Shop information

Privacy

This is a courtesy translation. The Spanish version is the only binding one and prevails in case of doubt. Read the Spanish version

Data controller and contact

Controller: José Manuel Hidalgo Remujo, tax ID (NIF/CIF) 74881161S, address Calle San Juan nº 3 29005 Málaga. You can write to contacto@latiendadelascolonias.com about any privacy matter.

Data and purposes

When you buy as a guest, we process the contact, delivery and order details needed to confirm the transaction, handle the payment, prepare the delivery or collection and deal with any incidents. Your email address is used for the order communications, without subscribing you to advertising.

Legal basis and retention

Processing the order is based on the contract; certain retention obligations are based on the law. The optional analytics with PostHog and Hotjar are based on your consent, which you can withdraw from cookie preferences. We keep each order’s data for as long as it is needed to handle it and deal with incidents and guarantees, and then for the periods required by law (six years for commercial records). The encrypted backups are kept for up to one year and are then deleted automatically.

Recipients and services

Payment takes place on Redsys: card details never pass through our server. Self-hosted Umami counts visits without cookies. PostHog (PostHog Inc., with the data hosted in the European Union) and Hotjar only switch on with your permission, and they do not record the purchase pages or the forms with personal data.

In addition, these providers process data on the shop’s behalf to provide the service: OVHcloud hosts the website in a data centre in London (United Kingdom), a country with an adequacy decision from the European Commission; Brevo sends the order emails from the European Union, and Cloudflare keeps the encrypted backups in the European Union. The map on the home page, “Our shop” and “Contact” is served by Google, as explained in the cookie policy.

Your rights

You can request access, rectification, erasure, objection, restriction and portability, where applicable, by writing to contacto@latiendadelascolonias.com. You can also lodge a complaint with the Spanish Data Protection Agency (AEPD). To verify your request, we may ask for information proportionate to your case.

Reference: right to information, AEPD.