Política de privacidad

The data controller is GORRAS BEIRETS SL, Calle Naranjo 1, 13270 Almagro, Ciudad Real, Spain. For any question about your data, or to exercise any of the rights below, write to support@gorrasbeirets.shop or call +34 1172509694.

We are not required to appoint a data protection officer and have not appointed one. The address above reaches the people who actually handle the data.

We collect nothing beyond this. We do not ask for a date of birth, an identity number or any special category of data, and we have no use for them.

Marketing consent is always a separate tick box from the processing needed to handle your order or answer your question. The two are never bundled, and refusing marketing has no effect on anything else. Every newsletter carries a one-click unsubscribe link and we act on it the same day.

Where processing rests on consent you may withdraw it at any time. Withdrawal does not affect the lawfulness of what was done before it.

We share the minimum necessary with processors acting on our instructions under written contracts:

• Hosting and infrastructure — to serve the site and store submissions.
• Carriers — name, address and telephone, to deliver the parcel.
• Payment provider — to take payment. They act as their own controller for the card data they handle.
• Email delivery — to send order confirmations and the newsletter.

We do not sell personal data, we do not share it for anyone else's marketing, and we do not build advertising profiles.

Some of these providers operate outside the European Economic Area. Where that is the case, transfers rest on an adequacy decision of the European Commission or on the Standard Contractual Clauses together with the supplementary measures the case requires. Write to us for details of the safeguards in place for a particular transfer.

• Access — a copy of the data we hold about you.
• Rectification — correction of anything inaccurate or incomplete.
• Erasure — deletion, where we have no overriding obligation to keep it.
• Restriction — a pause on processing while a dispute is resolved.
• Portability — data you gave us, in a structured machine-readable form.
• Objection — to processing based on legitimate interest, and to direct marketing at any time and without qualification.
• Withdraw consent — at any time, without affecting past processing.

Write to support@gorrasbeirets.shop. We answer within one month and free of charge. We may ask you to confirm your identity before we release data, which protects you rather than us.

This site is not intended for anyone under 13 and we do not knowingly collect data from them. Anyone aged 13 to 17 needs the consent of a parent or guardian, and an order for a minor must be placed by that adult, who is the contracting party. If you believe a child has given us data, write to support@gorrasbeirets.shop and we will delete it.

The site is served over HTTPS throughout. Access to submitted data is limited to the people who need it to do their work, and it is held on infrastructure inside the European Economic Area unless a transfer safeguard described above applies. If a breach ever occurs that is likely to result in a risk to your rights, we notify the AEPD within 72 hours and tell you directly where the risk is high.

Cookies are covered separately in the cookie policy, including how to change a choice you have already made. If we change this notice materially we will say so here and, where the change affects processing you consented to, ask again.