This policy explains how personal data is handled on this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Data controller
- Controller: José Miguel Aparicio Santos
- NIF: 51385127E
- Address: Calle San Benito 4, 4º C, 28029 Madrid, Spain
- Email: jmapa64@hotmail.com
What data is collected, why, and on what legal basis
| Data | Purpose | Legal basis |
|---|---|---|
| Name, address, email, telephone | Processing and delivering your order | Performance of a contract |
| Billing details | Issuing invoices and meeting tax obligations | Legal obligation |
| Email address | Newsletter about new pieces, if you subscribe | Your consent |
| Messages sent through the contact form | Answering your enquiry | Consent / pre-contractual steps |
| Browsing data | Site operation and statistics | Consent (cookies) |
No special categories of data are collected, and no automated decision-making or profiling takes place.
Who receives your data
Data is shared only with the providers strictly required to fulfil your order, each acting as a data processor under contract:
- The hosting provider of this website
- The payment service provider used at checkout, which processes payment data directly — card details are never stored on this website
- The carrier that delivers your order
- The accountant, for tax obligations
No data is sold or transferred to third parties for any other purpose. Where a provider is located outside the European Economic Area, transfers are made under the safeguards provided for in Chapter V of the GDPR.
How long data is kept
Order and billing data is kept for the periods required by Spanish commercial and tax law (currently six years for accounting records, four for tax purposes). Newsletter data is kept until you unsubscribe. Contact-form messages are kept for one year.
Your rights
You may withdraw your consent at any time and exercise your rights of access, rectification, erasure, restriction, portability and objection by writing to jmapa64@hotmail.com, attaching a copy of an identity document.
If you believe your data has been handled improperly you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
Security
Appropriate technical and organisational measures are in place to protect your data. The site is served over an encrypted connection (HTTPS).
Cookies
This site uses cookies. See the Cookie Policy for details and to manage your preferences.