Privacy Policy
Last updated: 3 August 2026
Data controller
JS International Duty Free Agents
Cl. Aguere 9, Edificio Torres de Cristal Local 1
38005 Santa Cruz de Tenerife, Canary Islands, Spain
Email: direccion@jsdutyfreeagents.com
We are responsible for the personal data described below. This policy covers the website jsdutyfreeagents.com only. It should be read together with our Cookie Policy.
What we collect, and why
This website is a static brochure site. It has no contact form, no account registration, no newsletter sign-up, no shopping cart and no analytics. We do not sell personal data and we do not use it for automated decision-making or profiling.
| What | Where it comes from | Why | Legal basis | Retention |
|---|---|---|---|---|
| Cookie preference | The choice you make in the cookie banner | To remember your decision and honour it on later visits | Legitimate interest in complying with consent rules (Art. 6(1)(f) GDPR) | 6 months |
| IP address, user agent, requested URL, timestamp | Automatically, in the server and CDN logs of our hosting provider | To deliver pages, keep the site available, and defend it against attacks and abusive traffic | Legitimate interest in the security and availability of the site (Art. 6(1)(f) GDPR) | Short-term, in line with our hosting provider’s log retention |
| Your name, email address and the content of your message | Only if you write to us using the email link on the site | To read and answer your enquiry and to manage the resulting business relationship | Legitimate interest / performance of a contract or steps prior to it (Art. 6(1)(b) and (f) GDPR) | For as long as needed to handle the matter and to meet Spanish commercial and tax retention duties |
| Video-player cookies and browser storage | YouTube, only after you opt in | To play the embedded videos | Your consent (Art. 6(1)(a) GDPR) | See the Cookie Policy |
The email address on this site is a plain mailto: link. Writing to us is entirely your choice,
and nothing is transmitted to us until you send the message from your own mail client.
Who receives your data
We do not sell or rent personal data. We share it only with the service providers needed to run the site, each acting under a data-processing agreement or their own controller responsibility:
- Cloudflare, Inc. — hosting, CDN and security for this website. Processes connection data
and server logs, and may set the
__cf_bmbot-management cookie. - Google Ireland Limited — YouTube, and only after you consent to the video player. Our web fonts are self-hosted, so no font request reaches Google.
- Our email provider — receives and stores messages you send us.
If you decline the video player, no personal data of yours reaches Google at all.
Transfers outside the EEA
Cloudflare and Google are US-headquartered. Where personal data is transferred to the United States, the transfer relies on the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses together with supplementary technical measures. You may request a copy of the relevant safeguards from the address above.
Cookies and similar technologies
The site sets no tracking cookies of its own. A full inventory — names, providers, retention and purpose — is in the Cookie Policy. You can change or withdraw your consent at any time using the Cookie preferences link in the footer.
Your rights
Under the GDPR and Spanish Organic Law 3/2018 (LOPDGDD) you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to our processing, including processing based on legitimate interest;
- receive your data in a portable format;
- withdraw consent at any time, without affecting the lawfulness of processing already carried out.
To exercise any of these, write to direccion@jsdutyfreeagents.com. We will respond within one month. If you are not satisfied, you may lodge a complaint with the Spanish Data Protection Agency, Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid.
Security
The site is served over HTTPS only. Access to our systems and to the mailbox receiving your enquiries is restricted to authorised personnel.
Children
This site addresses business partners in the duty free and travel retail trade. It is not directed at children, and we do not knowingly collect data from them.
Changes
We update this policy when the site or the services behind it change. The date at the top shows when it was last revised; material changes affecting cookies will also trigger a new consent request.