In compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD), we inform you about the processing of your personal data.
Data controller
Diastole Art
Website: diastoleart.com
Contact: diastoleart@gmail.com
Data we collect
We collect the data you provide us when making a purchase or contacting us:
- Identification data: first and last name
- Contact data: email address and phone number
- Shipping data: postal address
- Payment data: securely processed by Stripe (we do not store card details)
Purpose of processing
- Order management: process, ship, and confirm your purchases.
- Transactional communications: send you updates on the status of your order.
- Legal obligations: compliance with accounting and tax obligations.
- Analysis and improvement: improve the functioning of the site (only with your consent).
Legal basis
Processing is based on the performance of the sales contract (art. 6.1.b GDPR), compliance with legal obligations (art. 6.1.c) and, where applicable, your consent (art. 6.1.a).
Data retention
Order data is retained for the legally required period (a minimum of 5 years due to tax and commercial obligations). Analytics data is retained according to the duration of each cookie.
Recipients
Your data may be shared with:
- Stripe: payment gateway (GDPR and PCI-DSS compliant).
- Packlink PRO: shipping management.
- Google Analytics: website usage analysis (only with your consent).
We do not share your data with third parties for marketing purposes without your express consent.
Your rights
You can exercise the following rights at any time by writing to diastoleart@gmail.com:
- Access: know what data we hold about you.
- Rectification: correct inaccurate data.
- Erasure: request the deletion of your data.
- Portability: receive your data in a structured format.
- Objection and restriction: object to certain types of processing.
You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es
Security
We apply technical and organisational measures to protect your data against unauthorised access, loss, or alteration.
Updates
This policy may be modified to adapt to regulatory or service changes. The current version will always be available on this page.