Privacy Policy

In accordance with the General Data Protection Regulation (EU), the Spanish Organic Law on Data Protection and Guarantee of Digital Rights and the applicable regulations, by accepting this Privacy Policy you are informed that:

• The data controller is ADP Global Marketing Consulting SL, with Tax ID B-66656141 and registered address at Calle de la Font Honrada, 17, 08004 Barcelona, Spain, registered with the Barcelona Commercial Registry.
• Email: info@madeinspain.store.
• Business activity: online sale of Spanish products.

This Privacy Policy applies only to personal data obtained through this website and does not apply to information collected by third parties on other websites, even where those websites are linked from this website.

ADP Global Marketing Consulting SL undertakes to maintain and guarantee commercial relationships securely by protecting personal data and respecting the privacy rights of every user of the website.

These policies are reviewed whenever significant changes occur and at least once a year.

1. WHAT IS PERSONAL DATA?

Personal data is any information relating to an identified or identifiable natural person. This may include name, surname, email address, telephone number, postal address, identification data, payment-related information, IP address, customer number, order information, browsing data or any other information that can identify a person directly or indirectly.

PRINCIPLES FOR DATA PROCESSING

Personal data shall be processed lawfully, fairly and transparently.

Data shall be collected for specified, explicit and legitimate purposes and shall not be further processed in a manner incompatible with those purposes.

Data shall be adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.

Data shall be accurate and, where necessary, kept up to date.

Data shall be kept in a form that permits identification of data subjects only for as long as necessary for the purposes of processing.

Data shall be processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage.

2. PURPOSE, LEGAL BASIS, DATA CATEGORIES, CONSENT AND MINORS

2.1 Purpose

Personal data may be processed for the following purposes:

• To manage registration, identification and user account access.
• To manage purchases, orders, payments, invoices, deliveries, returns, incidents and after-sales service.
• To respond to requests submitted through contact forms, email, telephone, WhatsApp or other communication channels.
• To send transactional communications related to orders, account activity, delivery, payment, support or legal notices.
• To send newsletters, commercial communications, promotions or personalized content where the user has consented or where another lawful basis applies.
• To manage subscriptions, unsubscribe requests and communication preferences.
• To analyze browsing, product interaction, cart activity, checkout behavior, campaign performance and website usage where legally permitted.
• To prevent fraud, abuse, unauthorized access, payment incidents and security risks.
• To comply with accounting, tax, consumer, e-commerce, data protection and other legal obligations.
• To maintain internal records and defend the rights and legitimate interests of ADP Global Marketing Consulting SL.

2.2 Minors

The website is not directed at minors who do not have legal capacity to contract. Minors may not purchase alcoholic products or any product legally restricted by age.

If a minor provides personal data without the required consent of parents or legal guardians, ADP Global Marketing Consulting SL may delete such data as soon as the situation is detected.

2.3 Legal basis

The legal basis for processing may be:

• Performance of a contract or pre-contractual measures requested by the user, for order management, account creation, payment, shipping, returns and support.
• Compliance with legal obligations, including tax, accounting, consumer, e-commerce and data protection obligations.
• Consent, for newsletter subscriptions, non-essential cookies, certain marketing communications or specific forms where consent is requested.
• Legitimate interest, for fraud prevention, website security, service improvement, internal administration, customer care, basic analytics and defense of legal claims, provided that the user's rights do not override such interest.

2.4 Categories of data and purposes

2.4.1 Data collected through the website

Identification and contact data: name, surname, email, telephone number, billing address, shipping address and country.

Account data: username, customer profile, login status, preferences, language, communication settings and account history.

Order data: products purchased, quantities, prices, discounts, shipping costs, payment status, delivery method, order number, invoices, returns, incidents and customer service history.

Payment-related data: payment method, transaction status, authorization references or payment provider confirmation. Full card numbers are processed by external payment providers and are not stored by ADP Global Marketing Consulting SL.

