1. Controller
The controller responsible for processing your personal data is Allogio SA, Valladolid, 4, 03130 Santa Pola, Spain, [email protected], +34 655 12 05 59. No data protection officer has been appointed; please send privacy requests to [email protected].
2. Personal data we collect
Checkout
When you place an order: first and last name, email address, phone number, delivery address (country, address, apartment/suite, city, postal code), optional order notes, the products ordered, prices, currency, delivery method and any promo code.
Contact form
Your name, email address, optional order number and your message.
Browser storage
Your cart, wishlist, selected currency and cookie preferences are stored locally in your browser and are not sent to our servers except when you place an order. See our Cookie Policy.
3. Purposes and legal bases
- Processing and delivering orders — performance of a contract (Art. 6(1)(b) GDPR).
- Answering enquiries — performance of a contract or pre-contractual steps, or our legitimate interest in responding (Art. 6(1)(b)/(f)).
- Accounting and tax obligations — legal obligation (Art. 6(1)(c)).
- Optional analytics/marketing cookies — your consent (Art. 6(1)(a)); not used unless you opt in.
4. Retention
Order data is kept for as long as necessary to fulfil the order and to meet statutory retention obligations (for example tax and commercial record-keeping) under applicable law. Contact enquiries are deleted when no longer needed.
5. Processors and recipients
We use service providers who process data on our behalf under data processing agreements, including hosting and database infrastructure, email delivery (once configured) and delivery carriers for shipping your order.
6. International transfers
Where a provider processes data outside the European Economic Area, we rely on appropriate safeguards such as an adequacy decision or the European Commission's Standard Contractual Clauses.
7. Security
We use technical and organisational measures to protect your data, including encrypted connections, restricted server-side access to order data and access controls that prevent customers' data being read by other visitors.
8. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time without affecting the lawfulness of prior processing. To exercise your rights, contact [email protected].
9. Right to complain
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work or place of the alleged infringement. In Spain, the supervisory authority is the Agencia Española de Protección de Datos (AEPD), https://www.aepd.es.
10. Changes
We may update this policy. The current version is always available on this page.