The legal basis for the processing of data is, depending on the purpose: the execution of a contract or pre-contractual relationship (order management, user accounts), the consent of the data subject (newsletter, comments), and compliance with legal obligations applicable to the company (tax and accounting obligations).
For the provision of the service, the data may be processed by the following data processors, with whom the company has signed the corresponding data processing agreements in accordance with Article 28 of the GDPR:
Some of the providers indicated above may be located outside the European Economic Area. In such cases, the transfer is carried out by adopting the appropriate guarantees provided for in the GDPR (standard contractual clauses approved by the European Commission, adequacy decisions, or other legally valid mechanisms).
The user may at any time exercise their rights of access, rectification, erasure, objection, restriction of processing, and data portability, by contacting the company via the email address indicated in section 1, attaching a copy of a document proving their identity. Likewise, the user has the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if they consider that the processing of their data does not comply with current regulations.
the company has adopted the necessary technical and organizational measures to guarantee the security of personal data and prevent its alteration, loss, treatment or unauthorized access, in accordance with Article 32 of the GDPR.
This privacy policy may be updated to adapt to legislative or jurisprudential developments, as well as industry practices. The user is recommended to review it periodically.
