PRIVACY AND COOKIE POLICY
At Oniricat, we take the protection of your personal data seriously. This page explains clearly what data we may process, why we use it, how long we keep it, who we may share it with and what rights you have.
You will also find information about the cookies and similar technologies used on oniricat.cat and how you can accept, reject or configure them.
The processing of personal data is mainly governed by Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), and any other applicable legislation.
1. Who is the data controller?
You may contact us at this email address with any questions relating to privacy or the processing of your personal data.
2. What data may we process?
Depending on your relationship with Oniricat, we may process the following categories of data:
- Identification data: first name and surname.
- Contact details: postal address, email address and telephone number.
- Order-related data: products purchased, amounts, delivery, returns and incidents.
- Billing data: information required to issue and retain invoices and comply with tax obligations.
- User account data: when you choose to create an Oniricat account.
- Communications: information you provide when contacting us.
- Marketing preferences: for example, whether you have agreed to receive marketing communications.
- Technical and browsing data: IP address, browser, device and information generated through cookies or similar technologies, where applicable.
We do not request special categories of personal data for an ordinary purchase from Oniricat. We recommend that you do not provide sensitive information that is not necessary for us to provide the service.
3. How do we obtain your data?
We may obtain personal data:
- When you place an order through our online shop.
- When you create or use a user account.
- When you send us an enquiry through forms, email or other contact channels.
- When you subscribe to our newsletter or agree to receive marketing communications.
- When you participate in promotions, competitions or similar activities.
- Through cookies and similar technologies when they are necessary or when you have given the corresponding consent.
4. What do we use your data for?
Managing your purchases
We process the information required to manage your order, payment, invoicing, delivery, returns, warranties, incidents and after-sales service.
The main legal basis for this processing is the performance of the sales contract you enter into with Oniricat.
Managing your user account
If you create an account, we use the necessary information to manage it, make future purchases easier, allow you to view orders and provide the features associated with your account.
Responding to enquiries and requests
When you contact us, we process the information you provide so that we can answer your enquiry, resolve an issue or manage your request.
Complying with legal obligations
Certain data may be retained and processed in order to comply with tax, accounting, commercial, consumer-protection or other legal obligations applicable to Oniricat.
Sending marketing communications
If you have given us your consent, we may use your email address to send you news, promotions, product information and other Oniricat marketing communications.
You can withdraw this consent at any time using the link provided in each communication or by writing to dades@oniricat.cat.
Analysing and improving our online shop
Where you have given the relevant consent for cookies that require it, we may analyse browsing and website usage to understand, for example, which pages and products generate the most interest and to identify technical or usability issues.
Advertising and measurement
If you accept advertising or marketing cookies, we may use third-party technologies to measure campaigns, limit repeated advertising and display advertising content related to interests inferred from browsing activity.
These technologies will only be activated where there is an appropriate legal basis and, where required, after obtaining your consent.
5. Legal bases for processing
Depending on the purpose, we may process your data on the basis of:
- Performance of a contract: order management, delivery, payment, returns and user account.
- Compliance with a legal obligation: tax, accounting, commercial or consumer obligations.
- Consent: newsletters, certain marketing communications and non-essential cookies.
- Legitimate interests: where applicable and after assessing that your rights and freedoms do not override those interests.
6. How long do we keep your data?
Data will only be retained for as long as necessary to fulfil the purpose for which it was collected and subsequently for any periods required by law.
- Order and billing data: for the duration of the contractual relationship and for the periods required to comply with applicable tax, accounting and legal obligations.
- User account: while the account remains active or until you request its deletion, without prejudice to information we are legally required to retain.
- Enquiries and incidents: for the time required to deal with them and for any applicable liability periods.
- Marketing communications: until you withdraw your consent or object to receiving them.
- Cookies: for the periods specified in the consent manager or in the information relating to each cookie.
7. Who may we share your data with?
We do not sell your personal data.
We may disclose or allow access to certain information to service providers we need in order to provide our services, always in accordance with applicable law.
