALMABAGS will adopt the following measures with regard to documents containing personal data to which CALMABAGS has access during the performance of its work:
– It shall keep the documentation in filing cabinets, drawers or cupboards that have devices that hinder their opening.
– During the revision or processing of documents, the person in charge of them must be diligent and guard them to prevent unauthorised access.
– Only authorised personnel shall have access to documents.
– If documents are transferred, security measures must be adopted to prevent loss or access by third parties (transfer in closed and discreet devices, avoid losing sight of the documents, etc.).
11th CALMABAGS personnel: CALMABAGS undertakes to communicate these obligations to its personnel, ensuring compliance with these regulations, among the employees included in the objective scope of the present contract.

The CLIENT expressly authorises CALMABAGS to subcontract the data hosting service used for the management and provision of our services. If you wish to know the identity of the suppliers employed by CALMABAGS, you can request it through the email address
Exercise of Rights

At any time you may exercise the Rights stipulated by law by sending the corresponding request for exercise together with a copy of the official document that identifies you (ID card, driving licence or passport) to the email address
To exercise any of the following rights:
– The right to be informed about how your personal information is used (Included in this notice).
– The right to access the personal information we hold about you.
– The right to request correction of inaccurate personal information we hold about you.
– The right to request erasure of your data, or to stop its processing or collection.
– The right to stop marketing and advertising messages, and to withdraw your consent to other content-based processing at any time.
– The right to request that we transfer or not transfer elements of your data to our service providers, such as the logistics company that delivers the shipments.
– The right to lodge a complaint with the data protection regulator (such as the Spanish Data Protection Agency).
This privacy policy is dated 25/05/2018 and any changes to its terms will be posted on this website.

Cookie Policy
Our website uses cookies, small data files that are generated in the user’s computer, in order to allow you to optimise browsing, adapt the design of the page and improve its contents, with the ultimate aim of providing users with a more satisfactory service.

The information collected by cookies is anonymous and does not contain any sensitive information (such as name, address or bank details) as they do not collect data that can personally identify the user.
Cookies are used in order to provide a more personalised service and to help make browsing the site easier and more tailored to your preferences. Cookies allow us, for example, to manage your shopping basket and retain your order information while you browse our online shop.
Types of cookies used on the Website
The Website uses the following types of cookies:
Analytical cookies: When the user enters the Website, through this tool, anonymous information is collected in a standard way about the user’s browsing and behaviour patterns.
Google Analytics enables cookies in the domain of the Website called:
“__utma”: this is necessary for the operation of Google Analytics and has an expiry period of 2 years.
“__utmz”: is used to track the location of the visit, i.e. from where and how the user has arrived at our website and expires after 6 months.
“_utmb”: This cookie records the time of arrival at the page and expires 30 minutes after the last page view. It is automatically deleted when you change websites or close the browser.
“_utmc”: The current javascript code used by Google Analytics does not require this cookie. Previously this cookie was used in conjunction with the _utmb cookie to determine whether or not a new session should be established for the user after more than 30 minutes on the same page. This cookie is still being written to ensure compatibility with websites where the old urchin.js tracking code is installed.
To allow, know, block or delete cookies installed on your computer you can do so by configuring the browser options installed on your computer. If you wish, you can configure your browser to be notified on screen of the reception of cookies and to prevent the installation of cookies on your hard drive. Please consult the instructions and manuals of your browser for further information.
How to disable cookies:
All browsers allow you to make changes to disable cookie settings. This is why most browsers offer the ability to manage cookies, to gain more precise control over privacy.
These settings are located in the “options” or “preferences” menu of your browser.
Below, you can find the links for each browser to disable cookies by following the instructions:
1. Internet Explorer ( From the tools menu, select “Internet Options”. Click on the privacy tab. You will be able to configure privacy settings with a six-position slider that allows you to control the amount of cookies that will be set: Block all cookies, High, Medium High, Medium (default level), Low, and Accept all cookies.
2. Mozilla Firefox ( – At the top of the Firefox window click on the Tools menu. – Select Options. – Select the Privacy panel. – In the Firefox option you can choose Use custom settings for history to configure the options.
Google Chrome ( – Click on the menu in the toolbar. – Select Settings. – Click Show advanced options. – In the ‘Privacy’ section click the Content Settings button. – In the ‘Cookies’ section you can configure the options.

4. Safari ( / – In the settings menu, select the “preferences” option. – Open the privacy tab. – Select the option you want from the “block cookies” section. – Please note that certain features and the full functionality of the Site may not be available after disabling cookies.
If you do not wish to be tracked by cookies, Google has developed a plug-in to install on your browser which you can access at the following link:
Cookies on mobile devices:
Our Website also uses cookies on mobile devices.
As with computer browsers, browsers on mobile devices allow you to make changes to your privacy options or settings to disable or delete cookies.
If you wish to change your privacy settings, please follow the instructions specified by the developer of your mobile browser.
Below are some examples of links that will guide you through modifying the privacy settings on your mobile device:
IOS: ( Windows Phone: ( Chrome Mobile: ( Opera Mobile: (
Acceptance of cookies:
If you continue browsing, we will understand that you accept the use of cookies by the Website.
We inform you that if you block or do not accept the installation of cookies, it is possible that certain services may not be available without the use of cookies or that you may not be able to access certain services or take full advantage of everything this Website offers you.

For more information, you can consult the Spanish Data Protection Agency’s guide on the use of cookies.
This cookie policy is dated 25/05/2018 and any changes to its terms will be published on this website.

RIGHTS OF USE: Pursuant to article 25 of the current Intellectual Property Law after the wording given by Royal Decree-Law 12/2017 of 3 July, it is prohibited to copy, reproduce, distribute, publish, transmit, broadcast, or in any way exploit any part of this service and/or document without the prior written authorisation of IT Global Services 360, S.L. or the corresponding owners. This document is for the exclusive use of CALMABAGS, represented by Ismael Menacho Perez, for the purpose of the signed agreement. Fraudulent use of the documents provided to the LOPD/RGPD Adaptation Services will be prosecuted and sanctioned by the respective copyright holder.