Privacy

Data controller

The controller of your personal data is demo, s.l, tax ID ESDEMO1, registered at direccion, girona, España. You can contact us at admin@ecomgi.com.

The technical operation of this shop is provided by a supplier acting as a processor, under a processing agreement pursuant to Article 28 GDPR and with no access to your data for its own purposes.

What we process and why

Order and invoicing data (name, delivery and billing address, email, telephone and, if provided, tax or VAT number). Purpose: handling your order, delivery, payment and invoicing. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and legal obligation for tax and accounting purposes (Art. 6(1)(c)).

Account data (email and access log). Purpose: letting you see your orders, invoices and addresses without typing them again. Legal basis: performance of the contract.

Messages you send us about an order. Purpose: answering you. Legal basis: performance of the contract and legitimate interest in customer service.

Browsing data for measurement or advertising, only if you accept it. Legal basis: your consent (Art. 6(1)(a)), which you may withdraw at any time.

How long we keep it

Order and invoice data is kept for the applicable tax and commercial limitation periods (generally between four and six years depending on the obligation).

Account data is kept while your account is active. If you ask us to delete it, we will, except for what we must keep by law.

Your cookie choice is kept for a maximum of 12 months; after that we ask again.

Who receives it

The carrier, so your order can be delivered.

The payment provider you choose, which processes the transaction as its own controller. If you pay by card, the card details are entered directly into the payment gateway: this shop never sees or stores them.

Tax authorities and our accountants, where there is a legal obligation.

Data is never sold or shared with third parties for advertising purposes.

Transfers outside the European Union

Data is generally hosted on servers located in the European Union. If a service you have accepted involves an international transfer, it will be made with the safeguards of Chapter V GDPR (adequacy decision or standard contractual clauses).

Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to admin@ecomgi.com, stating which right you are exercising. It is free of charge and we will reply within one month.

You may also withdraw any consent you have given at any time, without affecting the lawfulness of processing carried out beforehand.

If you believe your request was not handled properly, you may lodge a complaint with Agencia Española de Protección de Datos (www.aepd.es).

Security

The shop is served entirely over an encrypted connection (HTTPS). You sign in through a single-use link sent to your email — there are no passwords for us to keep — and those links are stored hashed. Internal access to data is limited to staff who need it.

Automated decision-making

No automated decisions or profiling with legal effects concerning you are carried out.