Browsing and technical data: IP address, device, browser, operating system, pages visited, session information, cart actions, checkout events, approximate location derived from IP and cookie identifiers where applicable.

Marketing data: newsletter subscription status, consent, source, campaign interactions, preferences, language, product interests and events used to personalize communications where legally permitted.

Data provided through contact channels: message content, attachments, request type and any data voluntarily provided by the user.

2.5 Retention period

Personal data shall be retained for as long as necessary to fulfil the purpose for which it was collected and, afterwards, for the periods required by law or necessary to respond to possible liabilities.

Order, invoice, accounting and tax data may be retained for the legally required periods. Customer service data may be retained while the request is being processed and during the limitation periods applicable to potential claims. Marketing data shall be retained until the user withdraws consent or objects, unless a longer retention period is legally justified.

2.6 Accuracy and truthfulness of data

The user is responsible for ensuring that the data provided is truthful, accurate, complete and up to date. ADP Global Marketing Consulting SL shall not be liable for consequences arising from inaccurate or outdated data supplied by the user.

3. COMPLIANCE WITH APPLICABLE REGULATIONS

ADP Global Marketing Consulting SL processes personal data in accordance with the General Data Protection Regulation, the Spanish Organic Law on Data Protection and Guarantee of Digital Rights, the Law on Information Society Services and Electronic Commerce, consumer regulations and any other applicable rules.

The company adopts internal procedures and technical measures aimed at ensuring that data processing is carried out in accordance with applicable law.

4. SECURITY MEASURES

ADP Global Marketing Consulting SL applies technical and organizational measures appropriate to the risk in order to protect personal data against destruction, loss, alteration, unauthorized disclosure, unauthorized access or any other unlawful processing.

These measures may include access controls, secure communications, restricted permissions, provider selection, backups, monitoring and internal policies. However, no system connected to the Internet can be considered completely secure.

5. EXERCISE OF RIGHTS

Users may exercise their rights of access, rectification, erasure, restriction of processing, objection, portability and withdrawal of consent by writing to info@madeinspain.store.

The request must identify the user and specify the right being exercised. Where necessary, ADP Global Marketing Consulting SL may request additional information to verify identity.

Users also have the right to file a complaint with the competent data protection authority if they consider that their rights have not been properly addressed.

6. RECIPIENTS AND PROCESSORS

Personal data may be communicated to public administrations, courts, law enforcement authorities or other entities where required by law.

Data may also be accessed by service providers acting as processors, including hosting providers, technology providers, payment gateways, logistics companies, email marketing platforms, analytics providers, customer support tools, accounting or tax advisors and other providers necessary for the operation of the website and fulfilment of orders.

Where providers are located outside the European Economic Area or process data from third countries, ADP Global Marketing Consulting SL shall seek to apply the safeguards required by applicable data protection regulations.

7. DO YOU NOT WISH TO RECEIVE INFORMATION FROM US OR DO YOU WISH TO WITHDRAW CONSENT?

Users may object to receiving commercial communications or withdraw consent at any time by using the unsubscribe mechanisms included in communications or by contacting info@madeinspain.store.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

8. SOCIAL PLUGINS

The website may include links or plugins from social networks and third-party platforms. If the user interacts with such elements, the corresponding third party may process personal data according to its own terms and privacy policy.

ADP Global Marketing Consulting SL is not responsible for data processing carried out directly by such third-party platforms. Users should review the privacy settings and policies of each platform.

9. ACCEPTANCE, CONSENT AND REVOCABILITY

The user declares that they have been informed of the conditions regarding personal data protection and accepts and consents to processing by ADP Global Marketing Consulting SL in the manner and for the purposes indicated in this Privacy Policy, where consent is the applicable legal basis.

Consent may be withdrawn at any time without affecting the lawfulness of previous processing.

10. CHANGES TO THIS PRIVACY POLICY

ADP Global Marketing Consulting SL may modify this Privacy Policy to adapt it to legislative, jurisprudential, technical or operational changes. The updated version will be published on the website.

Users are advised to review this policy periodically.