In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR), and with Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD, the Spanish implementing law), the User is informed of the following.
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Management and processing of orders placed through the Portal | Performance of a contract (Art. 6.1.b) |
| Handling inquiries submitted via contact forms | Performance of a contract / legitimate interest (Art. 6.1.b and 6.1.f) |
| Sending commercial and promotional communications | Consent of the data subject (Art. 6.1.a) |
| Personalisation of browsing experience | Consent of the data subject (Art. 6.1.a) |
| Compliance with legal obligations (invoicing, tax) | Legal obligation (Art. 6.1.c) |
Consent for sending commercial communications will be requested expressly, specifically, and independently of other purposes, through a non-pre-ticked consent checkbox. The User may withdraw consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
The data processed are those voluntarily provided by the User through the Portal’s forms (identification, contact details, delivery address) and, where applicable, the data necessary to process payment. The Company does not store full credit card numbers.
Data will be retained for as long as necessary to fulfil the purpose for which it was collected and, thereafter, for the applicable statutory limitation periods (for reference: tax and accounting obligations, up to 6 years under the Spanish Commercial Code). Data processed for commercial purposes will be retained until the User withdraws consent.
Data may be shared with:
No international data transfers take place outside the European Economic Area, unless expressly stated for a specific provider, in which case the applicable safeguards will be disclosed (e.g. Standard Contractual Clauses).
The User may exercise the following rights at any time by writing to the Company (postal address or email listed in Section 1), enclosing a copy of an identity document:
The User also has the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), via its electronic office (www.aepd.es), if they consider that the processing of their data does not comply with applicable regulations.
The Company applies technical and organisational measures appropriate to the risk of processing, in accordance with Article 32 GDPR, to ensure the confidentiality, integrity, and availability of personal data and to prevent its loss, alteration, unauthorised processing, or unauthorised access.
The Portal’s services are intended for adults. The Company does not knowingly collect data from minors without the consent of their parents or legal guardians.
This Privacy Policy may be amended to reflect legislative or case-law developments. Periodic review is recommended.
