Privacy policy
We only collect what is needed to answer your request, and we do not sell any data.
Translation provided for information: in the event of any discrepancy between the versions, the French version prevails. Version française
Data controller
MAJESTICS BUSINESS SL (Tropic Spa), Baixada del Molí n° 16, edifici Prat de Tobira 2, 1er étage, porte 4, AD500 Andorra la Vella, Principauté d'Andorre. For any question about your data: contact@tropicspa.fr.
Your data is processed in accordance with the General Data Protection Regulation (GDPR) and Andorran Qualified Law 29/2021 of 28 October on the protection of personal data.
The data we receive
- When you fill in a form (quote, monthly payments, brochure, call-back, video tour, contact, current offer, referral): your first and last name, telephone, e-mail, postcode, the model or size of hot tub you are interested in, the timeframe of your project, when to reach you and your message. With your request, we also record the choice you made in the cookie banner.
- Referral: your contact details and those of the person you recommend to us. When we contact them, we tell them that their details were passed on to us by you; they can ask us to delete them at any time.
- Where your visit came from, only if you have accepted cookies: landing page, referring site, advertising campaign and ad click identifier (Google, Microsoft, Meta). It is kept for 90 days at most, so that it can be linked to your request if you write to us later.
- Security: an encrypted fingerprint of your IP address, whose key changes every day, to limit abusive submissions. The address itself is not kept.
Why, and on what basis
| Use | Legal basis |
|---|---|
| Answering you, calling you back and preparing a quote | Pre-contractual measures taken at your request |
| Managing the sale, delivery, warranty and after-sales service if you become a customer | Performance of the contract and legal obligations |
| Contacting the person you recommend to us (referral) | Legitimate interest |
| Sending you our offers by e-mail | Your consent (tick box), which you can withdraw at any time |
| Measuring which ads bring requests and sales, including by sending Google Ads the identifier of the ad click behind your request and its outcome | Your consent (cookie banner) |
| Counting visits to the site (traffic statistics) | Legitimate interest, with the option to object |
| Preventing abuse and securing the site | Legitimate interest |
We do not sell any data.
Who receives your data
- The Tropic Spa advisors handling your request.
- Our technical service providers, acting on our behalf: the site's host, Hostinger (server located in France), and our e-mail delivery provider.
- If you become a customer: the carrier you choose from our official carriers (article 9 of the general terms and conditions of sale) and, for payment in monthly instalments, the financing company that reviews your application.
- Only with your consent (cookie banner): Google (Google Analytics, Google Ads) and Microsoft (Microsoft Advertising). Only the requests of visitors who have accepted cookies are sent to Google Ads.
Transfers outside the European Union
Google, Microsoft and some technical service providers may process data outside the European Union, in particular in the United States. These transfers are governed by the EU–US Data Privacy Framework, to which Google and Microsoft adhere, or by the European Commission's standard contractual clauses. MAJESTICS BUSINESS SL is established in Andorra, a country recognised by the European Commission as providing an adequate level of protection.
How long
- Requests not followed up: deleted automatically 3 years after the last contact.
- Customers: for the duration of the business relationship, then for the duration of legal obligations (warranty, accounting).
- Where your visit came from (with your consent): 90 days at most; if you make a request, it is kept with it.
- Site traffic statistics: 13 months.
- Database backups: 14 days. Deleted data therefore also disappears from backups within 14 days at most.
Cookies and trackers
| Tracker | What it is for | Duration | Consent |
|---|---|---|---|
| sessionid | Showing the confirmation of your request and pre-filling your details if you make another | 8 hours | Not required |
| csrftoken | Form security | 1 year | Not required |
| ts-consent, ts_consent | Remembering your choice in the cookie banner | 6 months | Not required |
| ts-audience-off | Remembering your objection to the site's audience measurement (browser storage) | Until you change your mind | Not required |
| ts_origin | Linking your request to the ad that brought you | 90 days | Required |
| _ga, _ga_… (Google Analytics) | Visit statistics | 13 months | Required |
| _gcl_au, _gcl_aw (Google Ads) | Measuring requests generated by our ads | 90 days | Required |
| _uetsid, _uetvid, _uetmsclkid (Microsoft Advertising) | Measuring requests generated by our ads | 1 day to 13 months | Required |
Google and Microsoft tools load only after your consent in the banner. You can change your mind at any time with the "Manage cookies" link at the bottom of every page: if you withdraw your consent, the Google and Microsoft cookies set by our site are deleted. Refusing has no effect on your visit.
Videos
Testimonial videos are hosted by YouTube (Google). Their thumbnails are served by our site: nothing is loaded from YouTube until you click on a video. When you click, the player loads from youtube-nocookie.com; YouTube then receives your IP address and applies its own privacy rules.
Site audience measurement
The site counts its own visits, without cookies and without any outside service: pages viewed, landing page, where the visit came from (search engine, social network, campaign), device type and clicks on the phone number. A visitor is only recognised for the day, through an encrypted fingerprint of their IP address and browser whose key changes every day; the IP address is never kept. These statistics are used only to measure traffic to the site and are kept for 13 months.
You can object at any time: stop being counted on this device. Your browser's "Global Privacy Control" setting is also respected. To reverse this choice: be counted again.
Your rights
You can request access to your data, its rectification, erasure, restriction of its use or its portability, object to its use (in particular to direct marketing, at any time), withdraw your consent and give instructions on what happens to your data after your death. Write to contact@tropicspa.fr or to MAJESTICS BUSINESS SL, Baixada del Molí n° 16, edifici Prat de Tobira 2, 1er étage, porte 4, AD500 Andorra la Vella, Principauté d'Andorre. If there is reasonable doubt about your identity, we may ask you for proof.
You can also lodge a complaint with the data protection authority of your country, for example the CNIL in France (www.cnil.fr), or with the Andorran Data Protection Agency (www.apda.ad).