Privacy policy

In compliance with EU Regulation 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD), we inform you how we process the personal data collected through europemagicwand.es.

1. Data controller

Identity: José Antonio Vargas Lebrón
Tax ID: 75788548Y
Address: Calle Miguel Hernández, 11, 11510 Puerto Real, Cádiz (España)
Email: info@europemagicwand.es

2. Data collected and purposes of processing

We collect only the personal data strictly necessary for each purpose:

Order management: name, surname, shipping and billing address, email, phone and selected payment method. Required for the performance of the purchase contract.
User account: email address and password (encrypted). Required for creating and managing your personal account.
Customer service: data provided in contact forms or email communications. Processed to respond to your query or complaint.
Marketing communications: only if you have given your express consent, your email address for sending offers and news. You may withdraw this consent at any time.
Legal obligations: billing data retained in accordance with tax and commercial legislation.

3. Legal basis for processing

Performance of a contract (Art. 6(1)(b) GDPR): processing necessary for order management and service delivery.
Consent of the data subject (Art. 6(1)(a) GDPR): marketing communications.
Legitimate interest (Art. 6(1)(f) GDPR): website security and fraud prevention.
Legal obligation (Art. 6(1)(c) GDPR): retention of invoices and tax data.

4. Retention period

Order and billing data: 6 years under the Spanish Commercial Code.
User account data: for as long as the account is active. After cancellation, deleted within 30 days, unless legally required to be retained.
Marketing data: until you withdraw your consent.
Customer service data: for the time needed to resolve your query and applicable legal limitation periods.

5. Recipients and international transfers

Data is not shared with third parties, except in the following cases:

Payment service providers: PayPal and SumUp, solely to process the order payment.
Courier companies: name, address and contact phone are provided for order delivery.
Legal obligation: when required by competent authorities.

PayPal may carry out international data transfers covered by appropriate safeguards under the GDPR (standard contractual clauses or equivalent mechanisms).

6. Your rights

You may exercise the following rights at any time:

Access: to know what personal data we process about you.
Rectification: to correct inaccurate or incomplete data.
Erasure: to request deletion of your data when, among other circumstances, it is no longer needed for the purpose for which it was collected.
Objection: to object to processing of your data, including direct marketing.
Restriction of processing: to request that processing of your data be restricted in certain circumstances.
Data portability: to receive your data in a structured, commonly used, machine-readable format.
Withdrawal of consent: to revoke your consent at any time without affecting the lawfulness of prior processing.

To exercise these rights, send a written request to info@europemagicwand.es or to the postal address Calle Miguel Hernández, 11, 11510 Puerto Real, Cádiz (España), stating your name, ID number and the right you wish to exercise. You have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security

We implement the technical and organisational measures necessary to ensure the security of your personal data and prevent its alteration, loss, unauthorised processing or access. All communications between your browser and our website are encrypted via HTTPS/TLS.

8. Changes to this policy

We reserve the right to update this Privacy Policy to reflect legislative changes or changes to our activities. The current version will always be available on this page.