On this page we explain what personal data we collect on lagaleriadealiciaprado.com, what we use it for and what rights you have. We comply with the General Data Protection Regulation (Regulation (EU) 2016/679, «GDPR») and Spain's Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights.
1. Data controller
The data controller is Pablo Antonio Sola Prado, owner of this website, whose identification details are set out in the legal notice. Contact: alicia@lagaleriadealiciaprado.com.
2. What data we process and why
- Purchases. When you place an order, we process your name, address, email, phone number and the order details in order to take payment, send it to you, handle returns and meet our accounting and tax obligations. Legal basis: performance of the sales contract and compliance with legal obligations.
- Customer account. If you create an account, we keep your login details and your orders so that you can view them. Legal basis: performance of the contract.
- Enquiries. If you write to us by email, through the contact form or on social media, we use your name, email and message to reply to you. Legal basis: your consent and, if you are asking about a purchase or a commission, steps taken prior to entering into a contract.
- Cookies and statistics. Only with your permission, which you manage in the cookie notice, do we use Google and Meta tools to measure visits and improve the website. More information in the cookie policy.
Card payments are processed directly by the payment gateway: we never see or store your card details.
3. Who else receives your data
We do not sell or pass on your data. It is only shared, as far as strictly necessary, with the providers who help us deliver the service:
- The payment platforms: WooPayments (Stripe) and PayPal.
- Courier companies and the Packlink shipping platform, to deliver your order.
- The website hosting company and the technical services needed for it to run.
- Google and Meta, only if you accept the relevant cookies.
- The Spanish Tax Agency, when required by law.
Some of these providers may process data outside the European Economic Area. In that case they do so with the safeguards provided for in the GDPR, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
4. How long we keep it
Order data is kept for the periods required by tax and commercial law, generally between four and six years. Enquiry data is kept for as long as needed to deal with them. Account data is kept until you ask us to delete your account.
5. Your rights
You can request access to, rectification or erasure of your data, restriction of or objection to its processing, and its portability, and you can withdraw your consent at any time. Write to us at alicia@lagaleriadealiciaprado.com stating which right you wish to exercise.
If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
6. Security
The website uses an encrypted connection (HTTPS) and we apply technical and organisational measures to protect your data.