- Transport and logistics companies required to deliver orders.
- Payment service providers and payment gateways.
- Web hosting, infrastructure, maintenance and technology service providers.
- Billing, accounting and administrative service providers.
- Email communication and newsletter service providers.
- Analytics, measurement or advertising providers, only where permitted by the cookie configuration and applicable legal basis.
- Public authorities, courts or other authorities where required by law.
Where these providers process data on behalf of Oniricat, they act as data processors and are subject to the corresponding data-protection obligations.
8. International data transfers
Some technology providers may process information outside the European Economic Area. Where this occurs, we will apply the safeguards required by data-protection law, such as European Commission adequacy decisions, Standard Contractual Clauses or other legally recognised mechanisms.
9. What are your rights?
Where applicable, you may exercise the following rights:
- Access: to know what personal data we process about you.
- Rectification: to correct inaccurate or incomplete information.
- Erasure: to request the deletion of your data where the legal requirements are met.
- Objection: to object to certain processing activities.
- Restriction: to request the temporary restriction of certain processing activities.
- Data portability: to receive certain data in a structured and interoperable format.
- Withdrawal of consent: to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise these rights, you may write to dades@oniricat.cat or to Oniricat, Carrer Cadis, 6, ground floor, 08911 Badalona (Barcelona), Spain.
Please indicate which right you wish to exercise and provide the information required to identify your request. We will only ask for additional documentation to verify your identity where necessary.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe that the processing of your data does not comply with applicable law.
10. Information security
Oniricat applies appropriate technical and organisational measures to protect personal data against destruction, loss, alteration, unauthorised disclosure or access, taking into account the nature of the data, the risks and the state of the art.
However, no system connected to the Internet can guarantee absolute security.
11. Changes to this policy
We may update this privacy policy when necessary to reflect legislative or technical changes or changes to Oniricat's services.
The version published on this page will be the version in force at any given time.
COOKIE POLICY
12. What are cookies?
Cookies are small files or pieces of information that a website may store in a user's browser or device.
They may be used, among other things, to maintain a logged-in session, remember preferences, ensure that the shopping cart works correctly, obtain browsing statistics or measure advertising campaigns.
13. What types of cookies do we use?
Necessary or technical cookies
These are necessary for the online shop to work correctly. For example, they make it possible to manage the shopping cart, remember certain preferences, maintain a session and provide security functions.
These cookies do not require consent when they are strictly necessary to provide a service requested by the user.
Preference cookies
These cookies make it possible to remember certain choices made by the user, such as language or other browsing-related preferences.
Analytics cookies
These allow us to obtain statistical information about website usage, such as the number of visits, pages viewed or certain interactions with the shop.
Where these cookies require consent, they will only be activated after you have accepted them.
Advertising and marketing cookies
These may be used to measure campaign effectiveness, limit repeated advertising or display advertising related to interests inferred from browsing activity.
These non-essential cookies will only be used where you have given your consent.
14. First-party and third-party cookies
First-party cookies are managed directly by Oniricat or by the infrastructure used to provide the service.
Third-party cookies are managed by other companies that provide certain services on our website, such as analytics, payment, external content, measurement or advertising.
The specific list of cookies, providers, purposes and retention periods can be consulted in the cookie settings panel available on the website.
15. How can you manage cookies?
When you access Oniricat, you can decide how non-essential cookies are used through our consent management tool.
You can:
- Accept cookies that require consent.
- Reject them and continue using strictly necessary cookies.
- Configure them according to the available categories.
You may subsequently change your choice using the cookie settings options available on the website.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
16. What happens if you reject cookies?
You can continue browsing Oniricat even if you reject cookies that are not necessary.
However, if you block strictly necessary cookies through your browser settings, some shop functions —such as the shopping cart, login or certain preferences— may not work correctly.
17. Further information and contact
If you have any questions about this privacy policy or the use of cookies, please contact us at dades@oniricat.cat.
You can also consult our Legal Notice.
Last updated: September 2026.
