1. Data controller
[Legal company name, S.L.] (hereinafter, «Cospty»), registered at [Street, number, ZIP, City, Spain], VAT [CIF/NIF], is the data controller for personal data collected through cospty.com. You can reach our Data Protection Officer at [DPO email] or by post at the address above.
2. Data we collect
Identity and contact data (name, email, address, phone), order and billing data, browsing and device data, and any preferences you share. We do not process special-category data unless you explicitly provide it.
3. Purposes and legal basis
Purchase and delivery: performance of the contract (Art. 6.1.b GDPR). Billing and legal duties: legal obligation (Art. 6.1.c). Customer support: legitimate interest (Art. 6.1.f). Marketing: your consent (Art. 6.1.a), withdrawable at any time.
4. Retention
We keep your data for the contractual relationship and up to 5 years for legal obligations (tax, AEAT), unless a longer period is required. Marketing data is kept until you withdraw consent.
5. Recipients
We share data with payment providers (Stripe, PayPal, Bizum), carriers (GLS, Cainiao) and hosting, solely to provide the service. We do not sell your data. Some providers may be outside the EEA; we then apply appropriate safeguards (EU Standard Contractual Clauses).
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability at any time by writing to [DPO email] with your ID. You may also complain to the Spanish AEPD (www.aepd.es).
7. Changes
We may update this policy; the current version is always published on this page.
