Data controller
- Identity: Maitsi Jiudej Dellacasa Prince — NIE Z1748763D
- Address: Calle Creta, 80, BW 293, 03130 Santa Pola, Alicante, España
- Contact: [email protected]
- Data Protection Officer: None appointed. The processing does not fall within the cases in article 37 GDPR that require one.
What we process, why, and on what legal basis
Contact form
- Data: what you enter in the form, together with the date of consent and your browsing language. We do not store your IP address.
- Purpose: to deal with your enquiry and reply to you.
- Legal basis: your consent (art. 6(1)(a) GDPR), given by ticking the relevant box. The box is never pre-ticked.
- Retention: one year from our last communication with you. If your enquiry leads to a purchase, the data moves to the contract and tax legal bases and follows the longer periods set out below.
Shop purchases
- Data: identification and contact details, delivery and billing address, and order details. Your card details are handled directly by the payment provider; we do not store them.
- Purpose: to process the order, arrange delivery, issue the invoice and handle guarantees and returns.
- Legal basis: performance of the contract (art. 6(1)(b) GDPR) and compliance with tax and accounting obligations (art. 6(1)(c) GDPR).
- Retention: for the duration of the contractual relationship and thereafter for the limitation period of the applicable legal obligations — generally six years under article 30 of the Spanish Commercial Code for commercial records, and four years for tax purposes.
User account
If you create an account, we process your registration details and order history so that you can access them. Legal basis: performance of the contract. Retention: for as long as the account remains active.
Google’s post-purchase survey
When you complete an order, the confirmation page shows a Google Customer Reviews window asking whether you would like to receive a short survey about your shopping experience.
- Data: to show that window, Google is given the order number, your email address, the delivery country, the estimated delivery date and, where they exist, the GTIN codes of the products bought.
- Purpose: for Google to send you, only if you accept, a survey about the purchase after the delivery date. Ratings are published in aggregate as the shop’s rating.
- Legal basis: your consent (Art. 6(1)(a) GDPR), given by accepting in Google’s own window. If you close it or do not accept, you will receive no survey. Taking part is not needed for the purchase and does not affect your order in any way.
- Who handles the survey: Google, as an independent controller, under its privacy policy. You can withdraw your consent or exercise your rights with Google, or write to us and we will tell you how.
Cookies and advertising
Non-essential cookies are set only if you consent. The detail is in the cookie policy. Legal basis: your consent, which you may withdraw at any time.
Recipients and processors
To provide the service we use the following suppliers, which access personal data as processors:
- Stripe — payment processing.
- Google (Workspace) — business email.
- Klarna Bank AB and Amazon Pay — only if you choose one of those payment methods. In Klarna’s case the bank acts as an independent controller in order to assess the financing, not as a processor on our behalf.
- Google (Analytics) — site usage statistics, only with your consent.
- Google (Customer Reviews) — post-purchase survey, only if you accept it. Google acts as an independent controller of the survey, not as a processor on our behalf.
- Google (AdSense) — advertising on blog pages, only with your consent.
- DigitalOcean — website hosting (data centre in Amsterdam, Netherlands).
- Correos — carriage and delivery of orders.
- Tax and accounting advisers — access to invoicing records so we can meet our accounting and tax obligations.
Your data will also be disclosed to the tax authorities and to banks where there is a legal obligation to do so.
International transfers
Some of the suppliers named above are US companies that may process data outside the European Economic Area. These transfers rely on the Standard Contractual Clauses approved by the European Commission or, where applicable, on the EU-US Data Privacy Framework for participating entities. You may ask us for a copy of the safeguards applied.
Your rights
You may exercise the following rights at any time by writing to [email protected], stating the right you wish to exercise and enclosing a copy of a document proving your identity:
- Access — to know what data of yours we process.
- Rectification — to correct inaccurate data.
- Erasure — to ask us to delete data that is no longer necessary.
- Restriction of processing in the cases provided for by law.
- Portability — to receive your data in a structured, commonly used format.
- Objection to processing on grounds relating to your particular situation.
- Withdrawal of consent at any time, without affecting the lawfulness of processing carried out beforehand.
We will reply within one month at most. If you believe we have not dealt with your request properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid.
Automated decisions and minors
We do not take automated decisions producing legal effects concerning you, nor do we carry out profiling for that purpose.
The services on this site are not directed at children under 14. We do not knowingly collect data from children of that age without the consent of whoever holds parental responsibility.
Security
We apply appropriate technical and organisational measures to protect your data, including TLS encryption of traffic and access control to our systems.
Last updated: 7 October 2026. We keep dated copies of previous versions. If anything in this document is unclear, write to [email protected] and we will explain it.